Hi, i installed the trial version of Splunk on a Linux machine and tried loggin to the url in the browser. The default user name and Pwd for 1st time user which is 'admin' and 'changeme' respectively is not working. Can someone help me on this?

[raghavjha73]

Hi, i installed the trial version of Splunk on a Linux machine and tried logging to the url in the browser. The default user name and Pwd for 1st time user which is 'admin' and 'changeme' respectively is not working. Can someone help me on this?

[skoelpin · Accepted solution]

You can simply wipe the passwd file on the server to reset the password

/opt/splunk/etc/passwd then restart Splunk and it will have the default admin/changeme credentials

[raghavjha73]

Thanks. I renamed the passwd file to some other name and then restarted the server. Able to login now.

[raghavjha73]

i installed splunk forwarder and tried to run below command : ./splunk enable boot-start --accept-license.

I got below error:
This appears to be your first time running this version of Splunk.
Can't create RC file "/etc/init.d/splunk": Permission denied

Is there a way that the RC file is created in some different path because i don't have access to add/modify any files in /opt or /etc folder.

[skoelpin]

Please accept the answer if this helped you

[raghavjha73]

[lloydknight]

does it shows Invalid username or password upon Signing in?

[raghavjha73]

yes it is showing invalid username and pwd