Security
Highlighted

How to Reset the Admin password?

Splunk Employee
Splunk Employee

I just realized that I lost the Admin password and I need a way to access the system, with my Admin credentials.

Highlighted

Re: How to Reset the Admin password?

Splunk Employee
Splunk Employee

To reset the admin password you will need to have access to the file system:
- move the $SPLUNK_HOME/etc/passwd file to passwd.bak
- restart splunk. After the restart you should be able to login using the default login (admin/changeme).

If you created other user accounts, copy those entries from the backup file into the new passwd file and restart splunk.

Highlighted

Re: How to Reset the Admin password?

New Member

It´s very simple 😉

Thanks brother !!

0 Karma
Highlighted

Re: How to Reset the Admin password?

New Member

I know iSeePassword windows password recovery program can reset password for Widows 7,8 and 10.
but you need a USB or DVD.
ttp://www.iseepassword.com/how-to-reset-windows-7-password.html

0 Karma
Highlighted

Re: How to Reset the Admin password?

New Member

I have mac, would it be the same for me?

0 Karma
Highlighted

Re: How to Reset the Admin password?

New Member

I cannot find a passwd file under $SPLUNK_HOME/etc. I'm unable to login to splunk the first time itself with admin and change me credentials

Jophy

0 Karma
Highlighted

Re: How to Reset the Admin password?

New Member

If you are installing a splunk server (search, index, deploy) likely the splunk client software is running and using the same port. You need to remove the the following file:

mv /opt/splunkforwarder/etc/passwd /opt/splunkforwarder/etc/passwd.bak

Or

On Ubuntu
dpkg -l splunkforwarder (list the package)
dpkg -r splunkforwarder (remove the package)

Try login after, it should take admin/changeme.

0 Karma
Highlighted

Re: How to Reset the Admin password?

Engager

Hey, I tried this but it does not seem to work. It says wrong password upon entering 'changeme'. By 'moving' passwd to passwd.bak do you mean renaming it? (I'm using Windows OS, not using any command shell). Please help.

Highlighted

Re: How to Reset the Admin password?

Path Finder

Yes, you need to rename the file and then restart the splunk service.

Highlighted

Re: How to Reset the Admin password?

Engager

Hi, This question has been asked several times because the answer is bit confusing. It says moving passwd file to passwd.bak. What does this mean??

I can find passwd file but what is this passdw.bak? and where to find it, must be a folder where this file will be moved? Or do we have to just change the fle extension?

Please help, Thanks.

0 Karma