Security

How to troubleshoot why we are unable to log in to Splunk Web?

sahils
New Member

We are not able to log in to Splunk Web. We are able to log in on Box putty with the same username and password, but we are not able to log in web console on same server.

https://<servername>:8000/en-US/account/login?return_to=%2Fen-US%2F

We restarted Splunk Services on the server and tried to log in, but getting error invalid username and Password.

Can you please help?

Thanks,
Sahil

0 Karma

sloshburch
Splunk Employee
Splunk Employee

Sounds like you are trying to use your SSH credentials to log into the splunkweb UI. It is very likely that your web UI credentials are different than your SSH credentials.

If this is a new install of splunk, then try username=admin and password=changeme in splunkweb.
If this is not a new install of splunk, check $SPLUNK_HOME/etc/passwd to see what accounts were set up (the passwords are encrypted).

If you are the admin, its possible you, or someone one your team, decided to change the default password for the user 'admin'. In that case, backup $SPLUNK_HOME/etc/passwd (by renaming it) and restart splunk. A new $SPLUNK_HOME/etc/passwd file will be generated with the default username/password (mentioned above).

jplumsdaine22
Influencer

If your server username passwords works, but it doesn't work for splunk, and you are certain that it should, have a look at the setting in the authentication.conf file. It sounds like your LDAP connection is not functioning correctly.

0 Karma

jplumsdaine22
Influencer

You might want to ask the admins at Amgen

0 Karma

Richfez
SplunkTrust
SplunkTrust

"Same username and password" but you didn't tell us which usernames you tried.

The defaults are a username of admin and password of changeme.

sahils
New Member

Iam using my login Id which i created and shows invalid username and password.

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...