How to troubleshoot why we are unable to log in to Splunk Web?

[sahils]

We are not able to log in to Splunk Web. We are able to log in on Box putty with the same username and password, but we are not able to log in web console on same server.

https://<servername>:8000/en-US/account/login?return_to=%2Fen-US%2F

We restarted Splunk Services on the server and tried to log in, but getting error invalid username and Password.

Can you please help?

Thanks,
Sahil

[sloshburch]

Sounds like you are trying to use your SSH credentials to log into the splunkweb UI. It is very likely that your web UI credentials are different than your SSH credentials.

If this is a new install of splunk, then try username=admin and password=changeme in splunkweb.
If this is not a new install of splunk, check $SPLUNK_HOME/etc/passwd to see what accounts were set up (the passwords are encrypted).

If you are the admin, its possible you, or someone one your team, decided to change the default password for the user 'admin'. In that case, backup $SPLUNK_HOME/etc/passwd (by renaming it) and restart splunk. A new $SPLUNK_HOME/etc/passwd file will be generated with the default username/password (mentioned above).

[jplumsdaine22]

If your server username passwords works, but it doesn't work for splunk, and you are certain that it should, have a look at the setting in the authentication.conf file. It sounds like your LDAP connection is not functioning correctly.

[jplumsdaine22]

You might want to ask the admins at Amgen

[Richfez]

"Same username and password" but you didn't tell us which usernames you tried.

The defaults are a username of admin and password of changeme.

[sahils]

Iam using my login Id which i created and shows invalid username and password.

[splunkleon]

did you find a solution ? also seem to be experiencing the same problem  in my case the username and password are the ones i used when installing splunk enterprise after accepting licence agreement. anyone?