We are not able to log in to Splunk Web. We are able to log in on Box putty with the same username and password, but we are not able to log in web console on same server.
We restarted Splunk Services on the server and tried to log in, but getting error invalid username and Password.
Can you please help?
Sounds like you are trying to use your SSH credentials to log into the splunkweb UI. It is very likely that your web UI credentials are different than your SSH credentials.
If this is a new install of splunk, then try username=admin and password=changeme in splunkweb.
If this is not a new install of splunk, check
$SPLUNK_HOME/etc/passwd to see what accounts were set up (the passwords are encrypted).
If you are the admin, its possible you, or someone one your team, decided to change the default password for the user 'admin'. In that case, backup
$SPLUNK_HOME/etc/passwd (by renaming it) and restart splunk. A new
$SPLUNK_HOME/etc/passwd file will be generated with the default username/password (mentioned above).
If your server username passwords works, but it doesn't work for splunk, and you are certain that it should, have a look at the setting in the authentication.conf file. It sounds like your LDAP connection is not functioning correctly.