Security

How to troubleshoot why we are unable to log in to Splunk Web?

New Member

We are not able to log in to Splunk Web. We are able to log in on Box putty with the same username and password, but we are not able to log in web console on same server.

https://<servername>:8000/en-US/account/login?return_to=%2Fen-US%2F

We restarted Splunk Services on the server and tried to log in, but getting error invalid username and Password.

Can you please help?

Thanks,
Sahil

0 Karma

Ultra Champion

Sounds like you are trying to use your SSH credentials to log into the splunkweb UI. It is very likely that your web UI credentials are different than your SSH credentials.

If this is a new install of splunk, then try username=admin and password=changeme in splunkweb.
If this is not a new install of splunk, check $SPLUNK_HOME/etc/passwd to see what accounts were set up (the passwords are encrypted).

If you are the admin, its possible you, or someone one your team, decided to change the default password for the user 'admin'. In that case, backup $SPLUNK_HOME/etc/passwd (by renaming it) and restart splunk. A new $SPLUNK_HOME/etc/passwd file will be generated with the default username/password (mentioned above).

Influencer

If your server username passwords works, but it doesn't work for splunk, and you are certain that it should, have a look at the setting in the authentication.conf file. It sounds like your LDAP connection is not functioning correctly.

0 Karma

Influencer

You might want to ask the admins at Amgen

0 Karma

SplunkTrust
SplunkTrust

"Same username and password" but you didn't tell us which usernames you tried.

The defaults are a username of admin and password of changeme.

New Member

Iam using my login Id which i created and shows invalid username and password.

0 Karma