Security

I've lost my splunk admin password, can it be recovered?

jrodman
Splunk Employee
Splunk Employee

My dog ate my splunk admin password. Can I recover it?

Tags (1)
1 Solution

Lionel
Splunk Employee
Splunk Employee

To reset the admin password you will need to have access to the file system: - move the $SPLUNK_HOME/etc/passwd file to passwd.bak - restart splunk. After the restart you should be able to login using the default login (admin/changeme).

If you created other user accounts, copy those entries from the backup file into the new passwd file and restart splunk.

It is already answered here:

View solution in original post

Lionel
Splunk Employee
Splunk Employee

To reset the admin password you will need to have access to the file system: - move the $SPLUNK_HOME/etc/passwd file to passwd.bak - restart splunk. After the restart you should be able to login using the default login (admin/changeme).

If you created other user accounts, copy those entries from the backup file into the new passwd file and restart splunk.

It is already answered here:

jrodman
Splunk Employee
Splunk Employee

oops! Perhaps mine should be deleted then.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...