Security

I've lost my splunk admin password, can it be recovered?

jrodman
Splunk Employee
Splunk Employee

My dog ate my splunk admin password. Can I recover it?

Tags (1)
1 Solution

Lionel
Splunk Employee
Splunk Employee

To reset the admin password you will need to have access to the file system: - move the $SPLUNK_HOME/etc/passwd file to passwd.bak - restart splunk. After the restart you should be able to login using the default login (admin/changeme).

If you created other user accounts, copy those entries from the backup file into the new passwd file and restart splunk.

It is already answered here:

View solution in original post

Lionel
Splunk Employee
Splunk Employee

To reset the admin password you will need to have access to the file system: - move the $SPLUNK_HOME/etc/passwd file to passwd.bak - restart splunk. After the restart you should be able to login using the default login (admin/changeme).

If you created other user accounts, copy those entries from the backup file into the new passwd file and restart splunk.

It is already answered here:

jrodman
Splunk Employee
Splunk Employee

oops! Perhaps mine should be deleted then.

0 Karma
Get Updates on the Splunk Community!

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...

Adoption of Infrastructure Monitoring at Splunk

  Splunk's Growth Engineering team showcases one of their first Splunk product adoption-Splunk Infrastructure ...