Remove "First time logging in? Splunk's default credentials are"

[sloshburch]

Since we have LDAP in place and audit restrictions, I have disabled the system account by backing up passwd to passwd.off and creating an empty passwd file. Unfortunately, this presents the "First time logging in? Splunk's default credentials are" message when navigating to splunk's log in page.

Any ideas on how to disable that message while still having the system account disabled?

[sloshburch · Accepted solution]

Looks like this might be it: http://answers.splunk.com/answers/102966/how-can-i-disable-password-change-request-at-first-time-log...

touch ${SPLUNK_HOME}/etc/.ui_login

[putnamblake]

Shortest and best answer all these years later.

[sloshburch]

Yea, that solved it.