Reset password in splunk for admin

[syazwani]

Hi, how can we reset password for admin user from CLI. Currently i have indexer using Splunk 9.1.1 in testing environment and i forgot the username and password. There were some bin command that will prompt for Splunk username and password, so i need to reset the username and password. Please help. Thank you.

[SanjayReddy]

Hi @syazwani 

please follow below steps to reset password
go to  <SPlunk installation directory>/splunk/etc/ 

under this location file called passwd 

rename it to passwd.backup 

go to following location 

<SPlunk installation directory>/splunk/etc/system/local

create new file user-seed.conf 
inside user-seed file 

add following contents 

[user_info]
USERNAME = admin
PASSWORD = <newpassword>

and restart splunk from cmd 

<SPlunk installation directory>/splunl/bin/

splunk restart 

----
Regards,
Sanjay Reddy

----
If this reply helps you, Karma would be appreciated