Security

Script for Splunk admin password change

inayath_khanin1
Explorer

Hi Folks, 

 

Can anyone please help me with a script that help to change splunk admin password across 100 servers? It should prompt what password to change with.

 

Thanks in advance 

Labels (1)
0 Karma
1 Solution

codebuilder
Influencer

You can use bash or python (amongst others) to create a script that incorporates the API or CLI examples  provided.

----
An upvote would be appreciated and Accept Solution if it helps!

View solution in original post

inayath_khanin1
Explorer

@codebuilder We are actually looking for a script that can be run one one server to change the password of rest servers. can u pls help us with this

0 Karma

codebuilder
Influencer

You can use bash or python (amongst others) to create a script that incorporates the API or CLI examples  provided.

----
An upvote would be appreciated and Accept Solution if it helps!

codebuilder
Influencer

If you want the user to be prompted you can do this via the CLI (obviously change your user name and admin password):

splunk edit user test_user -force-change-pass true -auth admin:changeme

Or via the API:

curl -k -u admin:changeme https://localhost:8089/services/authentication/users/test_user -d force-change-pass=true

Or if you want to set the new password outright:

splunk edit user <username> -auth admin:<admin_password> -password <password>

----
An upvote would be appreciated and Accept Solution if it helps!
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

From Data to Insight: Announcing the Winners of the Splunk Dashboard Contest

Hi Splunkers, First off, thank you to everyone who participated in our very first From Data to Insight: The ...

Splunk Developers: Construct Your Future at the .conf26 Builder Bar

Calling all Splunk architects, platform admins, and app developers: the site is open, and the blueprints are ...

Quick connection discovery mode for forwarders

When a Splunk forwarder loses connectivity to its indexers, it does not always reconnect immediately. In many ...