Trying to log in after Splunk timed out, why am I getting "Invalid username or password", even after resetting my login information?

[Scan001]

Splunk was up and running but it timed out and I had to log in again. I got rejected a couple of times and reset my name and password on Splunk.com in my account section. I have stopped the App, closed the terminal window and restated the app again. I'm still getting a "Invalid username or password." prompt and cannot access my projects. Any advise please.

[mgildenhorn_spl · Accepted solution]

all you would need to do is:

1. Go to the splunk bin directory (typically /opt/splunk/bin). stop splunk by typing 'splunk stop'
2. Go to the splunk etc directory (typically /opt/splunk/etc). move the passwd file to some other name like passwd.old
3. Then go back to the bin directory and start back up by typing 'splunk start'
4. Then you should be able to log back in using admin/changme.

This is of course assuming nothing else license wise is going on.

[Scan001]

Excellent, got it to work. Thanks for the help, As a newby, it was great to get such a speedy response.

[mgildenhorn_spl]

A Splunk instance running locally DOES NOT use the credentials set up on the splunk.com website. If it is a default setup, the default username is 'admin' and the password is 'changeme'. Exclude the single quotes though.

[Scan001]

Thanks again. This link did not work for me. I'm using a Mac and the start command is not being recognised. I see in the /etc/ folder a master.passwd file.Does this contain the default password. I don't want to touch it unless I'm sure.

[mgildenhorn_spl]

If you are the only user on the system and you are not using LDAP credentials to login, you could always reset the authentication. Here is a link to another post on how to do that:

https://answers.splunk.com/answers/108654/cannot-login-already-tried-the-admin-changeme-thing.html

[Scan001]

Thanks for the answer, my mistake I though I could reset it on the website. I have tried the 'admin' and 'changeme' combination and I'm still getting rejected. Do I need to re-download the App and start again?