- Splunk Answers
- :
- Splunk Administration
- :
- Security
- :
- Unable to execute commands on CLI splunk
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Unable to execute commands on CLI splunk
Hi All:
I am unable to execute any commands on CLI Splunk Instance. Whenever I try to execute any commands the screen freezes. I can navigate to folders without any latency issues, the issue is with executing splunk commands. For instance, I am executing command on the CLI to change the default splunk admin password and the screen freezes.
./splunk edit user admin -password 'foo' -auth admin:changeme
Any assistance will be appreciated.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
It is prompting you for user password so add this to the end of your commands that do this:
... -auth splunk:changeme
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Could you please post the complete command.
Does it need to be:
./splunk edit user admin -password 'foo' -auth admin:changeme
./splunk edit user admin -password 'foo' -role admin -auth admin:changeme
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Like this:
./splunk edit user admin -password newPassowrd -auth admin:changeme
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
This assumes that you have not (yet) changed the default password.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
This is windows, right? You need to open your app ( cmd or whatever; I use mobaXterm) as Admin (right click and select Run as administrator ).
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
This is not windows. This is on Linux.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Does it ever come back and respond? What are you doing to get back and run another command?
Other non splunk commands run fine on the machine? Check the health of the machine? Disk, memory etc..,
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Apparently, there is no resource constraint on the servers. They were rebooted. Also I am able to execute the following commands without any difficulty ./splunk status, ./splunk restart ./splunk version etc. I am having problem issuing command to modify the default splunk admin credentials or list the monitoring inputs , i.e ./splunk list monitor. These commands just hang and do not provide any response. I have stopped the splunk universal forwarder service on these servers and started them back up and then issued the commands ( for modifying password , listing file monitors) but the commands hang up and do not respond
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
We are using splunk universal forwarder version 6.6.1
Introducing the 2024 SplunkTrust!
Introducing the 2024 Splunk MVPs!
Splunk Custom Visualizations App End of Life
