Security

Unable to execute commands on CLI splunk

mmohiuddin1512
Explorer

Hi All:

I am unable to execute any commands on CLI Splunk Instance. Whenever I try to execute any commands the screen freezes. I can navigate to folders without any latency issues, the issue is with executing splunk commands. For instance, I am executing command on the CLI to change the default splunk admin password and the screen freezes.

./splunk edit user admin -password 'foo' -auth admin:changeme

Any assistance will be appreciated.

0 Karma

woodcock
Esteemed Legend

It is prompting you for user password so add this to the end of your commands that do this:

... -auth splunk:changeme
0 Karma

mmohiuddin1512
Explorer

Could you please post the complete command.

Does it need to be:

./splunk edit user admin -password 'foo' -auth admin:changeme

./splunk edit user admin -password 'foo' -role admin -auth admin:changeme

0 Karma

woodcock
Esteemed Legend

Like this:

./splunk edit user admin -password newPassowrd  -auth admin:changeme 
0 Karma

woodcock
Esteemed Legend

This assumes that you have not (yet) changed the default password.

0 Karma

woodcock
Esteemed Legend

This is windows, right? You need to open your app ( cmd or whatever; I use mobaXterm) as Admin (right click and select Run as administrator ).

0 Karma

mmohiuddin1512
Explorer

This is not windows. This is on Linux.

0 Karma

pradeepkumarg
Influencer

Does it ever come back and respond? What are you doing to get back and run another command?
Other non splunk commands run fine on the machine? Check the health of the machine? Disk, memory etc..,

0 Karma

mmohiuddin1512
Explorer

Apparently, there is no resource constraint on the servers. They were rebooted. Also I am able to execute the following commands without any difficulty ./splunk status, ./splunk restart ./splunk version etc. I am having problem issuing command to modify the default splunk admin credentials or list the monitoring inputs , i.e ./splunk list monitor. These commands just hang and do not provide any response. I have stopped the splunk universal forwarder service on these servers and started them back up and then issued the commands ( for modifying password , listing file monitors) but the commands hang up and do not respond

0 Karma

mmohiuddin1512
Explorer

We are using splunk universal forwarder version 6.6.1

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...

After a whole week of being on call, you fell asleep on your keyboard, and you hit a sequence of buttons that ...