Why did Login failed when adding splunk universal forwarder?

[Poojitha]

Hi All,

I am trying to install splunk universal forwarder. While adding the forwarder its asking for admin. username and password :

command : /opt/splunkforwarder/bin/splunk add forward-server

I checked results on the google and tried the default credentials admin/changeme. Its not working.

I am installing this UF on ec2 linux instance. I am stuck with the login failure here. 

Please anyone help me on this.

Thanks in Advance,
Poojitha NV

[tshah-splunk · Accepted solution]

Hello @Poojitha ,

The credentials that you need to add here are the credentials that you set initially when Splunk was set up and started in your instance. You can refer to previous questions on the community on steps to do if admin creds were lost - https://community.splunk.com/t5/Security/How-to-Reset-the-Admin-password/m-p/10622.

[Poojitha]

Thanks @tshah-splunk .