Security

admin account lockout

anoopambli
Communicator

Today we were unable to login to our splunk instance using the admin account. Had to reset the account using this procedure http://answers.splunk.com/answers/834/how-could-i-reset-the-admin-password. Everything is all set now but i am keen to understand what really messed up the admin account. Any logs you suggest which i can go through...?

Tags (1)
0 Karma

grijhwani
Motivator

I'd suggest the password of record was not the actual password, unless you have direct evidence to the contrary. Did you keep the original password file intact, whith file date etc? Forensics are difficult once the evidence has been altered.

0 Karma

anoopambli
Communicator

Experts any ideas???

0 Karma
Get Updates on the Splunk Community!

Observability Unveiled: Navigating OpenTelemetry's Framework and Deployment Options

Observability Unveiled: Navigating OpenTelemetry's Framework and Deployment Options A recent Tech Talk, ...

Observability | How to Think About Instrumentation Overhead (White Paper)

Novice observability practitioners are often overly obsessed with performance. They might approach ...

Cloud Platform | Get Resiliency in the Cloud Event (Register Now!)

IDC Report: Enterprises Gain Higher Efficiency and Resiliency With Migration to Cloud  Today many enterprises ...