admin password reset did not work

[ayamin]

I have previously installed Splunk (a year or so ago) and recently installed v4.3.3 on top of it. But, I have forgotten the admin password, I have attempted to reset it by renaming C:\Program Files\Splunk\etc\passwd to passwd.bak, but I still could not login as admin/changeme. Please advise, thanks.

[kallu]

Did you remember to restart Splunk after removing the passwd? At startup Splunk will notice missing passwd and create you a new one with admin/changeme.

[ayamin]

Thanks for the prompt reply. Good point. I did splunkd.exe stop and renamed the passwd and then start and it did the trick. Thanks!