admin password reset did not work

Loves-to-Learn Everything

I have previously installed Splunk (a year or so ago) and recently installed v4.3.3 on top of it. But, I have forgotten the admin password, I have attempted to reset it by renaming C:\Program Files\Splunk\etc\passwd to passwd.bak, but I still could not login as admin/changeme. Please advise, thanks.

Tags (3)
0 Karma


Did you remember to restart Splunk after removing the passwd? At startup Splunk will notice missing passwd and create you a new one with admin/changeme.

Loves-to-Learn Everything

Thanks for the prompt reply. Good point. I did splunkd.exe stop and renamed the passwd and then start and it did the trick. Thanks!

0 Karma
Get Updates on the Splunk Community!

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...

Ready, Set, SOAR: How Utility Apps Can Up Level Your Playbooks!

 WATCH NOW Powering your capabilities has never been so easy with ready-made Splunk® SOAR Utility Apps. Parse ...

DevSecOps: Why You Should Care and How To Get Started

 WATCH NOW In this Tech Talk we will talk about what people mean by DevSecOps and deep dive into the different ...