Splunk Enterprise

Forget username & password- How do I reset?

paragpatwardhan
New Member

Hi Team,

I have forgotten your username or password. Please help me how to reset password in splunk enterprise.

 

Screenshot from 2023-05-04 15-44-22.png

Labels (1)
0 Karma

SanjayReddy
SplunkTrust
SplunkTrust

Hi @paragpatwardhan 

By looking at screenshot you are using Splunk on windows system

please follow below steps to reset password
go to  <SPlunk installation directory>\Splunk\etc\ 

under this location file called passwd 


rename it to passwd.backup 

go to following location 

<SPlunk installation directory>\Splunk\etc\system\local

create new file user-seed.conf  its shoul look like this 

SanjayReddy_0-1683265408072.png


tip: copy any existing file in same location and paste in samelocation it will create duplication file and try renaming it to user-seed

inside user-seed file 

add following contents 

[user_info]
USERNAME = admin
PASSWORD = <newpassword>

and restart splunk from cmd 

<SPlunk installation directory>\Splunk\bin

splunk restart 



----
Regards,
Sanjay Reddy

----
If this reply helps you, Karma would be appreciated

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...

Design, Compete, Win: Submit Your Best Splunk Dashboards for a .conf26 Pass

Hello Splunkers,  We’re excited to kick off a Splunk Dashboard contest! We know that dashboards are a primary ...

May 2026 Splunk Expert Sessions: Security & Observability

Level Up Your Operations: May 2026 Splunk Expert Sessions Whether you are refining your security posture or ...