Splunk Enterprise

How to log in to Splunk Web as an admin after trial license has expired and forgotten credentials?

xzp521
New Member

My Enterprise Trial license has expired. How can I log into Splunk Web as the admin use? I don't know the username and password. 

---- Below is steps to switch licensing ----

You can change from the Enterprise Trial license to a Free license at any time. To switch licenses:

  1. Log in to Splunk Web as a user in the admin role
  2. Select Settings > Licensing
  3. Click Change License Group
  4. Select Free license
  5. Click Save
  6. You are prompted to restart

    If your Enterprise Trial license has expired, use the above procedure except that you can only log into Splunk Web as the admin user. No other credentials will work.

  7.  
  8.  
  9.  
  10.  
  11.  
Labels (1)
Tags (2)
0 Karma

Nisha18789
Builder

Hello @xzp521 , you can try this 

a) Move the existing passwd file: $SPLUNK_HOME/etc/passwd to a backup location.
b) Create a user-seed.conf file in $SPLUNK_HOME/etc/system/local containing the username and new password
[user_info]
USERNAME = admin
PASSWORD = <password>
c) Restart Splunk and login with above set credentials.
d) A new set of pwd will be created by Splunk in etc/passwd file and user-seed.conf file should be deleted by Splunk. Now, merge the backup of passwd file with new etc/passwd file with

0 Karma
Get Updates on the Splunk Community!

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...

Share Your Ideas & Meet the Lantern team at .Conf! Plus All of This Month’s New ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...