Splunk Enterprise

How to log in to Splunk Web as an admin after trial license has expired and forgotten credentials?

xzp521
New Member

My Enterprise Trial license has expired. How can I log into Splunk Web as the admin use? I don't know the username and password. 

---- Below is steps to switch licensing ----

You can change from the Enterprise Trial license to a Free license at any time. To switch licenses:

  1. Log in to Splunk Web as a user in the admin role
  2. Select Settings > Licensing
  3. Click Change License Group
  4. Select Free license
  5. Click Save
  6. You are prompted to restart

    If your Enterprise Trial license has expired, use the above procedure except that you can only log into Splunk Web as the admin user. No other credentials will work.

  7.  
  8.  
  9.  
  10.  
  11.  
Labels (1)
Tags (2)
0 Karma

Nisha18789
Builder

Hello @xzp521 , you can try this 

a) Move the existing passwd file: $SPLUNK_HOME/etc/passwd to a backup location.
b) Create a user-seed.conf file in $SPLUNK_HOME/etc/system/local containing the username and new password
[user_info]
USERNAME = admin
PASSWORD = <password>
c) Restart Splunk and login with above set credentials.
d) A new set of pwd will be created by Splunk in etc/passwd file and user-seed.conf file should be deleted by Splunk. Now, merge the backup of passwd file with new etc/passwd file with

0 Karma
Get Updates on the Splunk Community!

Digital Resilience Assessment Launch | How prepared are you for disruption?

Disruption is inevitable. The question is – how prepared are you to handle it? In today’s fast-moving digital ...

Buttercup Games: Further Dashboarding Techniques (Part 2)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...

Index This | What is the next number in the series? 7,645 5,764 4,576…

February 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...