How to log in to Splunk free for the first time?

[brentrmc]

I've downloaded the free version of Splunk locally and I can not seem to log in. I'm able to start it up, go to the default port, and access the login page, but I can't seem to get in from there. I've searched through several similar posts here, but nothing is working. Hoping someone may have other things I can try?

Here's a list of things I've already tried:

• Moving passwd to passwd.bak
• Used the custom username and password I created during setup
• admin/changeme as username and password
• Restarting splunk
• Deleting splunk and reinstalling

Any tips would be much appreciated!

[mayurr98 · Accepted solution]

could you pls try editing $SPLUNK_HOME//etc/system/local/user-seed.conf file

[user_info]
USERNAME = admin
PASSWORD = changeme

and then restart splunk and try login in.
If this file doesn't exist then crate with the name user-seed.conf

[brentrmc]

This worked! Thanks so much!

[ChrisG]

Just adding a note to say that this question is about the Splunk Enterprise trial, not Splunk Free. The free product does not have user names and passwords.

[sloshburch]

To that end, I removed the misleading tag from the question.

[brentrmc]

Interesting, I'm almost positive I downloaded Splunk Free..

Thanks for the feedback though. I'll pay closer attention next time.

[ChrisG]

When you first download, you get a Splunk Enterprise trial license. When the trial period expires, it switches to the Splunk Free license. See About Splunk Free for more information.

[brentrmc]

Awesome info, thanks!