Trying to log into splunk, this is my first time putting it on my personal cpu. I have a business account through my job. when i try logging in my password will not work and it says the license is expired.
Hi @br0wall
Is this a new insallation of Splunk on your device? Splunk provides a 60-day trial until you need to change it to the free version.
Is the instance on your own device connected to the license manager within your company, or is this a standalone instance?
If this is a development instance the you could look at applying for a developer license at https://dev.splunk.com/enterprise/dev_license/
Alternative you could completely remove and re-install Splunk, however depending on your usecase this might not be an option - Note, you would lose all existing data!
Nevertheless, this wont help you login. To reset the admin credentials for your Splunk instance follow the following instructions:
Find the passw file for your instance ($SPLUNK_HOME/etc/passwd) and rename it to passwd.bk
Create a file named user-seed.conf in your $SPLUNK_HOME/etc/system/local/ directory.
In the file add the following text:
[user_info]
PASSWORD = NEW_PASSWORD
In the place of "NEW_PASSWORD" insert the password you would like to use.
Start Splunk Enterprise and use the new password to log into your instance from Splunk Web.
Alternatively run the following:
$SPLUNK_HOME/bin/splunk cmd splunkd rest --noauth POST /services/admin/users/admin "password=<your password>"
For more info see https://docs.splunk.com/Documentation/Splunk/9.4.2/Security/Secureyouradminaccount#:~:text=ASCII%20c...
🌟 Did this answer help you? If so, please consider:
Your feedback encourages the volunteers in this community to continue contributing
If you want to remove those messages, you have two options:
1 - connect your instance to Splunk License Master from your company
2 - Purchase a license for your personal splunk box
Note: If you select the option 1, please carefully about the data your are sending to this instance, because all the data that you indexed in your personal box will count against the company license, and maybe you can reach the day capacity license.
https://docs.splunk.com/Documentation/Splunk/latest/Admin/HowSplunklicensingworks
Please read this document where you can have more details about how splunk is being licensing.
NOTE:
As I said, Splunk Entrerprise Trial Licence is valid for 60 days , I would suggest do complete uninstalltion of splunk in local system and try to install again.
Link to download
https://www.splunk.com/en_us/download/splunk-enterprise.html
also you can monitor license usgae using
https://docs.splunk.com/Documentation/Splunk/latest/Admin/AboutSplunksLicenseUsageReportView