Restore Splunk user account

[uagraw01]

Hello Splunkers!!

After resetting my admin password, the users' accounts are gone and they are not visible in the UI. How can I restore all those user login accounts?

In the above picture from the backend I can see the users. but from the UI no user account is visible.

[richgalloway]

How did you reset the admin password?

[uagraw01]

@richgalloway Rename the passwrd file under /etc/system and change the password under user-seed.conf file for admin user.

[richgalloway]

I thought that was how it was done.  The user accounts are still in the renamed passwd file.  Put it back (after transferring the admin password from the new passwd file), restart, and the accounts should be restored.

[uagraw01]

 @richgalloway 

I changed the file name twice while troubleshooting and now I think the original password file is lost.

[richgalloway]

If that's the case then you'll have to restore the file from a backup.