Splunk Enterprise

Splunk Not Starting - Cant Log in

lucoot
New Member

Windows 7 64Bit

Splunk ran after first installating. After reset, I am unable to start it.
When I run "Splunk.exe" command prompt opens for a flash and mentions "access to RegCreatKeyEx denied".
No splunk services are running at all after executing.
When I attempt to log in it states "invalid username and password"

Here is the splunkd.log
05-29-2014 13:49:02.066 -0700 ERROR AuthenticationManagerSplunk - Login failed. Incorrect Login for user: admin
05-29-2014 13:56:45.463 -0700 ERROR UserManagerPro - Login failed for unknown user="lucoot""

Tags (1)
0 Karma

adilsonbna
New Member

I've got the same issue. It not admin password from Splunk server. Login admin and password is default by client one.

I just used command
./splunk add forward-server :9997

Splunk username: admin
Password: changeme
Added forwarding to: xx.xx.xx.xxx:9997.

It works!

0 Karma

lucoot
New Member

I am using it through the browser, that is how I am typing in my password and username. Which do not work.
The service is running, I was mistakenly looking at running applications.

Thanks

0 Karma

lguinn2
Legend

This is not how you start Splunk. On Windows, Splunk runs as a service. Go to the Services panel and start Splunk from there.

To login to Splunk, you must use a web browser. In Firefox or IE, for example, you could do this:

http://hostname:8000

where hostname is the domain name of the machine where you installed Splunk. The default user name is admin and the initial password is changeme.

There will not be a user named lucoot unless you created a user by that name. If you are unsure, go to the directory where you installed Splunk (call it splunk_home) and then go to the etc subdirectory and look at the file called passwd

type splunk_home\etc\passwd

You won't be able to see the passwords, since they are encrypted, but at least you will be able to see what users exist.
If you have forgotten the password, you can reset it following the directions here: How could I reset the Admin password?

0 Karma

lucoot
New Member

I am using it through the browser, that is how I am typing in my password and username. Which do not work. Sorry, the service is running, I was mistakenly looking at running applications.

Thanks!

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Index This | What travels the world but is also stuck in place?

April 2026 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Discover New Use Cases: Unlock Greater Value from Your Existing Splunk Data

Realizing the full potential of your Splunk investment requires more than just understanding current usage; it ...

Continue Your Journey: Join Session 2 of the Data Management and Federation Bootcamp ...

As data volumes continue to grow and environments become more distributed, managing and optimizing data ...