Splunk User Behavior Analytics

How to reset admin password of Splunk UBA's webui

archip
Engager

Hello,

I unfortunately lost my webui password for admin account. What is the way to reset it ? I mean I know that on Splunk enterprise, there is used-seed, rest-api and even cli command but I can't find any clue about Splunk UBA.

Thanks for the help

Labels (3)
0 Karma

archip
Engager

Hello,

Splunk support helped me and gave me the solution.

there is no feature to easily reset the password for a user. The admin needs to update it directly in de database :

su caspida

psql -d caspidadb

update accounts set password=md5('changeme') where email='admin';

Replace "admin" with your username and "changeme" with chosen password.

 

Get Updates on the Splunk Community!

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

🔐 Trust at Every Hop: How mTLS in Splunk Enterprise 10.0 Makes Security Simpler

From Idea to Implementation: Why Splunk Built mTLS into Splunk Enterprise 10.0  mTLS wasn’t just a checkbox ...