Splunk User Behavior Analytics

How to reset admin password of Splunk UBA's webui

archip
Engager

Hello,

I unfortunately lost my webui password for admin account. What is the way to reset it ? I mean I know that on Splunk enterprise, there is used-seed, rest-api and even cli command but I can't find any clue about Splunk UBA.

Thanks for the help

Labels (3)
0 Karma

archip
Engager

Hello,

Splunk support helped me and gave me the solution.

there is no feature to easily reset the password for a user. The admin needs to update it directly in de database :

su caspida

psql -d caspidadb

update accounts set password=md5('changeme') where email='admin';

Replace "admin" with your username and "changeme" with chosen password.

 

Get Updates on the Splunk Community!

Update Your SOAR Apps for Python 3.13: What Community Developers Need to Know

To Community SOAR App Developers - we're reaching out with an important update regarding Python 3.9's ...

October Community Champions: A Shoutout to Our Contributors!

As October comes to a close, we want to take a moment to celebrate the people who make the Splunk Community ...

Automatic Discovery Part 2: Setup and Best Practices

In Part 1 of this series, we covered what Automatic Discovery is and why it’s critical for observability at ...