For CentOS 6.x with splunk forwarder version 7.2.1 I use the following commands to update the passwords of splunk users. service splunk stop /path/to/splunkforwarder/bin/splunk edit user <username> -password <new_password> service splunk start , service splunk stop /path/to/splunkforwarder/bin/splunk edit user -password service splunk start ... View more