Believe me, I appreciate the 'quick start' documentation that doesn't go through all the onerous in's and out's of everything before you can get something up and running. The issue is as I stated, there are a few things missing, such as ./splunk start, and the password issue. If there is a default password of 'changeme' then obviously it should be changed as a step 1.
In San Diego, a TV station didn't change their default password for their emergency alert SCADA system, and the next thing they knew there was an interruption of local TV news from the emergency broadcast system describing a zombie outbreak and advising residents to stay indoors! In best Sys Admin practice world it should be well known by now, one does not change passwords like 'admin:changeme' if they want to, rather that should be the very first thing you do and documentation from software vendors should support that regardless of what they're protecting.
At first I thought it was my splunk login I should have been using. It's still not clear to me if that admin account exists locally on the machine or in the Splunk server/cloud account. It's just some mysterious account called admin that's securing I have no idea what. As a new user, I shouldn't have to start at the beginning of the full documentation to figure out how to change a password for something that's so painfully obvious.
Thanks for considering a documentation update for this.
... View more