All, I am having some authentication issue.  If I run Splunk command in the Command Prompt, I was able to logon as admin.  However, when I tried to logon as admin through the web UI, it failed to authenticate.  Also, I am not able to logon using my AD account neither.   I tried resetting admin password and new password worked in Command Prompt, but not Web UI. When I looked at the splunkd.log file, I noticed that it has always tried to forward the username (even admin) to LDAP server and then failed saying invalid username.  I haven't changed LDAP settings or AD group name or reset the AD account used to bind LDAP (the account is not locked).   Any idea how to fix this issue?   ... View more

Hi, After applying STIG settings, I am no longer able to logon to the web console using AD or local admin account. I tried 1). renamed passwd file in etc folder and restarted Splunk service, 2) renamed passwd file in etc folder and created user-seed.conf file in etc\system\local folder but I still can't logon.  Anyone has this issue and know how to fix it?  One of the STIG requires me to set the password complexity and lockout and change the permission on Splunk. Thanks in advance!   ... View more

GM! We currently have Splunk 7.2.3 and there is a STIG requirement to turn on the FIPS setting. According to the STIG, the only way to turn it on is to reinstall or upgrade the software.  Is that correct? If I choose to reinstall 7.2.3 without first uninstalling it, will that work?  What is the Windows command to query the FIPS status on the Splunk server? ... View more