Security

Unable to execute commands on CLI splunk

mmohiuddin1512
Explorer

Hi All:

I am unable to execute any commands on CLI Splunk Instance. Whenever I try to execute any commands the screen freezes. I can navigate to folders without any latency issues, the issue is with executing splunk commands. For instance, I am executing command on the CLI to change the default splunk admin password and the screen freezes.

./splunk edit user admin -password 'foo' -auth admin:changeme

Any assistance will be appreciated.

0 Karma

woodcock
Esteemed Legend

It is prompting you for user password so add this to the end of your commands that do this:

... -auth splunk:changeme
0 Karma

mmohiuddin1512
Explorer

Could you please post the complete command.

Does it need to be:

./splunk edit user admin -password 'foo' -auth admin:changeme

./splunk edit user admin -password 'foo' -role admin -auth admin:changeme

0 Karma

woodcock
Esteemed Legend

Like this:

./splunk edit user admin -password newPassowrd  -auth admin:changeme 
0 Karma

woodcock
Esteemed Legend

This assumes that you have not (yet) changed the default password.

0 Karma

woodcock
Esteemed Legend

This is windows, right? You need to open your app ( cmd or whatever; I use mobaXterm) as Admin (right click and select Run as administrator ).

0 Karma

mmohiuddin1512
Explorer

This is not windows. This is on Linux.

0 Karma

pradeepkumarg
Influencer

Does it ever come back and respond? What are you doing to get back and run another command?
Other non splunk commands run fine on the machine? Check the health of the machine? Disk, memory etc..,

0 Karma

mmohiuddin1512
Explorer

Apparently, there is no resource constraint on the servers. They were rebooted. Also I am able to execute the following commands without any difficulty ./splunk status, ./splunk restart ./splunk version etc. I am having problem issuing command to modify the default splunk admin credentials or list the monitoring inputs , i.e ./splunk list monitor. These commands just hang and do not provide any response. I have stopped the splunk universal forwarder service on these servers and started them back up and then issued the commands ( for modifying password , listing file monitors) but the commands hang up and do not respond

0 Karma

mmohiuddin1512
Explorer

We are using splunk universal forwarder version 6.6.1

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...