Security

I've lost my splunk admin password, can it be recovered?

jrodman
Splunk Employee
Splunk Employee

My dog ate my splunk admin password. Can I recover it?

Tags (1)
1 Solution

Lionel
Splunk Employee
Splunk Employee

To reset the admin password you will need to have access to the file system: - move the $SPLUNK_HOME/etc/passwd file to passwd.bak - restart splunk. After the restart you should be able to login using the default login (admin/changeme).

If you created other user accounts, copy those entries from the backup file into the new passwd file and restart splunk.

It is already answered here:

View solution in original post

Lionel
Splunk Employee
Splunk Employee

To reset the admin password you will need to have access to the file system: - move the $SPLUNK_HOME/etc/passwd file to passwd.bak - restart splunk. After the restart you should be able to login using the default login (admin/changeme).

If you created other user accounts, copy those entries from the backup file into the new passwd file and restart splunk.

It is already answered here:

jrodman
Splunk Employee
Splunk Employee

oops! Perhaps mine should be deleted then.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...