I'm trying to setup a collection node for the vmware app and am following the instructions on this page - http://docs.splunk.com/Documentation/VMW/3.1/Install/Getacollectionnode
On Step 20 it asks you to change the password for the splunk admin user on the collection node with this command
./splunk edit user admin -password newpassword -role admin -auth admin:changeme
When i try this i get "-bash: ./splunk: No such file or directory"
Then i tried
sudo ./splunk edit user admin -password newpassword -role admin -auth admin:changeme
Then it asks me for the password for splunkadmin and after i provide it i get "sudo: ./splunk: command not found"
I cant seem to figure out how to change the "admin" user's password on this Cent OS OVA
If you are running the Splunk provided .ova file. Then you can run the splunk command from any directory. However make sure you do not type ./splunk, just splunk. e.g. splunk start NOT ./splunk start. If you want to type ./splunk then you must be in the SPLUNKHOME/bin directory.
Splunk on the .ova can be found under the home directory of the splunkadmin user. So log in as splunkadmin (DO NOT log in as root). Just type the command ls and you will see an opt directory. Splunk is in that directory.
Thank you, that did work, but now I'm back to square one on my original problem. On the indexer when trying to add the node within the vmware app, i just get "host could not be reached"
Ummm well in which directory are you standing when you issue that command? "./splunk" will only work if you're in the directory where the splunk binary resides, which would be "/opt/splunkforwarder/bin" on a forwarder. If it's a full-blown Splunk instance, the directory would be "/opt/splunk/bin".