All Apps and Add-ons

REST API password

ccsfdave
Builder

I set the darn thing over 3 years ago and it is not any of my usual passwords. Is there a way to recover the REST API password? I am talking about the one that defaults as "changeme"

Also if I can recover it, will anything break e.g. forwarders?

Thanks!

0 Karma
1 Solution

jkat54
SplunkTrust
SplunkTrust

You can revert to the default encrypted password in $splunk_home/etc/passwd .

Just install on a test server/laptop and copy the line that is for the admin user. Then the pass will be changeme again.

Nothing will break unless you have scripts that call the API. They'll need to be updated with the new password you set.

Also the rest api pass is the same as the web ui user/passes. Just making sure you know that.

View solution in original post

jkat54
SplunkTrust
SplunkTrust

You can revert to the default encrypted password in $splunk_home/etc/passwd .

Just install on a test server/laptop and copy the line that is for the admin user. Then the pass will be changeme again.

Nothing will break unless you have scripts that call the API. They'll need to be updated with the new password you set.

Also the rest api pass is the same as the web ui user/passes. Just making sure you know that.

ccsfdave
Builder

OH if the API pwd is the same as the UI, I know that but it keeps choking on some of the special characters in my password. Do I need to escape them?

0 Karma

jkat54
SplunkTrust
SplunkTrust

Yep

 'Password\!' 

For example maybe Google "which characters to escape with curl/whatever you're using"

0 Karma

ccsfdave
Builder

Sweet,

No need to change or recover, just needed the escape characters. I am good now!

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...