I have spun up a new instance of splunk from the AWS marketplace.
I cannot login via the web gui using the default username and password:
admin/changeme
I have stopped the splunk service, removed the /opt/splunk/etc/passwd file and restarted splunk
Still cannot log in using the default username and password
Restarted splunk again and still cannot log in.
I keep getting:
Invalid username or password.
I found the issue. My google-fu was too weak.
When you get the instance from AMI, the password is not "changeme". It is instead the EC2 instance ID.
username: admin
password: SPLUNK-$instance id$
https://docs.splunk.com/Documentation/Splunk/8.0.0/Admin/AbouttheSplunkAMI
I found the issue. My google-fu was too weak.
When you get the instance from AMI, the password is not "changeme". It is instead the EC2 instance ID.