I have installed splunkforwarder-4.3.2 universal forwarder on windows machine. I am unable to to login using %SPLUNK_HOME%\bin\splunk login -auth admin:changeme.
I haven't changed the password. I also tried resetting the password by changin the password file in etc and restarting splunk. Still I can't login.
You can't edit the password in %SPLUNK_HOME%\etc\passwd
because it is encrypted.
But you can rename the passwd
file to something else, like passwd.old
Then try to login with admin:changeme
It should work.
Also look here for more info:
How could I reset the admin password
I tried renaming the password file and then logging in with admin:changename but I am still not able to login.
I am using 'splunk login -auth admin:changeme' command to login from the bin directory of splunk