Skip to content

Instantly share code, notes, and snippets.

@mbrownnycnyc

mbrownnycnyc/splk_resetpassword.sh

Created May 26, 2020 11:45
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save mbrownnycnyc/d4705755dc3507e00becaa642e96421a to your computer and use it in GitHub Desktop.
Save mbrownnycnyc/d4705755dc3507e00becaa642e96421a to your computer and use it in GitHub Desktop.
Download ZIP
reset a local user password for splunk (quick ref for sys adm class)
Raw
splk_resetpassword.sh
export SPLUNK_HOME=/opt/home/matt_b/splunkforwarder
$SPLUNK_HOME/bin/splunk stop
rm -rf $SPLUNK_HOME/etc/passwd
echo [user_info] > $SPLUNK_HOME/etc/system/local/user-seed.conf
echo USERNAME = admin >> $SPLUNK_HOME/etc/system/local/user-seed.conf
echo PASSWORD = NEW_PASSWORD >> $SPLUNK_HOME/etc/system/local/user-seed.conf
$SPLUNK_HOME/bin/splunk start
#reset password:
$SPLUNK_HOME/bin/splunk edit user admin -password 'splunk3du' -auth admin:NEW_PASSWORD
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment