user-seed.conf

user-seed.conf

user-seed.conf controls what the default admin user account will be on first run. You can use any user name in this file -- the name will be given admin privileges.

IMPORTANT: Unlike all other conf files, user-seed must be in $SPLUNK_HOME/etc/bundles/default/ (as opposed to ../local/) before first running Splunk. After Splunk has been run at least once $SPLUNK_HOME/etc/bundles/passwd takes over and user-seed will NOT work.

user-seed.conf.spec

# Specification for user-seed.conf.  Allows configuration of Splunk's initial username and password.
# Currently, only one user can be configured with user-seed.conf.
#
# To override the default username and password, place user-seed.conf in 
# $SPLUNK_HOME/etc/bundles/default.
[user_info]
USERNAME = <string> 
          * Username you want to associate with a password.
          * Default is Admin.
PASSWORD = <string>
          * Password you wish to set for that user.
          * Default is changeme.

user-seed.conf.example

# This is a sample userseed.conf.  You may use this file to create an initial login.  
# To change the default start up login and password, this file must be in 
# $SPLUNK_HOME/etc/bundles/default/ prior to starting Splunk for the first time.
[user_info]
USERNAME = admin
PASSWORD = myowndefaultPass

• Was this topic useful?
• Post a comment