Get Started with

To start using your new deployment, you or your Splunk administrator need to:

• Log in
  • The administrator will receive email from Splunk Sales with their initial login information.
  • The administrator creates additional user accounts, or connects to their identity provider using SAML2. See Configure single sign-on authentication for in Administer .
• Take a tour of and perform product onboarding. See Take a tour of and perform product onboarding when you log in for the first time in Administer .

See also

• For Administrators: Administer
• For analysts and other users: Use

Log into

When your instance is provisioned, the administrator is sent an email containing their user name and a password reset token.

1. Open your web browser.
2. Navigate to your URL.
3. Reset your password using the credentials and password reset token supplied by Splunk Sales.
4. Login to with your new username and password.

The initial login token is valid for 24 hours. If the administrator does not log in within the first 24 hours, the token expires. The administrator must click on the Forgot Password link to generate a new token.