有碰到splunk admin 用户的需要reset 和解锁的时候,方法如下:
Unlock an administrator account from the command line in Splunk Enterprise
If a Splunk platform instance administrator needs to unlock the administrator account on an instance, they must have access to the disk on which the Splunk platform instance runs.
-
Open a shell or command prompt.
- Stop The Splunk platform instance:
splunk stop
- Temporarily move the password file to a backup:
mv $SPLUNK_HOME/etc/passwd $SPLUNK_HOME/etc/passwd.bak
-
Follow the instructions in