topic Re: Encrypt & Decrypt password in custom alert in Security

Encrypt & Decrypt password in custom alert

manish_singh_77 — Thu, 21 Nov 2019 05:39:11 GMT

Hi Team,

We want to encrypt the password that we are using in custom alert, is there any splunk library in python to encrypt and decrypt the password.

Re: Encrypt & Decrypt password in custom alert

DavidHourani — Wed, 30 Sep 2020 03:03:09 GMT

Hi @manish_singh_777,

What are you trying to achieve exactly ? Are you building a custom alert action ?

Re: Encrypt & Decrypt password in custom alert

jkat54 — Thu, 21 Nov 2019 13:23:51 GMT

You could google "python crypto libraries"... but why didn't you before posting? Perhaps you're looking for the easy button.

In that case, the easiest button i have would be to build your custom alert using the addon builder. It's drag and drop functionality coupled with its password field encryption ability saves you a lot of time.

https://splunkbase.splunk.com/app/2962/

Re: Encrypt & Decrypt password in custom alert

manish_singh_77 — Wed, 30 Sep 2020 03:07:59 GMT

Hi @DavidHourani

I am trying to set up a custom alert which will invoke my script by passing variables such as username, password, source_file path and destination_path but when we are trying to decrypt the password using Fernet and cryptography libraries in the script we are getting module error.

Could you please help?

Re: Encrypt & Decrypt password in custom alert

manish_singh_77 — Wed, 30 Sep 2020 03:08:01 GMT

Could you please help?

Re: Encrypt & Decrypt password in custom alert

jkat54 — Mon, 25 Nov 2019 15:53:59 GMT

I can help you do it with add on builder but first you have to try so you can ask relevant questions.

I can not help you with python libraries otherwise.