topic Splunk Add-on for Google Cloud Platform: Update credentials via command line in All Apps and Add-ons

Splunk Add-on for Google Cloud Platform: Update credentials via command line

jypyking — Tue, 20 Nov 2018 10:53:09 GMT

Hi,

We have implemented key rotation on GCP and we need to be able to set the new credentials via command line.
Does anyone know how?
We've found the password file, but credentials are encrypted and I'm not sure how I can encrypt the new creds and update the .conf file via command line.

Thanks.

Re: Splunk Add-on for Google Cloud Platform: Update credentials via command line

tyron_ — Wed, 30 Sep 2020 02:21:21 GMT

Were you able to sort this? I noticed if you populate the google_cloud_credentials.conf file with the contents of your JSON file, it will automatically repopulate the passwords.conf file as soon as you go to the Credentials page on UI. Not sure how can you trigger this process from the command line tho.

Re: Splunk Add-on for Google Cloud Platform: Update credentials via command line

tyron_ — Wed, 20 Nov 2019 14:22:48 GMT

So I think I found a way of doing this. You can just update the file google_cloud_credentials.conf on
$SPLUNK_HOME/etc/apps/Splunk_TA_google-cloudplatform/local with the new value according to the docs, such as:

[<name>]
google_credentials={"type": "service_account","project_id": "my-project","private_key_id": "32a3be8f2f0dcfe967ea558e486deaereacfas0c2497e"}

After you do that, the passwords.conf file will be automatically updated with the new values as soon as you go into the Configuration page on the Splunk Console. Restarting Splunk service also works if you wanna keep in the command line.

Another option you have is forget about passwords altogether and use the GCE service account. Take a look at this post: https://answers.splunk.com/answers/774312/use-gce-service-account.html

Re: Splunk Add-on for Google Cloud Platform: Update credentials via command line

kasimanikandan — Mon, 23 Feb 2026 03:46:08 GMT

Hi @tyron_, I tried with your option, it's not working really. google_cloud_credentials.conf file is still have the SA json key as is and passwords.conf also not updated with the encrypted password. Did you tried this and working for you ?