All Apps and Add-ons

CyberArk and Splunk: How to rotate web logins? How to rotate/update service account confs?

nick405060
Motivator

Hey guys,

I have Splunk integrated with CyberArk in two ways:

1) Splunk ingests and alerts on CyberArk events
2) CyberArk rotates Splunk server passwords

However, I am looking to:

1) Rotate Splunk web logins using CyberArk - how can I do this? Alternately, is it possible for CyberArk to run bash scripts? If so, we could just use the Splunk CLI to rotate the web logins
2) Rotate the password of our splunk_service_account. We can't do this because we would somehow have to update the Splunk conf files that use it (e.g. LDAP bind, API query confs, etc) whenever it is rotated. Any ideas?

0 Karma

HalisAkdeniz
Engager

Hello Nick,

I have the same requirement as updating  LDAP Bind  password in Splunk automatically, as soon as it's updated by Cyberark.

Could you find a solution about this issue?

Thanks.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...