All Apps and Add-ons

CyberArk and Splunk: How to rotate web logins? How to rotate/update service account confs?

nick405060
Motivator

Hey guys,

I have Splunk integrated with CyberArk in two ways:

1) Splunk ingests and alerts on CyberArk events
2) CyberArk rotates Splunk server passwords

However, I am looking to:

1) Rotate Splunk web logins using CyberArk - how can I do this? Alternately, is it possible for CyberArk to run bash scripts? If so, we could just use the Splunk CLI to rotate the web logins
2) Rotate the password of our splunk_service_account. We can't do this because we would somehow have to update the Splunk conf files that use it (e.g. LDAP bind, API query confs, etc) whenever it is rotated. Any ideas?

0 Karma

HalisAkdeniz
Engager

Hello Nick,

I have the same requirement as updating  LDAP Bind  password in Splunk automatically, as soon as it's updated by Cyberark.

Could you find a solution about this issue?

Thanks.

0 Karma
Get Updates on the Splunk Community!

Splunk Training for All: Meet Aspiring Cybersecurity Analyst, Marc Alicea

Splunk Education believes in the value of training and certification in today’s rapidly-changing data-driven ...

Investigate Security and Threat Detection with VirusTotal and Splunk Integration

As security threats and their complexities surge, security analysts deal with increased challenges and ...

Observability Highlights | January 2023 Newsletter

 January 2023New Product Releases Splunk Network Explorer for Infrastructure MonitoringSplunk unveils Network ...