Archive

Splunk Add-on for CrowdStrike: How to resolve "REST ERROR[1021]: Fail to decrypt the encrypted credential information - Failed to get credentials" error?

New Member

When trying to configure the Splunk Add-on for CrowdStrike and add the appropriate user info and API key, I am getting the following error:

REST ERROR[1021]: Fail to decrypt the encrypted credential information - Failed to get credentials

Anyone know how to resolve this?

0 Karma

Engager

I was getting exactly the same error message. I had to manually edit the config file:

https://docs.splunk.com/Documentation/AddOns/released/CrowdStrike/Setupv1

Hope that helps.

0 Karma

New Member

Did you have your API credentials enabled via CrowdStrike support?

0 Karma