I am running the CISCO IPS app which requires a username / password to login to the IPS. This is specified in the inputs.conf and cleartext when you view the process:
ps -ef produces .../get_ips_feed.py username password sensorip interval
I would like to encrypt or hide this - possible??
This was addressed in the latest version of the Splunk for Cisco IPS app. It is encrypted in the inputs.conf config file and not present in the process listing. I highly recommend you upgrade and then remove and re-add your IPS devices.
Other portions of Splunk use base64 encoding to obfuscate passwords. I would modify get_ips_feed.py to user a base64.