Forgot password Key for indexer cluster?

[khalidewaidah]

I forgot pass4SymmKey for Splunk Indexer cluster.

Is there any way to restore it in order to avoid changing the pass4Aymmkey in all cluster members? I need that pass4AymmKey in order to add a new indexer.

[clustering]
pass4SymmKey =

Thanks

[codebuilder · Accepted solution]

You can use the following command to decrypt the pass4SymmKey:

/opt/splunk/bin/splunk show-decrypted --value 'pass4Symmkey_value_here'

[khalidewaidah]

Thanks a lot it's working fine and provide me the original Password-Key.

[codebuilder]

Good to hear it worked for you, glad to help.