Security

Any tool to encrypt passwords based on a splunk.secret?

koshyk
Super Champion

We have multiple secrets for the different tiers (forwarders/search heads etc.). Some of the apps like IPS needs to have UI to encrypt password 😞 which is not possible on all tiers.

Is there a tool/API which can encrypt the password based on splunk.secret ?

eg. what I'm looking for is

=> supply passwords.conf and splunk.secret as inputs to the tool
=> run the api/tool so that it takes passwords.conf and splunk.secret of the relevant tier/server and hash the password with it

Thanks in advance

1 Solution

starcher
Influencer

You could spin up a splunk instance with the splunk secret. Then use the encrypted password endpoint via your own script to enter passwords then grab the results from passwords.conf.

http://www.georgestarcher.com/splunk-stored-encrypted-credentials/

View solution in original post

xpac
SplunkTrust
SplunkTrust

There's an even easier available now, a Python project called splunksecrets that can be installed via PIP and gives you an easy CLI to encrypt + decrypt new and old secrets:

https://pypi.org/project/splunksecrets/

starcher
Influencer

You could spin up a splunk instance with the splunk secret. Then use the encrypted password endpoint via your own script to enter passwords then grab the results from passwords.conf.

http://www.georgestarcher.com/splunk-stored-encrypted-credentials/

koshyk
Super Champion

I had seen the website, but great to see the answer from the person itself. 🙂 You guys are real heroes.

We had similar issues and great if we can work on a github project to make this automated for ansible
Accepting the answer.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to July and August Tech Talks, Office Hours, and Webinars!

Dive into our sizzling summer lineup for July and August Community Office Hours and Tech Talks. Scroll down to ...

Edge Processor Scaling, Energy & Manufacturing Use Cases, and More New Articles on ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Get More Out of Your Security Practice With a SIEM

Get More Out of Your Security Practice With a SIEMWednesday, July 31, 2024  |  11AM PT / 2PM ETREGISTER ...