Security

How can I automatically rotate Splunk local passwords?

daniel333
Builder

All,

I've been asked to automatically rotate the local passwords on Splunk every week. It can be predictable. Like HelloP@ssword1June1st goes to HelloP@ssword1June8th. But just needs to rotate to meet the auditors requirement.

Any idea how I would tackle that?

0 Karma

HiroshiSatoh
Champion

I think that you should create a shell that saves the rotate number and changes the password with the Splunk command.

splunk edit user admin -password newPassowrd  -auth admin:changeme 

However, embedding the password in the shell is problematic in terms of security, so you have to consider how to keep it.

0 Karma

mayurr98
Super Champion

hey @daniel333

I can tell you a workaround I may be wrong but you can try this:

steps:
1) change the password using CLI
https://answers.splunk.com/answers/504964/how-do-we-change-an-user-password-from-command-lin.htmlhtt...
2) write a bash script and schedule a crontab to run every week

I hope that helps you!

0 Karma
Get Updates on the Splunk Community!

Full-Stack Security in Financial Services: AppDynamics, Cisco Secure Application, and ...

Full-Stack Security in Financial Services: AppDynamics, Cisco Secure Application, and Splunk ES Protecting a ...

It's Customer Success Time at .conf25

Hello Splunkers,   Ready for .conf25? The customer success and experience team is and can’t wait to see you ...

Pro Tips for First-Time .conf Attendees: Advice from SplunkTrust

Heading to your first .Conf? You’re in for an unforgettable ride — learning, networking, swag collecting, ...