How to manage password when running a CLI search command in a batch file?

[akanno]

I want to run CLI search command in a batch file on Windows OS.
I hardcode username and password in the batch file because Splunk requires authentication.
However, hardcoding password in the batch file is unfavorable because security reasons.
So, I want to run a CLI search command in a batch file without hardcoding the password.
Could you tell me the best practices that run CLI search command in a batch file?

[jkat54 · Accepted solution]

You can encode it in a configuration file, salt it in a database, etc. This is a common problem with storing any credentials. The best practice is up to your environment, needs, etc. If you must use batch, then you'll probably have to encode it in a config file somewhere.

You'd probably be better off using a different language and encoding the password in some weird base39 etc.

Please see this post https://answers.splunk.com/answers/337706/how-to-hide-the-password-in-the-script-when-i-use.html

or google "best practices for password in batch script", etc. The splunk answers community is not a security forum, although many of us work in the security field.

[akanno]

thank you for your reply , jkat54.

It was very helpful for me.