Security

Is it possible to encrypt the admin password to install, update, and package the Splunk app?

shahk
Explorer

Hello Team,

I have made a shell script to install, update and package the Splunk app. In he shell script I have to pass Splunk web UI admin password in the command since it always asks for the credential while installing, updating, or packaging the app.

Is it possible to encrypt the admin password and get it read from other file ?

Regards,
Krimesh

0 Karma

skoelpin
SplunkTrust
SplunkTrust

I'm borrowing this answer from my buddy @jkat54

a. Create base 64 encrypted password.
eg
$ echo "kamal" |base64
a2FtYWwK
$

b. Save this encrypted password in a password file.

c. In your script, add the below code to fetch the password and then decrypt it.
source path_to_the_file
DB_PASSWORD=$(eval echo ${DB_PASSWORD} | base64 --decode)

Decrypted password is placed in variable DB_PASSWORD. 
d. Give both the files permissions 700.

jkat54
SplunkTrust
SplunkTrust

Ive edited this like 4 times now 😜

See https://stackoverflow.com/questions/3318853/hide-encrypt-password-in-bash-file-to-stop-accidentally-...

In case the above doesn't work.

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

 Prepare to elevate your security operations with the powerful upgrade to Splunk Enterprise Security 8.x! This ...

Get Early Access to AI Playbook Authoring: Apply for the Alpha Private Preview ...

Passionate about security automation? Apply now to our AI Playbook Authoring Alpha private preview ...

Reduce and Transform Your Firewall Data with Splunk Data Management

Managing high-volume firewall data has always been a challenge. Noisy events and verbose traffic logs often ...