how to stop splunk from editing files in /opt/splunk/etc/system/local/ directory?

[neovenkat]

We want to stop splunk from editing the files inside $SPLUNKHOME/etc/system/local, for example its adds sslKeysPassword to server.conf, password to inputs.conf on its own. Thanks in advance!

[strive]

Even i have seen this behavior. You need not add the attributes sslKeysPassword and password to server.conf and inputs.conf respectively. Without you entering these attributes, splunk adds them.

See my other post: https://answers.splunk.com/answers/643307/why-is-the-ssl-connection-between-forwarder-and-in.html

In my case:
a. in server.conf, i did not even have [sslConfig] stanza. Splunk adds that and underneath sslKeysPassword attribute also.
b. In inputs.conf, i had [SSL] stanza but not password attribute. During restart splunk adds password attribute.

[skoelpin]

Why? Some changes are necessary to etc/system/local so they take precedence

[damien_chillet]

Splunk does edit these values but it's because it's encrypting them after you enter them manually usually.