Hello the ser reading this, if you get "bad decrypt" try echo 'U2FsdGVkX1/8/PnefMMBHA8f/IavzfMuBDyTjjNlZtg=' | base64 --decode | /opt/splunk/bin/splunk cmd openssl aes-256-cbc -d -pass file:/opt/splunk/etc/apps/splunk_app_db_connect/certs/identity.dat the version of the openssl should be the one Splunk uses, otherwise you might get "bad decrypt" ... View more