Credentials.pl

What it does

Obfuscates passwords for your engine.conf files.

Where it is

The credentials.pl file is located in the $SPLUNK_HOME/etc/apps/Splunk_TA_vmware/bin directory.

You must run credentials.pl from $SPLUNK_HOME/etc/apps/Splunk_TA_vmware/local

For example:

../bin/credentials.pl <arguments>

Prerequisites  

1. Create a credentials.conf file in $SPLUNK_HOME/etc/apps/Splunk_TA_vmware/local. You can give this file any name.

2.Run the credentials.pl script using the splunkadmin login.

Credentials.conf reference

Separate multiple hosts using a pipe. For example:

host1.splunk|host2.splunk|host3.splunk|

Note: Ensure there is a trailing |.

For ActiveDirectory accounts, use Domain\UID.

Example credentials.conf

[default] 
host= 
username=guest 
password=guest

[host] 
host=esx1234.mycompany.com|esx1235.mycompany.com|
username=foo 
password=bar

[host2] 
host=1.2.3.4 
username=baz 
password=biz

Arguments

-f

Specifies the file name you want to use. For example, if you names your file credentials.conf, then you would type -f credentials.conf.

-i

Runs credentials.pl in interactive mode. In interactive mode, the script prompts you for user IDs and passwords and then creates a credentials.conf file.

How to run the tool

First, modify engine.template as needed in the $SPLUNK_HOME/etc/apps/local directory.

../bin/credentials.pl -f <your_credentials.conf>

Encrypts passwords written in your_credentials.conf.

../bin/credentials.pl -i

Interactive mode, which prompts you to enter your_credentials.conf. Enter your user ID and password, then press CTRL-D.