Manage input credentials in Splunk Enterprise Security

The Credential Management page displays stored credentials for objects, such as threat lists or lookups, that run as scripted or modular inputs. An input configuration that references a credential will attempt to find the credential values here.

Add a new credential for an input

1. On the Enterprise Security menu bar, select Configure > General and open Credential Management.
2. Click New Credential to add a new user credential.
3. Use the edit panel to add the username and password for the new credential.
   
4. (Optional) Use the Realm field to differentiate between multiple credentials that have the same username.
5. Select the Application for the credential.
6. Click Save.

Edit an existing input credential

1. On the Enterprise Security menu bar, select Configure > General and open Credential Management.
2. In the Action column of a credential, select Edit.
3. Use the editor to change the username, password, or application for the credential. You cannot change the realm after it has been applied to a credential. You must create a new credential to change the realm.
   
4. Click Save.

Delete an existing input credential

1. On the Enterprise Security menu bar, select Configure > General and open Credential Management.
2. In the Action column of a credential, select Delete.