Splunk Search

How to get the plain text of pass4Symmkey?

VijaySrrie
Builder

Hi,
Please help us to get the plain text of pass4Symmkey. Is there a way to decrypt it?

klischatb
Path Finder

Hello,

To see the decrypted pass4SymmKey, run:
splunk show-decrypted --value ''

In the ' ' your put your Crypted Key

server.conf
[clustering]
mode = master
pass4SymmKey = $7$7idnRXKYCFTzMKVz+UosqvnjM8mod6DTZ09SJ7pk7wtL6yLGAo/3+wRN

under splunk/bin
splunker@master:/opt/splunk/bin$ ./splunk show-decrypted --value '$7$7idnRXKYCFTzMKVz+UosqvnjM8mod6DTZ09SJ7pk7wtL6yLGAo/3+wRN'

and then the CLI should show u the decrypted key.

Hope this will do it 🙂

vnguyen46
Contributor

I tried that and given:
Command error: 'show-decrypted' is not a valid command. Please run 'splunk help' to see the valid commands.

0 Karma

myudkowsky
Communicator

This requires Splunk version 7.2.2 and above.

0 Karma
Get Updates on the Splunk Community!

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...

Share Your Ideas & Meet the Lantern team at .Conf! Plus All of This Month’s New ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...