Splunk integration (on-prem) - unable to save configuration, Delete User failed error


When configuring the Splunk Actionable IT Alerts integration, we are unable to save the configuration. We get the following error:



Error: Delete user failed. cannot find the credential information with id : credential:xmatters_password



Splunk on-prem version 8.2 and above



Check if the passwords.conf file exists and contains a credential pair for the xmatters account and its corresponding password. This may be encrypted. If missing, it has been found that you can create a password file with the same file permissions as the other conf files and supply the plaintext password so that it is formatted as the following.

password = <plain_text_password>

The location of this file is in the Splunk application folder in the /apps/xmatters_alert_action/local folder.

An example on *nix systems:



Reference for the passwords.conf file can be found here. https://docs.splunk.com/Documentation/Splunk/8.2.0/Admin/Passwords


Was this article helpful?
0 out of 0 found this helpful



Article is closed for comments.