When configuring the Splunk Actionable IT Alerts integration, we are unable to save the configuration. We get the following error:
Error: Delete user failed. cannot find the credential information with id : credential:xmatters_password
Splunk on-prem version 8.2 and above
Check if the passwords.conf file exists and contains a credential pair for the xmatters account and its corresponding password. This may be encrypted. If missing, it has been found that you can create a password file with the same file permissions as the other conf files and supply the plaintext password so that it is formatted as the following.
password = <plain_text_password>
The location of this file is in the Splunk application folder in the /apps/xmatters_alert_action/local folder.
An example on *nix systems:
Reference for the passwords.conf file can be found here. https://docs.splunk.com/Documentation/Splunk/8.2.0/Admin/Passwords