POST /rotated-secret-update-splunk

Enable or disable Agentic Runtime Authority rule enforcement for this item. When false, user-defined input/output rules are stored but not enforced; the base security validation still runs.

AraEnabled is tri-state (nil/true/false), not a plain bool: it self-encodes its wire value (see akl.OptionalBool) so an explicit false survives the curl-proxy relay instead of being dropped like a default-false bool flag.

Token audience for Splunk token creation (relevant only for rotator-type=token)

The credentials to connect with use-user-creds/use-target-creds

Protection from accidental deletion of this object [true/false]

Description of the object

EnableAra is the documented spelling of AraEnabled. Both set the same field; --ara-enabled shipped first and stays as an undocumented alias so existing scripts and the Terraform provider keep working.

Turns on AI Quorum checks for this item.

Token expiration date in YYYY-MM-DD format (relevant only for rotator-type=token when manual rotation is selected). Time will be set to 00:00 UTC.

For rotator-type=hec-token, optionally set/replace the stored HEC token value.

Set output format to JSON

Whether to keep previous version [true/false]. If not set, use default according to account settings

Lock this secret after each successful value read

Lock TTL in minutes

Set the maximum number of versions, limited by the account settings defaults.

Rotated secret name

New item name

The length of the password to be generated

Rotate this secret after it is unlocked

If set, dry-run will be skipped [true/false]

For rotator-type=token, optionally set/replace the stored Splunk authentication token value.

Authentication token (see /auth and /configure)

For rotator-type=token, specify the Splunk username that the new token should be issued for. (Splunk 10 requires name=<token-owner> when creating auth tokens.)

The universal identity token, Required only for universal_identity authentication

Specifies whether the generated temporary password must contain at least one uppercase character from the ISO basic Latin alphabet (A to Z). [true/false]

Specifies whether the generated temporary password must contain at least one lowercase character from the ISO basic Latin alphabet (a to z). [true/false]

Specifies whether the generated temporary password must contain at least one numeric character (0 to 9). [true/false]