sources

Add an HEC token and optional metadata to a Splunk HEC Source within a Pack

Add an HEC token and optional metadata to the specified Splunk HEC Source within the specified Pack.

post/p/{pack}/system/inputs/{id}/hectoken

Request

Base URL
/ (relative, and the document was published on a file host, not at the API’s origin)
Auth
- HTTP bearer
- or OAuth 2
  Client credentials
  Token URL: https://login.cribl.cloud/oauth/token

idstring required

The <code>id</code> of the Splunk HEC Source.

packstring required

The <code>id</code> of the Pack.

allowedIndexesAtTokenstring[]

List of index names that the HEC token is allowed to write to.

descriptionstring

Brief description for the HEC token.

enabledboolean

If <code>true</code>, the HEC token is enabled. Otherwise, <code>false</code>.

tokenstring required

The HEC token value to add to the Splunk HEC Source.

The updated Splunk HEC Source with the new HEC token.

countinteger required

Number of items returned in the items array.

Oct 18, 2026fd542bb248a2 Revision changes
- info
  added the non-success response with the status
- info
  added the non-success response with the status
Sep 12, 20263816b6fddba1 Revision changes
- info
  added the optional property // to the response with the status
- info
  added the optional property /// to the response with the status
- info
  added the optional property /// to the response with the status