---
title: "Creates or updates a Splunk integration auth token"
method: PUT
path: "/v1/integrations/splunk/{id}/auth-token"
tags: ["Splunk Integration"]
---

# Creates or updates a Splunk integration auth token

`PUT /v1/integrations/splunk/{id}/auth-token`

## Request

- Base URL: `https://docs.grepr.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://docs.grepr.ai/v1/integrations/splunk/{id}/auth-token`
- Auth: OpenID Connect (`https://grepr-prod.us.auth0.com/.well-known/openid-configuration`)

Creates an HEC API auth token for a Splunk integration if it doesn't exist and updates it otherwise.  If the key is updated while the integration is being used by a pipeline, the  new key will be picked at pipeline restart, rescaling or an update.  Ingestion supports the previous and the updated key for up to 24 hours of  a key update. Make sure to change the key used by the agents to send data within  24 hours of an update for a seamless transition

## Path parameters

- `id` string, required

## Request body

- SecretApi: Secret wrapper for API responses
  - `secret` string, required: The secret value

## Response `204`

HEC API Auth token upserted successfully.

## Other responses

- `401`: Unauthorized
- `404`: Integration not found.

---

[API](https://skmtc.dev/grepr/apis/grepr-api.md) - [All operations](https://skmtc.dev/grepr/apis/grepr-api/llms.txt) - [OpenAPI document](https://skmtc.dev/grepr/apis/grepr-api/revisions/2a5ce03a0bf0?raw)