---
title: "Creates or updates a Splunk integration API auth token"
method: PUT
path: "/v1/integrations/splunk/{id}/rest-auth-token"
tags: ["Splunk Integration"]
---

# Creates or updates a Splunk integration API auth token

`PUT /v1/integrations/splunk/{id}/rest-auth-token`

## Request

- Base URL: `https://docs.grepr.ai` (the document declares no server; this is the origin it was published from)
- URL: `https://docs.grepr.ai/v1/integrations/splunk/{id}/rest-auth-token`
- Auth: OpenID Connect (`https://grepr-prod.us.auth0.com/.well-known/openid-configuration`)

Creates a Splunk API auth token for a Splunk integration if it doesn't exist and updates it otherwise.  If the token is updated while the integration is being used by a pipeline, the  new token will be picked at pipeline restart, rescaling or an update.  This token is used for the Splunk API to search and retrieve logs.

## Path parameters

- `id` string, required

## Request body

- SecretApi: Secret wrapper for API responses
  - `secret` string, required: The secret value

## Response `204`

Splunk REST API auth token upserted successfully.

## Other responses

- `401`: Unauthorized
- `404`: Integration not found.

---

[API](https://skmtc.dev/grepr/apis/grepr-api.md) - [All operations](https://skmtc.dev/grepr/apis/grepr-api/llms.txt) - [OpenAPI document](https://skmtc.dev/grepr/apis/grepr-api/revisions/2a5ce03a0bf0?raw)