# Splunk The payload containing integration data. **Type**: `object` ## Properties - name: additionalTags (required) type: array of string description: Tags to add when writing data to Splunk - name: authToken (optional) type: string description: Masked HEC REST Auth token for Splunk used for ingestion - name: exceptions (optional) type: object description: The imported exceptions from Splunk. This is a map from the vendor resource Id to the exception. - name: filterQuery (required) type: string description: Filter to apply when reading any data from the Splunk API - name: ingestHost (optional) type: string description: Splunk ingest host name or IP address for log ingestion by the sinkfor both HTTP Event Collector (HEC) and Splunk-to-Splunk (S2S) ingestion.Either of splunk host or this should be specified. - name: ingestPort (optional) type: string description: Splunk ingest port - name: restAuthToken (optional) type: string description: Masked Splunk REST Auth token for Splunk used for search - name: restHost (optional) type: string description: Splunk REST API host name or IP address for splunk logs and alerts search.Either of splunk host or this should be specified. - name: restPort (optional) type: string description: Splunk REST port - name: secure (optional) type: boolean description: Splunk collector uses a valid SSL certificate - name: splunkHost (optional) type: string description: Splunk host name or IP address. If specified, ingest, REST and web endpoints default to this host. Either of splunk host or advanced config with individual endpoints should be specified. - name: webHost (optional) type: string description: Splunk web host name or IP address for linking to Splunk Web UI to view backfilled logsEither of splunk host or this should be specified. - name: webPort (optional) type: string description: Splunk web port