# Creates or updates a Splunk integration API auth token **PUT** `/v1/integrations/splunk/{id}/rest-auth-token` **Operation ID**: `upsertSplunkRestAuthToken` **Summary**: Creates or updates a Splunk integration API auth token Creates a Splunk API auth token for a Splunk integration if it doesn't exist and updates it otherwise. If the token is updated while the integration is being used by a pipeline, the new token will be picked at pipeline restart, rescaling or an update. This token is used for the Splunk API to search and retrieve logs. ## Tags - Splunk Integration ## Parameters - **id** (required) - path - Type: string ## Request Body **Content-Type**: `application/json` **Schema**: `SecretApi` ## Responses ### 204 Splunk REST API auth token upserted successfully. ### 401 Unauthorized ### 404 Integration not found.