# Creates or updates a Splunk integration auth token

**PUT** `/v1/integrations/splunk/{id}/auth-token`

**Operation ID**: `upsertSplunkAuthToken`
**Summary**: Creates or updates a Splunk integration auth token
Creates an HEC API auth token for a Splunk integration if it doesn't exist and updates it otherwise.  If the key is updated while the integration is being used by a pipeline, the  new key will be picked at pipeline restart, rescaling or an update.  Ingestion supports the previous and the updated key for up to 24 hours of  a key update. Make sure to change the key used by the agents to send data within  24 hours of an update for a seamless transition

## Tags
- Splunk Integration
## Parameters

- **id** (required) - path
  - Type: string

## Request Body

**Content-Type**: `application/json`

**Schema**: `SecretApi`

## Responses

### 204

HEC API Auth token upserted successfully.

### 401

Unauthorized

### 404

Integration not found.