---
title: "POST /rotated-secret-update-splunk"
method: POST
path: "/rotated-secret-update-splunk"
tags: ["v2"]
---

# POST /rotated-secret-update-splunk

`POST /rotated-secret-update-splunk`

## Request body

- RotatedSecretUpdateSplunk — rotatedSecretUpdateSplunk is a command that updates a rotated secret for a Splunk target. It reuses the rotator type chosen at create time.
  - `add-tag` string[] — List of the new tags that will be attached to this item
  - `audience` string — Token audience for Splunk token creation (relevant only for rotator-type=token)
  - `authentication-credentials` string — The credentials to connect with use-user-creds/use-target-creds
  - `auto-rotate` string — Whether to automatically rotate every --rotation-interval days, or disable existing automatic rotation [true/false]
  - `delete_protection` string — Protection from accidental deletion of this object [true/false]
  - `description` string — Description of the object
  - `expiration-date` string — Token expiration date in YYYY-MM-DD format (relevant only for rotator-type=token when manual rotation is selected). Time will be set to 00:00 UTC.
  - `hec-token` string — For rotator-type=hec-token, optionally set/replace the stored HEC token value.
  - `input-rule` string[] — Agentic input rule in name=...,rule=... format (e.g. name=rule1,rule=Sanitize input)
  - `item-custom-fields` object — Additional custom fields to associate with the item
  - `json` boolean — Set output format to JSON
  - `keep-prev-version` string — Whether to keep previous version [true/false]. If not set, use default according to account settings
  - `key` string — The name of a key that used to encrypt the secret value (if empty, the account default protectionKey key will be used)
  - `max-versions` string — Set the maximum number of versions, limited by the account settings defaults.
  - `name` string, required — Rotated secret name
  - `new-name` string — New item name
  - `output-rule` string[] — Agentic output rule in name=...,rule=... format (e.g. name=rule1,rule=Mask secrets)
  - `password-length` string — The length of the password to be generated
  - `rm-tag` string[] — List of the existent tags that will be removed from this item
  - `rotation-event-in` string[] — How many days before the rotation of the item would you like to be notified
  - `rotation-hour` integer — The Hour of the rotation in UTC
  - `rotation-interval` string — The number of days to wait between every automatic key rotation (1-365)
  - `splunk-token` string — For rotator-type=token, optionally set/replace the stored Splunk authentication token value.
  - `token` string — Authentication token (see `/auth` and `/configure`)
  - `token-owner` string — For rotator-type=token, specify the Splunk username that the new token should be issued for. (Splunk 10 requires name=<token-owner> when creating auth tokens.)
  - `uid-token` string — The universal identity token, Required only for universal_identity authentication

## Response `201`

rotatedSecretUpdateSplunkResponse wraps response body.

- RotatedSecretUpdateOutput
  - `name` string

## Other responses

- `default` — errorResponse wraps any error to return it as a JSON object with one "error" field.

---

[API](https://skmtc.net/akeyless/apis/akeyless-api.md) · [All operations](https://skmtc.net/akeyless/apis/akeyless-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/akeyless/akeyless-api/versions/0ceb25634501/schema)