Deployment Architecture

O365 API Keys expiring: Are there different Splunk instances for the search head, indexer, and data manager?

rrafferty
New Member

Our O365 API keys are expiring, and we are attempting to updated them. While doing so we have a couple questions.

Are there different Splunk instances for the search head, indexer, and data manager? If yes, what are the URLs.

We are having difficulty locating a knowledge base on how to update the API keys. Could you please provide the relevant knowledge base?

Thanks

Labels (1)
Tags (2)
0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...