---
title: Splunk Trustar
slug: authentication-guides/splunk-trustar
docTags: 
createdAt: 2026-01-19T16:09:00.724Z
---

# Introduction

This guide tells you how to authenticate the Splunk TruSTAR connector in Swimlane using **OAuth 2.0 Client Credentials**.

You will collect your TruSTAR API credentials, confirm required endpoints, and configure the connector in Swimlane.

# Prerequisites

## TruSTAR Access Requirements

You must have TruSTAR permissions to:

• Access TruSTAR Station (account settings) to generate or retrieve API credentials

• Confirm your tenant/environment details for API access

## Required Credentials

During setup, you will collect:

• API Base URL

• Token URL

• API Key (used as client\_id)

• API Secret (used as client\_secret)

# URLs

## API Base URL

The TruSTAR REST API is accessible at the following base URL:

[https://api.trustar.co/api/2.0](https://api.trustar.co/api/2.0)

## Token URL

Use the following Token URL to obtain an OAuth 2.0 access token:

[https://api.trustar.co/oauth/token](https://api.trustar.co/oauth/token)

# TruSTAR Setup

Take the following steps to generate or retrieve your TruSTAR API credentials:

1\. Log in to TruSTAR Station.

2\. Navigate to your account settings.

3\. Generate or retrieve your API access key and API secret.

4\. Copy and save the following values:

:::Paragraph{indent="1"}
• API Key (used as client\_id in Swimlane)
:::

:::Paragraph{indent="1"}
• API Secret (used as client\_secret in Swimlane)
:::

# Connector configuration in Swimlane

1. Log in to Turbine.
2. From the left-hand navigation pane, click **ORCHESTRATION **and click **Assets**.
   Asset homepage opens.
3. Click the **+** icon to open the **Configure your Connector** Asset window.
4. Select **Splunk TruSTAR **from the Asset type list.
5. Fill in the** Asset Settings** and **Asset Input **as shown:

| **Field**      | **Description**                                                     | **Required/Optional** |
| -------------- | ------------------------------------------------------------------- | --------------------- |
| url            | TruSTAR API Base URL (for example: https\://api.trustar.co/api/2.0) | Required              |
| token\_url     | Token URL (https\://api.trustar.co/oauth/token)                     | Required              |
| client\_id     | The API Key from TruSTAR                                            | Required              |
| client\_secret | The API Secret from TruSTAR                                         | Required              |
| scope          | Optional, leave blank unless specified                              | Optional              |
| verify\_ssl    | Enable/Disable SSL Verification                                     | Optional              |
| http\_proxy    | Optional proxy configuration                                        | Optional              |

Fields with \* marks are required.

6. Click **Create**.

# Troubleshooting

If you encounter a 401 or 403 error:

• Verify the API Key and API Secret are correct and not revoked.

• Confirm you are using the correct Token URL.

• Confirm the base API URL is correct (https\://api.trustar.co/api/2.0).

• Regenerate the API secret if required and update the asset in Swimlane.

You have successfully authenticated the Splunk TruSTAR Connector in Swimlane.