In addition to the formatting of the event data, each data package will also need a token in its authorization header. The fact that the system is based on tokens means that the user doesn't have to include Splunk credentials in the application or in files that support the application, while also protecting Splunk from receiving events from unintended sources. The Splunk administrator will generate the token using Splunk and provide it to software application developers for use.