Splunk Observability Cloud Passwords API

openapi: 3.2.0
info:
  title: Splunk Observability Cloud Passwords API
  version: 3.0.1
  description: 'API for managing Splunk Observability Cloud user passwords.

    Requirements


    You must have an organization access token with the API permission or a session token to use the API.'
  x-provenance:
    method: reconstructed
    authored_by: Splunk (content) / API Evangelist (assembly)
    reconstructed_by: API Evangelist
    reconstructed_on: '2026-08-19'
    first_party: false
    provider_published: false
    note: Splunk's own OpenAPI objects, extracted from the React Server Component payload embedded in each of the 48 API reference pages at dev.splunk.com. The operations and schemas are Splunk's; the assembly into standalone documents is API Evangelist's. Splunk serves no fetchable spec file — dev.splunk.com answers 200 with an identical 6,638-byte shell for every asset path, including invented control paths — so this is NOT first-party publication and is not graded as such.
  x-evidence:
  - type: source
    url: https://dev.splunk.com/observability/reference/
  - type: source
    url: https://dev.splunk.com/observability/docs/apibasics/api_list/
servers:
- url: https://api.{REALM}.observability.splunkcloud.com/v2
  description: Base API URL for the password update endpoint
  variables:
    REALM:
      default: us0
      description: Splunk Observability Cloud realm the organization is provisioned in (for example us0, us1, eu0, jp0, au0).
security:
- SessionToken: []
tags:
- name: Passwords
paths:
  /password/update:
    post:
      description: Sets a user's password to a specified new password.
      parameters:
      - name: X-SF-Token
        in: header
        description: Authentication token
        required: true
        schema:
          type: string
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
              - oldPassword
              - newPassword
              properties:
                oldPassword:
                  type: string
                  example: ExamplePassword1234!
                  title: oldPassword
                  description: The user's current password.
                newPassword:
                  type: string
                  example: UpdatedPassword1234!
                  title: newPassword
                  description: The user's new password.
            examples:
              example:
                value:
                  newPassword: UpdatedPassword1234!
                  oldPassword: ExamplePassword1234!
      responses:
        '200':
          description: HTTP 200 response
        '400':
          description: HTTP 400 response
          content:
            application/json:
              schema:
                type: object
                properties:
                  code:
                    type: integer
                    example: 400
                    description: HTTP response code.
                  message:
                    type: string
                    example: The email/password combination was entered incorrectly. Please try again.
                    description: Response message indicating that the request failed.
              examples:
                example:
                  value:
                    code: 400
                    message: The email/password combination was entered incorrectly. Please try again.
      security:
      - SessionToken: []
      tags:
      - Passwords
components:
  securitySchemes:
    SessionToken:
      type: apiKey
      in: header
      name: X-SF-Token
      description: Splunk Observability Cloud session token or org access token.