Splunk SOAR REST API

aid: splunk-soar:splunk-soar-rest-api
name: Splunk SOAR REST API
description: The Splunk SOAR REST API creates, updates, queries and selectively removes the objects the
  platform automates against — containers, artifacts, playbooks, action runs, apps, assets, CEF fields,
  indicators, evidence, notes, vault files, workbooks, custom lists, custom functions, roles, users, severities,
  aggregation rules, approvals, multi-tenancy and system settings. Requests must be made over HTTPS against
  the customer's own SOAR tenant.
humanURL: https://help.splunk.com/en/splunk-soar/soar-cloud/rest-api-reference
baseURL: https://{soar-host}/rest
tags:
- Security
- Automation
- Orchestration
- Incident Response
- REST
properties:
- type: Documentation
  url: https://help.splunk.com/en/splunk-soar/soar-cloud/rest-api-reference
- type: APIReference
  url: https://help.splunk.com/en/splunk-soar/soar-cloud/rest-api-reference
- type: GettingStarted
  url: https://help.splunk.com/en/splunk-soar/soar-cloud/rest-api-reference/using-the-splunk-soar-rest-api/using-the-rest-api-reference-for-splunk-soar-cloud
- type: Authentication
  url: authentication/splunk-soar-authentication.yml
- type: Conventions
  url: conventions/splunk-soar-conventions.yml
- type: ErrorCatalog
  url: errors/splunk-soar-problem-types.yml
- type: DataModel
  url: data-model/splunk-soar-data-model.yml
- type: RateLimits
  url: rate-limits/splunk-soar-rate-limits.yml