Splunk Enterprise REST API
The Splunk Enterprise REST API provides programmatic access to the same information and functionality available to core system software and Splunk Web. It supports GET, POST, and DELETE operations over HTTPS on the splunkd management port 8089.
Documentation
Documentation
https://docs.splunk.com/Documentation/Splunk/latest/RESTREF/RESTprolog
GettingStarted
https://docs.splunk.com/Documentation/Splunk/latest/RESTUM/RESTusing
APIReference
https://dev.splunk.com/enterprise/reference
APIReference
Endpoints Reference List
Authentication
https://docs.splunk.com/Documentation/Splunk/latest/RESTUM/RESTusing
Documentation
Search REST Reference
Specifications
Schemas & Data
JSONSchema
https://raw.githubusercontent.com/api-evangelist/splunk/refs/heads/main/json-schema/splunk-search-job-schema.json
JSONSchema
https://raw.githubusercontent.com/api-evangelist/splunk/refs/heads/main/json-schema/splunk-event-schema.json