# Splunk Enterprise Security API

**Canonical:** https://apis.io/apis/splunk/splunk-enterprise-security-api/  
**Provider:** Splunk — https://apis.io/providers/splunk/  
**Documentation:** https://help.splunk.com/en/splunk-enterprise-security-8/api-reference

Splunk Enterprise Security API is one of 14 APIs that [Splunk](https://apis.io/providers/splunk/) publishes on the [APIs.io](https://apis.io/) network. Tagged areas include Enterprise Security, Findings, Investigations, Security, and SIEM. The published artifact set on APIs.io includes API documentation, an API reference, and a getting-started guide.

The Splunk Enterprise Security API provides REST endpoints for accessing and modifying findings, investigations, risk scores, assets, and identities in Splunk Enterprise Security. It includes an OpenAPI specification for download.

## Machine-readable artifacts (5)

- **Documentation** — https://help.splunk.com/en/splunk-enterprise-security-8/api-reference
- **APIReference** — https://help.splunk.com/en/splunk-enterprise-security-8/rest-api-reference
- **GettingStarted** — https://dev.splunk.com/enterprise/docs/devtools/enterprisesecurity
- **APIReference** — https://help.splunk.com/en/splunk-enterprise-security-8/rest-api-reference/8.0/threat-intelligence-endpoints/threat-intelligence-api-reference
- **Documentation** — https://dev.splunk.com/enterprise/docs/devtools/enterprisesecurity/threatintelligenceframework/

## Other Splunk APIs (12)

- [Splunk](https://apis.io/apis/splunk/splunk/)
- [Splunk Cloud Platform REST API](https://apis.io/apis/splunk/splunk-cloud-platform-rest-api/)
- [Splunk Cloud Admin Config Service (ACS) API](https://apis.io/apis/splunk/splunk-cloud-admin-config-service-api/)
- [Splunk Observability Cloud API](https://apis.io/apis/splunk/splunk-observability-cloud-api/)
- [Splunk SOAR REST API](https://apis.io/apis/splunk/splunk-soar-rest-api/)
- [Splunk IT Service Intelligence (ITSI) REST API](https://apis.io/apis/splunk/splunk-itsi-rest-api/)
- [Splunk HTTP Event Collector (HEC) API](https://apis.io/apis/splunk/splunk-http-event-collector-api/)
- [Splunk Intelligence Management API](https://apis.io/apis/splunk/splunk-intelligence-management-api/)
- [Splunk SOAR Playbook Automation API](https://apis.io/apis/splunk/splunk-soar-playbook-automation-api/)
- [Splunk AppInspect API](https://apis.io/apis/splunk/splunk-appinspect-api/)
- [Splunk Data Inputs API](https://apis.io/apis/splunk/splunk-data-inputs-api/)
- [Splunk Index API](https://apis.io/apis/splunk/splunk-index-api/)

## Tags

Enterprise Security, Findings, Investigations, Security, SIEM

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/splunk/splunk-enterprise-security-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/splunk/.