Workspot SIEM (Splunk) Events API

aid: workspot:siem
name: Workspot SIEM (Splunk) Events API
description: 'HMAC-SHA256 authenticated REST API for fetching Workspot Control event data — end-user and
  administrator actions — into Splunk or any other SIEM. Uses a submit/poll/fetch flow with checkpoint-based
  incremental delivery: POST an events request with the last checkpoint, poll the returned request token
  with HEAD until ready, then GET batches of up to 1000 events with the new checkpoint returned in the
  X-Ws-Checkpoint response header.'
humanURL: https://docs.workspot.com/docs/workspot-splunksiem-api-user-guide
baseURL: https://api.workspot.com
tags:
- SIEM
- Security Events
- Audit Logs
- Splunk
properties:
- type: Documentation
  url: https://docs.workspot.com/docs/workspot-splunksiem-api-user-guide
- type: Events
  url: asyncapi/workspot-siem-events.yml
image: https://www.workspot.com/app/uploads/2024/10/cropped-workspot-secondary-logo-blue-192x192.png