topic Required API access Key of Splunk Enterprise in Splunk Dev

Required API access Key of Splunk Enterprise

Nilesh — Mon, 10 Apr 2023 16:15:20 GMT

@splunk Enterprise Security Team, We need the API access Key of the Splunk Enterprise security app, so please help us where we can find it in the application setting. And we can integrate BeyondTrust PAM with Splunk for syslog analysis.

Re: Required API access Key of Splunk enterprise

woodcock — Fri, 07 Apr 2023 00:34:36 GMT

I don't think there is anything like what you are asking but there is a Mobile Token (AKA "Splunk Secure Gateway") feature that you can exploit. See here:
https://www.splunk.com/en_us/blog/platform/welcome-to-splunk-secure-gateway-3-0.html

Re: Required API access Key of Splunk enterprise

VatsalJagani — Fri, 07 Apr 2023 05:46:48 GMT

@Nilesh - Splunk Enterprise Security App does not have its own API Access Key. But you can explore API endpoints of the Enterprise Security App with Splunk's access key.

API Endpoints of Enterprise Security App - https://docs.splunk.com/Documentation/ES/7.1.0/API/AbouttheSplunkEnterpriseSecurityAPI
How to use Splunk Rest Endpoints - https://docs.splunk.com/Documentation/Splunk/9.0.4/RESTREF/RESTprolog
Access Splunk API in Splunk cloud - https://docs.splunk.com/Documentation/SplunkCloud/9.0.2209/RESTTUT/RESTandCloud

I hope this helps, if it does kindly upvote~!!!