Rest API request to fetch Audit logs in Splunk Enterprise security

[Chandrashekharg]

We are looking for API request which fetch the audit logs/events performed by users in various application

[isoutamo]

Hi

unfortunately (at least I don't know) that there is separate endpoints to get splunk audit logs.

But you could get those by using search endpoint. https://docs.splunk.com/Documentation/Splunk/9.1.2/RESTREF/RESTsearch

Just create some saved searches which give you needed information and then call those or use ad hoc queries over REST api.

r. Ismo