Other Usage

Rest API request to fetch Audit logs in Splunk Enterprise security

Chandrashekharg
Engager

We are looking for API request which fetch the audit logs/events performed by users in various application

Labels (1)
0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

unfortunately (at least I don't know) that there is separate endpoints to get splunk audit logs.

But you could get those by using search endpoint. https://docs.splunk.com/Documentation/Splunk/9.1.2/RESTREF/RESTsearch

Just create some saved searches which give you needed information and then call those or use ad hoc queries over REST api.

r. Ismo

Get Updates on the Splunk Community!

Now Playing: Splunk Education Summer Learning Premieres

It’s premiere season, and Splunk Education is rolling out new releases you won’t want to miss. Whether you’re ...

The Visibility Gap: Hybrid Networks and IT Services

The most forward thinking enterprises among us see their network as much more than infrastructure – it's their ...

Get Operational Insights Quickly with Natural Language on the Splunk Platform

In today’s fast-paced digital world, turning data into actionable insights is essential for success. With ...