Required API access Key of Splunk Enterprise

[Nilesh]

@splunk Enterprise Security Team, We need the API access Key of the Splunk Enterprise security app, so please help us where we can find it in the application setting. And we can integrate BeyondTrust PAM with Splunk for syslog analysis.

[VatsalJagani]

@Nilesh - Splunk Enterprise Security App does not have its own API Access Key. But you can explore API endpoints of the Enterprise Security App with Splunk's access key.

• API Endpoints of Enterprise Security App - https://docs.splunk.com/Documentation/ES/7.1.0/API/AbouttheSplunkEnterpriseSecurityAPI
• How to use Splunk Rest Endpoints - https://docs.splunk.com/Documentation/Splunk/9.0.4/RESTREF/RESTprolog
• Access Splunk API in Splunk cloud - https://docs.splunk.com/Documentation/SplunkCloud/9.0.2209/RESTTUT/RESTandCloud

I hope this helps, if it does kindly upvote~!!!

[woodcock]

I don't think there is anything like what you are asking but there is a Mobile Token (AKA "Splunk Secure Gateway") feature that you can exploit.  See here:
https://www.splunk.com/en_us/blog/platform/welcome-to-splunk-secure-gateway-3-0.html