Adding IOCs to splunk using REST API - Splunk Community

Splunk Enterprise

I have a use-case where defanged IoC attachments are downloaded from outlook and uploaded into Splunk.

We will like to check if there is any Postman API to upload IoCs for a user with:

a. Splunk Enterprise license only (lookup table)

b. Has Splunk Enterprise and Splunk Enterprise security license

i wonder if there is any client to test the Splunk REST API, something like postman.

I can't seem to find the Splunk API collection.

Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...