There is a pretty good documentation available on Splunk website related to Splunk REST API. You might want to have a look at it. The link below is related to Search endpoint: https://docs.splunk.com/Documentation/Splunk/7.2.3/RESTREF/RESTsearch But basically what you need is: 1) url is https://splunkserver:8089/services/jobs/export (export - to export search results, there are other search endpoints available too) 2) use basic authentication with your login name and password 3) method either POST or GET (see the docs), but let's say you use POST 4) as request parameters (key / value pairs in Params tab in Postman) use (note, colon below is a separator between key and value): earliest_time : -1h (last 1 hour) latest_time : now output_mode : json (or csv or xml, see the docs) search : sourcetype="httpevent" 69272d19-53a9-4539-b149-9fc46bbc73cf Results of the query will be in the format you specified in output_mode parameter. ... View more