Monitoring Splunk

Monitoring API Calls

dloszews
Explorer

Hello,

Does anyone know if there's a way to monitor/track API calls to a Splunk Cloud instance?   Looking particularly for the IP and user account being used for the API call to the cloud instance.  I've done some searching and came up empty.  

Thanks.

Labels (1)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Not 100% sure, but that should be in one of the *_access logs in index=_internal.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Not 100% sure, but that should be in one of the *_access logs in index=_internal.

---
If this reply helps you, Karma would be appreciated.
0 Karma

dloszews
Explorer

thank you, that pointed me in the right direction. 

0 Karma
Get Updates on the Splunk Community!

Why You Can't Miss .conf25: Unleashing the Power of Agentic AI with Splunk & Cisco

The Defining Technology Movement of Our Lifetime The advent of agentic AI is arguably the defining technology ...

Deep Dive into Federated Analytics: Unlocking the Full Power of Your Security Data

In today’s complex digital landscape, security teams face increasing pressure to protect sprawling data across ...

Your summer travels continue with new course releases

Summer in the Northern hemisphere is in full swing, and is often a time to travel and explore. If your summer ...