Splunk SOAR REST API

The Splunk SOAR REST API enables programmatic creation, updating, and management of security automation objects including containers, assets, playbooks, indicators, lists, and audit records. REST API requests must be performed over HTTPS with token-based or basic authentication.

API entry from apis.yml

apis.yml Raw ↑
aid: splunk:splunk-soar-rest-api
name: Splunk SOAR REST API
description: The Splunk SOAR REST API enables programmatic creation, updating, and management of security
  automation objects including containers, assets, playbooks, indicators, lists, and audit records. REST
  API requests must be performed over HTTPS with token-based or basic authentication.
humanURL: https://docs.splunk.com/Documentation/SOAR/current/PlatformAPI/Using
tags:
- Automation
- Orchestration
- Playbooks
- Security
- SOAR
properties:
- type: Documentation
  url: https://docs.splunk.com/Documentation/SOAR/current/PlatformAPI/Using
- type: Documentation
  url: https://help.splunk.com/en/splunk-soar/soar-cloud/rest-api-reference/using-the-splunk-soar-rest-api/using-the-rest-api-reference-for-splunk-soar-cloud
  title: SOAR Cloud REST API Reference
- type: APIReference
  url: https://help.splunk.com/en/splunk-soar/soar-cloud/rest-api-reference/container-endpoints/rest-containers
  title: Container Endpoints
- type: APIReference
  url: https://help.splunk.com/en/splunk-soar/soar-cloud/rest-api-reference/artifact-endpoints/rest-artifact
  title: Artifact Endpoints
- type: Documentation
  url: https://help.splunk.com/en/splunk-soar/soar-on-premises/rest-api-reference/7.1.0/using-the-splunk-soar-rest-api/using-the-rest-api-reference-for-splunk-soar-on-premises
  title: SOAR On-Premises REST API Reference