The API Report CardAPI Index
Splunk

Splunk API

Observability / SIEM (Cisco-owned) · splunk.com

Splunk exposes several REST surfaces: the splunkd platform API on port 8089, the HTTP Event Collector for ingest, ACS for Splunk Cloud admin, and the Observability Cloud API. Auth spans session keys, tokens, and basic auth. Official SDKs cover Python, Java, JavaScript, C#, PHP, and Ruby.

Last verified: July 2026Software & Data Tools
API GRADE
A
VERIFIED JUL 2026

SCORECARD

ExistenceGOODSeveral REST surfaces: splunkd on port 8089, HTTP Event Collector, ACS for Splunk Cloud, and Observability Cloud.
AccessGOOD
CoverageGOODSearch jobs, saved searches, indexes, alerts, KV store, configuration, ingest, and metrics are scriptable.
AuthGOODSession keys, auth tokens, or basic auth on splunkd; HEC uses per-token GUIDs in the Authorization header.
Docs & DXGOODOfficial SDKs for Python, Java, JavaScript, C#, PHP, and Ruby across platform surfaces.
StabilityGOOD
Supergood: Splunk shipped a real API. Most vendors don't; we ship near-native APIs for the rest.

Frequently asked questions

Splunk scores A on the API Report Card. Splunk exposes several REST surfaces: the splunkd platform API on port 8089, the HTTP Event Collector for ingest, ACS for Splunk Cloud admin, and the Observability Cloud API. Auth spans session keys, tokens, and basic auth. Official SDKs cover Python, Java, JavaScript, C#, PHP, and Ruby.

Tried to integrate with Splunk?