Splunk provides an extensive HTTP REST interface, which allows searching, adding data, adding inputs, managing users, and more. Documentation and SDKs are provided by Splunk at http://dev.splunk.com/.
To get an idea of how this REST interaction happens, let's step through a sample conversation to run a query and retrieve the results. The steps are essentially as follows:
We will use the command line program cURL to illustrate these steps. The SDKs make this interaction much simpler.
To start a query, the command is as follows:
curl -u user:pass -k https://yourserver:8089/services/search/jobs -d"search=search query"
This essentially says to POST