Splunk Developer’s Guide, 2nd Edition

Key Features

• This is the most up-to-date book on Splunk 6.3 for developers
• Get ahead of being just a Splunk user and start creating custom Splunk applications as per your needs
• Your one-stop-solution to Splunk application development

Book Description

Splunk provides a platform that allows you to search data stored on a machine, analyze it, and visualize the analyzed data to make informed decisions. The adoption of Splunk in enterprises is huge, and it has a wide range of customers right from Adobe to Dominos. Using the Splunk platform as a user is one thing, but customizing this platform and creating applications specific to your needs takes more than basic knowledge of the platform.

This book will dive into developing Splunk applications that cater to your needs of making sense of data and will let you visualize this data with the help of stunning dashboards.

This book includes everything on developing a full-fledged Splunk application right from designing to implementing to publishing. We will design the fundamentals to build a Splunk application and then move on to creating one. During the course of the book, we will cover application data, objects, permissions, and more. After this, we will show you how to enhance the application, including branding, workflows, and enriched data. Views, dashboards, and web frameworks are also covered.

This book will showcase everything new in the latest version of Splunk including the latest data models, alert actions, XML forms, various dashboard enhancements, and visualization options (with D3). Finally, we take a look at the latest Splunk cloud applications, advanced integrations, and development as per the latest release.

What you will learn

• Implement a Modular Input and a custom D3 data visualization
• Create a directory structure and set view permissions
• Create a search view and a dashboard view using advanced XML modules
• Enhance your application using eventtypes, tags, and macros
• Package a Splunk application using best practices
• Publish a Splunk application to the Splunk community

About the Author

Kyle Smith is a self-proclaimed geek and has been working with Splunk extensively since 2010. He enjoys integrating Splunk with new sources of data and types of visualization. He has spoken numerous times at the Splunk User Conference (most recently in 2014 on Lesser Known Search Commands) and is an active contributor to the Splunk Answers community and also to the #splunk IRC channel. He was awarded membership into the SplunkTrust as a founding member. He has published several Splunk Apps and add-ons to Splunkbase, the Splunk community’s premier Apps and add-ons platform. He has worked in both higher education and private industry; he is currently working as an integration developer for Splunk’s longest running professional services partner. He lives in central Pennsylvania with his family.

Table of Contents

Chapter 1: Application Design Fundamentals
Chapter 2: Creating Applications
Chapter 3: Enhancing Applications
Chapter 4: Basic Views and Dashboards
Chapter 5: The Splunk Web Framework
Chapter 6: Advanced Integrations and Development
Chapter 7: Packaging Applications
Chapter 8: Publishing Applications