Design, implement, and publish custom Splunk applications and add-ons following best practices
About This Book
- Learn advanced data enrichment techniques and create stunning data visualizations within Splunk
- Package and publish custom written apps for Splunk
- A step-by-step guide to Splunk application development with hands-on examples
Who This Book Is For
If you are a Splunk user and want to enter the wonderful world of Splunk application development, then this book is for you. Some experience with Splunk, writing searches, and designing basic dashboards is expected.
What You Will Learn
- Implement modular input and a custom D3 data visualization
- Create a directory structure and set view permissions
- Create a search view and a dashboard view using advanced XML modules
- Enhance your application using event types, tags, and macros
- Package a Splunk application using best practices
- Publish a Splunk application to the Splunk Community
In Detail
This book will equip you with all the necessary information to make the jump from a regular Splunk user to an efficient Splunk application developer. It will give you an overview of Splunk applications and covers the underpinnings of the structure and configurations that are contained within a Splunk application. You will learn about the design fundamentals of a Splunk application, create a directory structure for your application, and set view permissions. You will also see how to enhance your application using event types, tags, and macros.
By the end of this book, you'll have learned how to implement advanced data input and visualizations, and how to package and publish applications ready to deliver meaningful insights so you make better design decisions for your business.
Kyle Smith
Kyle Smith is a self-proclaimed geek and has been working with Splunk extensively since 2010. He enjoys integrating Splunk with new sources of data and types of visualizations. He has spoken numerous times at the Splunk User Conference (most recently in 2014 on lesser-known search commands) and is an active contributor to the Splunk Answers community as well as on the #splunk IRC channel. He has published several Splunk Apps and add-ons to Splunk base, the Splunk community's premier Apps and add-ons publishing platform. He has worked in both higher education and the private industry, most recently as an infrastructure analyst at a Fortune 400 company. He lives in Central Pennsylvania with his family.