Splunk Developer's Guide · 2nd Edition by Smith, Kyle -- Read -- Imperial Library of Trantor

Index

Splunk Developer's Guide Second Edition

Table of Contents Splunk Developer's Guide Second Edition Credits About the Author About the Reviewer www.PacktPub.com

Support files, eBooks, discount offers, and more

Why subscribe? Free access for Packt account holders Instant updates on new Packt books

Preface

Overview of what this book isn't What this book is Assumptions What this book covers What you need for this book Who this book is for Conventions Reader feedback Customer support

Downloading the example code Errata Piracy Questions

1. Application Design Fundamentals

What is a Splunk application?

Why applications?

Definitions

Designing the App

Identifying the use case Identifying what you want to consume Identifying what you want to brand Identifying what you want to display

Installing Apps

Splunk Web The Splunk command line

Unzipping using the command line

Summary

2. Creating Applications

A brief clarification Methods of creating applications

GUI CLI FreeForm

Basic application structure

appserver bin default local lookups metadata static

Application data

Indexes Source types Sources

Available Splunk knowledge objects

Macros Event types Tags Saved searches Dashboards Lookups Configurations

Object permissions

The setup screen

The endpoint The setup file

Summary

3. Enhancing Applications

Workflows Custom alert actions Enriched data

Event types Tags Macros Lookups Common Information Model

Branding your App

Logos Navigation CSS JavaScript

Acceleration

Summary indexing Accelerated reports

Summary

4. Basic Views and Dashboards

Knowing your data

Available modules

SimpleXML dashboard

SimpleXML forms

Custom JavaScript, CSS, and Tokens HTML dashboards Summary

5. The Splunk Web Framework

The HTML dashboard SplunkJS Stack

Search-related modules

SearchManager SavedSearchManager PostProcessManager

View-related modules

ChartView

The different types of ChartView

Area Bar Column Filler gauge Line Marker gauge Pie chart Radial gauge Scatter

Display-related modules

CheckboxView CheckboxGroupView DropdownView EventsViewerView FooterView HeaderView MultiDropdownView RadioGroupView SearchBarView SearchControlsView SimpleSplunkView SingleView MapElement TableView TextInputView TimeRangeView TimelineView

Tokenization Customizing Splunk dashboards using CSS Customizing Splunk dashboards using JavaScript Custom D3 visualization External data and content

Data Content

Summary

6. Advanced Integrations and Development

Modular D3 visualization Modular inputs

The spec file Testing modular inputs Configuring modular inputs

The App Key Value Store

When would you use the KV Store? Configuring the KV Store

Data models Version control and package managers

npm Bower Gulp Git Tying them all together

Summary

7. Packaging Applications

Naming guidelines

Dos and don'ts

Packaging the App The App packaging checklist Summary

8. Publishing Applications

Self-hosting your App Splunkbase

Certified Applications Splunk Cloud applications

Community

Answers dev.splunk.com Internet Relay Chat Wiki User groups The SplunkTrust

Summary

Index

← Prev
Back
Next →

← Prev
Back
Next →