Splunk Developer's Guide

Design, implement, and publish custom Splunk applications and add-ons following best practices

About This Book

• Learn advanced data enrichment techniques and create stunning data visualizations within Splunk
• Package and publish custom written apps for Splunk
• A step-by-step guide to Splunk application development with hands-on examples

Who This Book Is For

If you are a Splunk user and want to enter the wonderful world of Splunk application development, then this book is for you. Some experience with Splunk, writing searches, and designing basic dashboards is expected.

What You Will Learn

• Implement modular input and a custom D3 data visualization
• Create a directory structure and set view permissions
• Create a search view and a dashboard view using advanced XML modules
• Enhance your application using event types, tags, and macros
• Package a Splunk application using best practices
• Publish a Splunk application to the Splunk Community

In Detail

This book will equip you with all the necessary information to make the jump from a regular Splunk user to an efficient Splunk application developer. It will give you an overview of Splunk applications and covers the underpinnings of the structure and configurations that are contained within a Splunk application. You will learn about the design fundamentals of a Splunk application, create a directory structure for your application, and set view permissions. You will also see how to enhance your application using event types, tags, and macros.

By the end of this book, you'll have learned how to implement advanced data input and visualizations, and how to package and publish applications ready to deliver meaningful insights so you make better design decisions for your business.

設計、實施和發布符合最佳實踐的自定義 Splunk 應用程式和附加元件。

關於本書：
- 學習高級資料豐富技術，並在 Splunk 內創建令人驚豔的資料視覺化。
- 將自定義撰寫的應用程式打包並發布到 Splunk。
- 透過實際範例逐步指南，學習 Splunk 應用程式開發。

本書適合對 Splunk 有一定經驗，並且能夠撰寫搜尋和設計基本儀表板的使用者。

你將學到：
- 實施模組化輸入和自定義 D3 資料視覺化。
- 創建目錄結構並設定視圖權限。
- 使用高級 XML 模組創建搜尋視圖和儀表板視圖。
- 透過事件類型、標籤和巨集增強應用程式。
- 使用最佳實踐打包 Splunk 應用程式。
- 將 Splunk 應用程式發布到 Splunk 社群。

本書將為您提供從普通 Splunk 使用者轉變為高效 Splunk 應用程式開發人員所需的所有必要資訊。它將為您提供 Splunk 應用程式的概述，並涵蓋 Splunk 應用程式中包含的結構和配置的基礎知識。您將學習 Splunk 應用程式的設計基礎知識，為應用程式創建目錄結構並設定視圖權限。您還將了解如何使用事件類型、標籤和巨集增強應用程式。

通過閱讀本書，您將學習如何實施高級資料輸入和視覺化，以及如何打包和發布應用程式，以提供有意義的洞察力，從而為您的業務做出更好的設計決策。