Splunk Developer's Guide - Second Edition

Learn the A to Z of building excellent Splunk applications with the latest techniques using this comprehensive guideAbout This BookThis is the most up-to-date book on Splunk 6.3 for developersGet ahead of being just a Splunk user and start creating custom Splunk applications as per your needsYour one-stop-solution to Splunk application developmentWho This Book Is ForThis book is for those who have some familiarity with Splunk and now want to learn how to develop an efficient Splunk application. Previous experience with Splunk, writing searches, and designing basic dashboards is expected.What You Will LearnImplement a Modular Input and a custom D3 data visualizationCreate a directory structure and set view permissionsCreate a search view and a dashboard view using advanced XML modulesEnhance your application using eventtypes, tags, and macrosPackage a Splunk application using best practicesPublish a Splunk application to the Splunk communityIn DetailSplunk provides a platform that allows you to search data stored on a machine, analyze it, and visualize the analyzed data to make informed decisions. The adoption of Splunk in enterprises is huge, and it has a wide range of customers right from Adobe to Dominos. Using the Splunk platform as a user is one thing, but customizing this platform and creating applications specific to your needs takes more than basic knowledge of the platform.This book will dive into developing Splunk applications that cater to your needs of making sense of data and will let you visualize this data with the help of stunning dashboards.This book includes everything on developing a full-fledged Splunk application right from designing to implementing to publishing. We will design the fundamentals to build a Splunk application and then move on to creating one. During the course of the book, we will cover application data, objects, permissions, and more. After this, we will show you how to enhance the application, including branding, workflows, and enriched data. Views, dashboards, and web frameworks are also covered.This book will showcase everything new in the latest version of Splunk including the latest data models, alert actions, XML forms, various dashboard enhancements, and visualization options (with D3). Finally, we take a look at the latest Splunk cloud applications, advanced integrations, and development as per the latest release.Style and approachThis book is an easy-to-follow guide with lots of tips and tricks to help you master all the concepts necessary to develop and deploy your Splunk applications.