Building Apps with Splunk 8.0

Building Apps with Splunk 8.0

Upcoming Classes

Online

Instructor-led online training

Location Mar 2021 Apr 2021 May 2021 Jun 2021 Jul 2021 Aug 2021 Sep 2021
AMER Eastern Time - Virtual Mar 15 – Mar 16
Mar 29 – Mar 30
Apr 26 – Apr 27
EMEA UK Time - Virtual Apr 6 – Apr 7
AMER Pacific Time - Virtual Apr 12 – Apr 13
APAC Singapore - Virtual Apr 19 – Apr 20

Germany

Location Mar 2021 Apr 2021 May 2021 Jun 2021 Jul 2021 Aug 2021 Sep 2021
Munich Germany (Arrow) Jun 30 – Jul 1

Summary

This two-day course focuses on Splunk Enterprise app development. It's designed for advanced users, administrators, and developers who want to create apps using the Splunk Web Framework. Major topics include planning app development, creating data generators adding data, custom search commands and REST endpoints, maintaining app state using KV Store, and app packaging.

Description

  • Planning Apps
  • Creating Apps
  • Adding Data
  • Enhancing Apps
  • Using the REST API
  • Packaging Apps

Duration

2 Days

Objectives

Module 1 – Planning Apps

  • Set up a development environment
  • Improve app performance
  • Identify Splunk log files
  • Use security best practices
  • Create a data generator

Module 2 – Creating Apps

  • Describe the web framework architecture
  • Manage apps and add-ons
  • Create an app
  • Configure app properties
  • Create app navigation
  • Add app icons and logos

Module 3 – Adding Data

  • List types of data inputs
  • Identify ways to add data
  • Explain modular vs scripted inputs
  • Understand data normalization
  • Review Add-on Builder

Module 4 – Enhancing Apps

  • Review commonly used knowledge object
  • Learn about custom alert actions
  • Build custom workflow actions
  • Develop custom search commands

Module 5 – Using the REST API

  • Explain how the Splunk REST API works
  • Define API endpoints
  • Explain how KV Store works
  • Create a KV Store
  • Use lookups with a KV Store

Module 6 – Packaging Apps

  • Creating an app setup screen
  • Define search time precedence
  • Explain local and default differences
  • Package an app

Prerequisites

    Classes
  • Splunk Fundamentals 1 & 2
  • Creating Dashboards
  • Advanced Dashboards and Visualizations
  • System Administration with Splunk (recommended)
  • Recommended Skills
  • Experience with XML, HTML, Java Script, and Python
  • Using a terminal text editor (vi, Nano or similar)

Onsite Training

For groups of three or more

Request Quote

Public Training

AMER Eastern Time - Virtual

EMEA UK Time - Virtual

AMER Pacific Time - Virtual

APAC Singapore - Virtual

Munich


Don't see a date that works for you?

Request Class