Join the Developer workshop to learn about the many options there are for developers to extend and integrate with the Splunk platform by using our various language SDKs, the Web Framework , creating custom components such as Search Commands and Modular Inputs and ultimately understanding the potential opportunity for you in creating your own Splunk Apps.
3. Grigori Melnik, Principal Product Manager – Splunk Developer Platform
3
A day in the life of a dev
• Code
• Build
• Test
• Package
• Release
• Configuration
• Monitor
4. Grigori Melnik, Principal Product Manager – Splunk Developer Platform
4 4
CI / Build
Servers
Project and Issue
Tracking
Code
Repository
QA / Testing
Tools
End-To-End Visibility Across The Dev Tool Chain
Deployment Servers /
Automation
5. Grigori Melnik, Principal Product Manager – Splunk Developer Platform
5
CI / Build
Server
Code
Review
Task
Tracking
What Data Can You Splunk?
Logs – Which code has already been reviewed for this release/sprint? Who has
completed the most code reviews? What code has NOT been reviewed?
Logs/API – Who is changing files? What kinds of files are being changed? What
branches are most active? What types of activities are occurring for a branch?
Version
Control
Logs/API – How many builds completed today/this week/this month? Which
check-in kicked off this build? Which tests ran against this failed build?
Logs – Which tasks are assigned to which developers? What progress is being
made to complete assigned tasks? What tasks remain for this release/sprint?
5
8. Grigori Melnik, Principal Product Manager – Splunk Developer Platform
8
Everyone can be a
Splunk App Developer!
8
9. Grigori Melnik, Principal Product Manager – Splunk Developer Platform
9
Splunk for Application Developers
9
REST API
Build Splunk Apps Extend and Integrate Splunk
Simple XML
JavaScript/CSS Extensions .Net
JavaScript
Python
Ruby
Java
PHP
Data Models
Search Extensibility
Modular Inputs
SDKs
KV Store
10. Grigori Melnik, Principal Product Manager – Splunk Developer Platform
Log directly to
Splunk via HTTP,
TCP, UDP
Integrate search
results with other
applications using
custom
visualizations
Create and run
searches from
other applications
The REST API and SDKs
10
VisualizeSearch Manage
Add/Delete Users
Manage Inputs
Index
11. Grigori Melnik, Principal Product Manager – Splunk Developer Platform
11
The Splunk REST API
Exposes an API method for every feature in the product
– Whatever you can do in the UI – you can do through the API
– Index, Search, Visualize, Manage
API is RESTful
– Endpoints are served by splunkd
– Requests are GET, POST, and DELETE HTTP methods
– Responses are Atom XML & JSON
– Versioning as of Splunk 5.0
– Search results can be output in CSV/JSON/XML
1
12. Grigori Melnik, Principal Product Manager – Splunk Developer Platform
12
What does a Splunk App look like?
14. Grigori Melnik, Principal Product Manager – Splunk Developer Platform
14
• Find some data
• Get the data into Splunk
• Search for the Data
• Visualise the data
The Plan