Building Splunk Apps (BAWS)

 

Contenu

This 9-hour module focuses on Splunk app development. It's designed for advanced users, administrators, and developers who want to create apps for Splunk Enterprise and Splunk Cloud. Major topics include planning apps, building data generators, adding data, creating custom search commands and REST endpoints, using the KV Store, app vetting using AppInspect, and app packaging.

Please note that this class may run across two days, with 4.5 hour sessions each day.

A qui s'adresse cette formation

Advanced Splunk users, administrators, and developers.

Certifications

Cette formation prépare à la/aux certifications:

Pré-requis

To be successful, students should have a solid understanding of the following modules:

  • Fundamentals 1 & 2 (Retired)
  • Creating Dashboards

Or the following single-subject modules:

Students should also understand the following modules:

Objectifs

  • Planning Apps
  • Creating Apps
  • Adding Data
  • Enhancing Apps
  • Using the REST API
  • Packaging Apps

Outline: Building Splunk Apps (BAWS)

Topic 1 – Planning Apps

  • Set up a development environment
  • Improve app performance
  • Identify Splunk log files
  • Create a data generator

Topic 2 – Creating Apps

  • Create an app
  • Configure app properties
  • Create app navigation
  • Add app icons and logos

Topic 3 – Adding Data

  • Identify ways to add data
  • Explain modular vs scripted inputs
  • Understand data normalization
  • Review Add-on Builder

Topic 4 – Enhancing Apps

  • Review commonly used knowledge objects
  • Learn about custom alert actions
  • Build custom workflow actions
  • Develop custom search commands

Topic 5 – Using the REST API

  • Describe the Splunk REST API
  • Extend Splunk with custom REST endpoints
  • Review the KV Store and configuration
  • Maintain app state using the KV Store

Topic 6 – Packaging Apps

  • Create an app setup page
  • Define config file precedence
  • Validate an app for Cloud with AppInspect
  • Package an app

Prix & Delivery methods

Formation en ligne

Durée
2 jours

Prix
  • Online Training : CAD 1 905,–
  • Online Training : US$ 1 500,–
  • Splunk Training Credits : 150 SPC
Dates et Inscription
Demande de date
Formation en salle équipée

Durée
2 jours

Prix
  • Canada : CAD 1 905,–
  • Splunk Training Credits : 150 SPC
Dates et Inscription
Demande de date

Cliquez sur le nom de la ville ou sur « Formation en ligne » pour réserver Agenda

This is an Instructor-Led Classroom course
Instructor-led Online Training :   Cours en ligne avec instructeur
*   This class is delivered by a partner.

Etats-Unis

 Formation en ligne 09:00 US/Eastern Cette formation est réalisée par un partenaire S'inscrire
Formation en ligne 09:00 US/Pacific Cette formation est réalisée par un partenaire S'inscrire
Formation en ligne 09:00 US/Eastern Cette formation est réalisée par un partenaire S'inscrire