Splunk offers extensive flexibility in the enterprise edition to help developers build robust applications. The development in Splunk path will equip you with the necessary knowledge and skills to build enterprise-grade applications by utilizing the best of what the platform has to offer, taking your foundational knowledge to more advanced levels. In this course, we will be exploring Splunk application planning, understanding and preparing data, creating apps and visualizations, result validation, and advanced release/management options.
The course starts with setting up Splunk on the cloud and locally, and choosing the right platform for you. Then, you’ll learn the features, components, types, and more about Splunk through this course. After that, you’ll learn about Splunk apps and how to create them along with integrating data inputs, and maintaining them. Post that, you’ll look at Splunk’s REST API, SDK, and KV-Store. You’ll explore the HTTP Event Collector (HEC).
Finally, in the last section, you’ll use this knowledge to build a Splunk web application.
By the end of this course, you’ll be able to create effective visualizations for different stakeholders with the Splunk web framework, utilize tokens and event handlers, explore SDKs, interact with REST APIs, and build a test lab for log analysis and incident response.
All the resource files are uploaded on the GitHub repository at https://github.com/PacktPublishing/Splunk-for-Beginners-Make-the-Most-o…
Set up the environment
Look at the features of Splunk
Learn about the Splunk REST API
Use tokens, event handlers, and custom visualizations
Explain how REST APIs and the KV Store work
Plan and create secure apps within the Splunk web framework