Implementing Splunk - Second Edition

Chapter 13. Extending Splunk

While the core of Splunk is closed, there are a number of places where you can use scripts or external code to extend default behaviors. In this chapter, we will write a number of examples, covering most of the places where external code can be added. Most code samples are written in Python, so if you are not familiar with Python a reference may be useful.

We will cover the following topics:

• Writing scripts to create events
• Using Splunk from the command line
• Calling Splunk via REST
• Writing custom search commands
• Writing event type renderers
• Writing custom search action scripts

The examples used in this chapter are included in the ImplementingSplunkExtendingExamples app, which can be downloaded from the support page of the ...