In this chapter, we will explore what makes up a Splunk app. We will:
In the strictest sense, an app is a directory of configurations and, sometimes, code. The directories and files inside have a particular naming convention and structure. All configurations are in plain text, and can be edited using your choice of text editor.
Apps generally serve one or more of the following purposes: