Chapter 12. Extending Splunk

While the core of Splunk is closed, there are a number of places where you can use scripts or external code to extend the default behaviors. In this chapter, we will write a number of examples, covering most of the places where external code can be added. Most code samples are written in Python, so if you are not familiar with Python, a reference may be useful.

We will cover:

  • Writing scripts to create events
  • Using Splunk from the command line
  • Calling Splunk via REST
  • Writing custom search commands
  • Writing event type renderers
  • Writing custom search action scripts

The examples used in this chapter are included in the app ImplementingSplunkExtendingExamples, which can be downloaded from the support page of the Packt Publishing ...

Get Implementing Splunk: Big Data Reporting and Development for Operational Intelligence now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.