Module 1: Summary
Was this page helpful?
You just created a Splunk app with its own knowledge objects and you got to preview ways you can customize the app further. With this simple start, you can now build on this app to do even more. You can add more knowledge objects such as data inputs or alert actions, and you can customize the way the app looks using dashboards and visualizations.
In this module, you learned these things:
- What a Developer license is and how to get one
- How to create an empty app and access the app configuration file
- How to create an index
- How to use the Splunk Eventgen app to generate sample events for testing
- What knowledge objects are, and how to create and modify them
- How to set permissions for knowledge objects
- How to use configuration files, Splunk Web, the Splunk Enterprise CLI, and the Splunk REST API to work with knowledge objects
- How to modify the app bar
- How to create a simple dashboard
Starting with this basic app, you’re now ready to use other tutorials to do more:
GitHub repository
For reference, the files for the developer tutorials are available on GitHub.
Learn more
| Area | Topic | Documentation |
|---|---|---|
| Step 1: Set up your development environment | Developer environment | Set up the development environment |
| Licenses | About Splunk Enterprise licenses in the Splunk Enterprise Admin Manual | |
| Step 2: Create the app structure | Developing apps | Develop Splunk apps for Splunk Cloud Platform or Splunk Enterprise |
| Create apps | Create a Splunk app and set properties | |
| Step 3: Create an index and generate sample events | Eventgen | Eventgen documentation on GitHub |
| Splunk Enterprise CLI | Administrative CLI commands in the Splunk Enterprise Admin Manual | |
| Splunk REST endpoints | Splunk Enterprise REST API Reference Manual | |
| Step 4: Create saved searches in different ways | Search and SPL | Splunk Enterprise Search Manual |
| Search macros | Use search macros in searches in the Splunk Enterprise Knowledge Manager Manual | |
| Step 5: Set permissions for knowledge objects | Permissions | Set permissions using RBAC |
| Step 6: Modify the app bar and create a home page | Navigation | Add navigation to an app |
| Dashboards and Simple XML | Splunk Enterprise Dashboards and Visualizations manual |