Extending Splunk

While the core of Splunk is closed, there are a number of places where you can use scripts or external code to extend default behaviors. In this chapter, we will write a number of examples, covering most of the places where external code can be added. Most code samples are written in Python, so if you are not familiar with Python, a reference may be useful.

We will cover the following topics:

  • Writing scripts to create events
  • Using Splunk from the command line
  • Calling Splunk via REST
  • Writing custom search commands
  • Writing event type renderers
  • Writing custom search action scripts

The examples used in this chapter are included in the ImplementingSplunkExtendingExamples app, which can be downloaded from the support page of ...

Get Implementing Splunk 7 - Third Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.