Splunk Best Practices

Summary

In this chapter, we have discussed how to take a series of apps from Splunkbase, as well as any dashboard that the user created, and put them into a Splunk app for ease of use. We have also talked about how to adjust the navigation XML to ease user navigation in such an app. In the next chapter, we will be discussing how to route data sets around an enterprise environment. We will also be discussing leveraging Splunk's data routing capabilities, effectively sending the same data (often OS level metrics such as CPU/disk/memory) to multiple destinations.