Developing a Splunk add-on

It is very important to first identify% the problem that the Splunk add-on will solve. On identifying the problem, the following procedure is to be followed to create an add-on.

Building an add-on

It is very important to% define the need and problems that the add-on will be solving before we build it.

If the add-on will be used to add data to Splunk, then how do we get that data into Splunk?

The various methods of data input are shown in the following screenshot. An add-on can be configured to use any one of them depending on the requirement and use case.

Building an add-on

You may wonder, what will the add-on do next? What configuration files ...

Get Splunk: Enterprise Operational Intelligence Delivered now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.