Splunk Operational Intelligence Cookbook

Chapter 10. Above and Beyond – Customization, Web Framework, REST API, and SDKs

In this chapter, we will learn how to customize a Splunk application and use advanced features of Splunk SDKs and APIs to work with the data within Splunk. You will learn about:

• Customizing the application's navigation
• Adding a force-directed graph of web hits
• Adding a calendar heatmap of product purchases
• Remotely querying Splunk's REST API for unique page views
• Creating a Python application to return unique IP addresses
• Creating a custom search command to format product names

Introduction

Throughout all of the chapters so far, we have been dealing directly with the core functionality found within Splunk Enterprise. In this chapter, we will dive into the functionality that ...