While the core of Splunk is closed, there are a number of places where you can use scripts or external code to extend default behaviors. In this chapter, we will write a number of examples, covering most of the places where external code can be added. Most code samples are written in Python, so if you are not familiar with Python a reference may be useful.
We will cover the following topics:
Writing scripts to create events
Using Splunk from the command line
Calling Splunk via REST
Writing custom search commands
Writing event type renderers
Writing custom search action scripts
The examples used in this chapter are included in the ImplementingSplunkExtendingExamples app, which can be downloaded from the support page of the Packt Publishing website at www.packtpub.com/support.
In addition, Hunk will be defined and an overview will be given.