Splunk apps are what the industry calls knowledge objects. A knowledge object is a prearrangement of configurations within Splunk, based upon some logic, agreed upon consideration or need. With Splunk, you have the ability to create these apps to extend or customize the users' Splunk experience. In this chapter, we will explore what makes up a Splunk app. We will:
Inspect included apps
Install apps from Splunkbase
Build our own app
Customize app navigation
Customize the look and feel of apps