As we mentioned, you can create your own apps in Splunk. In practice, user-created apps—or more specifically, the app directories and their contents—are typically used as a container for your saved searches, reports, dashboards, and configuration files that pertain to the data for a specific technology, application, environment, or business unit. These apps can be as simple as a few .conf files (such as indexes.conf or inputs.conf) to configure Splunk to import and store data, or a sophisticated collection of knowledge objects, scripts, and a full-featured user interface to allow data collection, visualization, analysis, and reporting. All of the files within an app are in plain text (and can be edited) and Splunk provides full documentation on all of its .conf files—including the stanzas, attributes, and possible values—so that...
Splunk 7.x Quick Start Guide
By :
Splunk 7.x Quick Start Guide
By:
Overview of this book
Splunk is a leading platform and solution for collecting, searching, and extracting value from ever increasing amounts of big data - and big data is eating the world! This book covers all the crucial Splunk topics and gives you the information and examples to get the immediate job done. You will find enough insights to support further research and use Splunk to suit any business environment or situation.
Splunk 7.x Quick Start Guide gives you a thorough understanding of how Splunk works. You will learn about all the critical tasks for architecting, implementing, administering, and utilizing Splunk Enterprise to collect, store, retrieve, format, analyze, and visualize machine data. You will find step-by-step examples based on real-world experience and practical use cases that are applicable to all Splunk environments. There is a careful balance between adequate coverage of all the critical topics with short but relevant deep-dives into the configuration options and steps to carry out the day-to-day tasks that matter.
By the end of the book, you will be a confident and proficient Splunk architect and administrator.
Related Content you might be interested in
Current Title:
Splunk 7.x Quick Start Guide
Table of Contents (12 chapters)
Preface
Free Chapter
Introduction to Splunk
Architecting Splunk
Installing and Configuring Splunk
Getting Data into Splunk
Administering Splunk Apps and Users
Searching with Splunk
Splunk Knowledge Objects
Splunk Reports, Dashboards, and Alerts
Splunk Applications
Advanced Splunk
Other Books You May Enjoy
Customer Reviews