Throughout all of the chapters so far, we have been dealing directly with the core functionality found within Splunk Enterprise. In this chapter, we will dive into the functionality that lets us create an even more powerful interactive experience with Splunk. By leveraging the latest technology in Splunk Enterprise, we can customize the look and feel, expose our users to richer visualizations, extract knowledge and data from Splunk into our own internal applications, or build completely new applications that leverage Splunk.

Taking your Splunk experience to the next level breaks out into three areas: the web framework, the REST API, and software development kits (SDKs).

Web framework

The web framework is a core component of the Splunk 6 platform. The framework extends the abilities of Splunk to allow for more extensible development. Server-side functionality leverages the Django web framework to create a more fluid development experience. In this framework, you don't have to...