Preface

Splunk is awesome! You can not only consume virtually any data, but also extend and integrate Splunk with virtually any external system. Splunk uses sets of configurations referred to as applications or add-ons, which are the primary focus of this book. Leveraging these applications and add-ons is what gives Splunk its unique ability to extend, learn, analyze, and visualize information.

Splunk helps users determine the root cause of a failure, get a quick overview of system health, and take a deep dive into SQL statements and messages, just to name a few. Aggregation and centralization of log and event management are a growing trend in the big data sphere. By leveraging the combined intelligence gathered from correlating disparate sets of data, businesses or individuals can make data-based decisions. This book will help Splunk developers, or even simply curious end users, develop different methods of consuming new data and design new types of visualizations. Also it simply offers tips and tricks that help the software development life cycle.