Splunk apps are what the industry calls knowledge, or, sometimes, apps are a collection of knowledge objects. A knowledge object is a prearrangement of configurations within Splunk, based on some logic and agreed upon due to some consideration or need. With Splunk, you have the ability to create these apps to extend or customize users' Splunk experience. In this chapter, we will explore what makes up a Splunk app, as well as exploring the latest self-service app management (originally introduced in version 6.6) updated in version 7.0.
We will:
- Inspect included apps
- Install apps from Splunkbase
- Build our own app
- Customize app navigation
- Customize the look and feel of apps
- Self-service app management