As we've seen within this chapter, Splunk apps are composed of dashboards, reports, alerts, and workflows, all optimized for a particular purpose. Splunk add-ons are a type of app that provide specific capabilities to other apps, such as getting data in, mapping data, or providing saved searches and macros.
When it comes to the Splunk Cloud environment, only pre-approved apps and add-ons can be installed. Approved apps are those apps that have been examined by Splunk to ensure they comply with the security requirements of Splunk Cloud.
Once deployed to the Cloud environment, management of an app starts with opening a support ticket. Sometimes timing is not optimal and in some cases, a fee is involved. To address this, there is the concept of self-service app management and the Splunk Packaging Toolkit.
The Splunk Packaging Toolkit is the tool for...