Overview

This two-day course focuses on Splunk Enterprise app development. It’s designed for advanced users, administrators, and developers who want to create apps for Splunk Enterprise and Splunk Cloud. Major topics include planning apps, building data generators, adding data, custom search commands and REST endpoints, using the KV Store, app vetting using AppInspect and app packaging.

Skills Covered

Please refer to course overview.

Who Should Attend

Everyone can attend.

Course Curriculum

Prerequisites

To be successful, students should have a solid understanding of the following courses:

  • Splunk Fundamentals 1
  • Splunk Fundamentals 2
  • Creating Dashboards

OR the following single-subject courses:

  • What Is Splunk?
  • Intro to Splunk
  • Using Fields
  • Visualizations
  • Leveraging Lookups and Subsearches
  • Search Under the Hood
  • Introduction to Knowledge Objects
  • Creating Knowledge Objects
  • Creating Field Extractions
  • Enriching Data with Lookups
  • Introduction to Dashboards
  • Dynamic Dashboards

Students should also have completed the following courses:

  • Advanced Dashboards & Visualizations
  • Splunk System Administration (recommended)

Download Syllabus

Course Modules