This Splunk Software Development Kit (SDK) for Ruby contains library code and examples designed to enable developers to build applications using Splunk.
Splunk is a search engine and analytic environment that uses a distributed map-reduce architecture to efficiently index, search, and process large time-varying data sets.
The Splunk product is popular with system administrators for aggregation and monitoring of IT machine data, security, compliance, and a wide variety of other scenarios that share a requirement to efficiently index, search, analyze, and generate real-time notifications from large volumes of time series data.
The Splunk developer platform enables developers to take advantage of the same technology used by the Splunk product to build exciting new applications that are enabled by Splunk's unique capabilities.
The Splunk SDK for Ruby contains code and some examples that show how to programmatically interact with Splunk for a variety of scenarios, including searching, saved searches, configuration, and many more. This SDK is still in progress and is missing features such as inputs. Stay tuned.
Here's what you need to get going with the Splunk SDK for Ruby.
If you haven't already installed Splunk, download it here. For more information about installing and running Splunk and system requirements, see Installing & Running Splunk.
The Splunk SDK for Ruby requires Ruby 1.9.2 or later.
Get the Splunk SDK for Ruby from GitHub and clone the resources to your computer. Use the following command:
git clone https://github.com/splunk/splunk-sdk-ruby.git
You can also download the SDK as a ZIP file, or install it directly (see below).
If you have cloned the Splunk SDK for Ruby from GitHub, you should
first
install the latest version of rake. For example, open a
command prompt and
enter the following:
gem install rake
Then you can install the Splunk SDK for Ruby by running the following command from the root of the repository (/splunk-sdk-ruby):
rake install
Or, install the Splunk SDK for Ruby directly from RubyGems, without cloning the repository or downloading the ZIP file, by running:
gem install splunk-sdk-ruby
If you are using the Splunk SDK for Ruby in an application, we highly recommend that you use bundler, which installs the prerequisites when you deploy your application. Add the following line to your application's Gemfile to make bundler aware of the Splunk SDK for Ruby:
gem 'splunk-sdk-ruby'
Then run the following command to install all of your application's dependencies, including the Splunk SDK for Ruby:
bundle
Examples are located in several locations within the Splunk SDK for Ruby:
The /splunk-sdk-ruby/examples/ directory
Inline with the source code within the SDK
In the documentation on the Splunk Developer Portal.
First, do not run the test suite against your production Splunk server! Install another copy of Splunk and run the test suite against that.
Second, update your installations of both the Rake build tool and the Test::Unit unit test framework from RubyGems:
gem install rake gem install test-unit
The test suite reads the host to connect to and credentials to use from a .splunkrc file. To connect to Splunk, all of the SDK examples and unit tests take command-line arguments that specify values for the host, port, and login credentials for Splunk. For convenience during development, you can store these arguments as key-value pairs in a text file named .splunkrc. Then, when you don't specify these arguments at the command line, the SDK examples and unit tests use the values from the .splunkrc file.
To set up a .splunkrc file
Create a text file with the following format:
# Splunk host (default: localhost) host=localhost # Splunk admin port (default: 8089) port=8089 # Splunk username username=admin # Splunk password password=changeme # Access scheme (default: https) scheme=https
Save the file as .splunkrc in the current user's home directory.
On Mac OS X
Save the file as:
~/.splunkrc
On Windows
Save the file as:
C:\Users\[currentusername]\.splunkrc
You might get errors in Windows when you try to name the file because ".splunkrc" looks like a nameless file with an extension. You can use the command line to create this file; go to the <b>C:\Users\</b> directory and enter the following command:
Notepad.exe .splunkrc
Click Yes, then continue creating the file.
Notes
Storing login credentials in the .splunkrc file is only for convenience during development; this file isn't part of the Splunk platform and shouldn't be used for storing user credentials for production. And, if you're at all concerned about the security of your credentials, just enter them at the command line and don't bother using the .splunkrc file.
The format of the .splunkrc file has changed between releases. If
you are
using a preview or beta version of the SDK, some of the
newer fields might
not be recognized and you might see errors while
running the examples. You
can either update to the latest version
of the SDK, or comment out the
app, owner, and
version fields.
In the base directory where you installed the Splunk SDK for Ruby, run
rake test
It should run many tests without error.
To generate code coverage of the test suite, first ensure you've installed the latest version of SimpleCov:
gem install simplecov
To generate the code coverage, run:
rake test COVERAGE=true
It will produce a directory called coverage. Open coverage/index.html to see the coverage report.
Note: To protect your Splunk password, you may want to delete the .splunkrc file when you are done running the unit tests.
| /examples | Examples demonstrating various SDK features |
| /lib | Source for the Splunk library modules |
| /test | Source for unit tests |
The CHANGELOG.md file in the root of the repository contains a description of changes for each version of the SDK. You can also find it online at github.com/splunk/splunk-sdk-ruby/blob/master/CHANGELOG.md.
The master branch always represents a stable and released version of the SDK.
If you need to know more:
For all things developer with Splunk, your main resource is the Splunk Developer Portal.
For conceptual and how-to documentation, see the Overview of the Splunk SDK for Ruby.
For API reference documentation, see the Splunk SDK for Ruby Reference.
For more about the Splunk REST API, see the REST API Reference.
For more about about Splunk in general, see Splunk>Docs.
For more about this SDK's repository, see our GitHub Wiki.
If you would like to contribute to the SDK, go here for more information:
You will be granted support if you or your company are already covered under an existing maintenance/support agreement. Visit www.splunk.com/support and click Submit a Case under <b>Contact a Support Engineer</b>.
If you are not covered under an existing maintenance/support agreement, you can find help through the broader community at:
<ul> <li><a href='splunk-base.splunk.com/answers/'>Splunk Answers</a> (use the sdk and ruby tags to identify your questions)</li> <li><a href='groups.google.com/group/splunkdev'>Splunkdev Google Group</a></li> </ul> 3. Splunk will NOT provide support for SDKs if the core library (the code in the lib directory) has been modified. If you modify an SDK and want support, you can find help through the broader community and Splunk answers (see above). We would also like to know why you modified the core library—please send feedback to devinfo@splunk.com. 4. File any issues on GitHub.
You can reach the Dev Platform team at <a href=“devinfo@splunk.com”> devinfo@splunk.com</a>.
The Splunk Software Development Kit for Ruby is licensed under the Apache License 2.0. Details can be found in the LICENSE file.