Splunk® Enterprise

Developing Views and Apps for Splunk Web

Download manual as PDF

This documentation does not apply to the most recent version of Splunk. Click here for the latest version.
Download topic as PDF

Extend Splunk Enterprise

There are several ways you can extend Splunk Enterprise using the Splunk SDKs, the Splunk Enterprise REST API, and custom search commands.

Splunk SDKs

The Splunk SDKs let you write applications in numerous programming languages that access the Splunk Enterprise REST API. The Splunk Developer Portal provides details about the available SDKs plus documentation on how to build applications using the SDKs. The following SDKs are available:

Splunk Enterprise REST API

You can use the Splunk Enterprise REST API to run searches or manage Splunk Enterprise configurations and objects without accessing Splunk Enterprise through Splunk Web.

Custom search commands

Splunk Enterprise ships with a wide variety of search commands. However, you may want to build your own custom search command to parse and present data in a new way. Custom search commands requires a moderate understanding of Python.

Note: Search commands are not recursive -- they only act on the data they receive back from the search.
Modular inputs examples
Splunk SDKs

This documentation applies to the following versions of Splunk® Enterprise: 6.2.0, 6.2.1, 6.2.2, 6.2.3, 6.2.4, 6.2.5, 6.2.6, 6.2.7, 6.2.8, 6.2.9, 6.2.10, 6.2.11, 6.2.12, 6.2.13, 6.2.14, 6.2.15

Was this documentation topic helpful?

Enter your email address, and someone from the documentation team will respond to you:

Please provide your comments here. Ask a question or make a suggestion.

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters