Developing Views and Apps for Splunk Web

Step 2: Create your app

The Splunk app framework works from a specific directory structure. You can create the directory structure by hand within your $SPLUNK_HOME/etc/apps directory. However, you can also use the Splunk app builder to create and customize your app workspace. App builder creates the directory structure for you, as well as the app.conf configuration file that registers your app with your Splunk server.

Use app builder

App builder is available from Settings. To use app builder in Splunk Web, follow these instructions:

1. Log in to Splunk Web and navigate to Apps > Manage Apps.

2. Click Create app.

3. Specify the following in the Add new panel.

• Name: The name for your app. The name maps to the label setting in app.conf and is the name that appears in Launcher and the App drop-down menu in Splunk Web.

• Folder name: The name to use for the directory in $SPLUNK_HOME.
  The name of the folder cannot contain the "dot" (.) character .

• Visible: Apps containing views should be marked visible.

• Description: A description of the app. Previous versions of Splunk Enterprise display the description on the Splunk Home page. The current version of Splunk Enterprise does not use the description. If you plan to upload your app to Splunkbase, supply a description. Splunkbase uses the description to validate an app package.

• Template: The sample_app and barebones app templates are provided. sample_app includes sample views and saved searches. barebones just provides the app directory structure and an app.conf file. You can add additional customized templates.

Note: The sample_app template includes application.css and javascript.css files for dashboard styling and behavior. In Splunk 6 and later, you need to explicitly reference these files from the <dashboard> element, as described here: JavaScript and CSS support changes

• Upload asset: Add any image, HTML, JavaScript, CSS, or other asset to your app. You can only upload one file from this panel.

4. Save your app.

You do not have to restart Splunk Enterprise before your app is available, but you may need to restart to load configurations.

5. Continue building out your app in Step 3: add configurations.