Splunk® Enterprise

Developing Views and Apps for Splunk Web

Acrobat logo Download manual as PDF

Splunk Enterprise version 7.3 is no longer supported as of October 22, 2021. See the Splunk Software Support Policy for details. For information about upgrading to a supported version, see How to upgrade Splunk Enterprise.
This documentation does not apply to the most recent version of Splunk® Enterprise. For documentation on the most recent version, go to the latest release.
Acrobat logo Download topic as PDF

Building customizations for the Splunk platform

Learn about APIs and other Splunk platform customization options.

Developer resources


Learn how to build custom solutions for data input, analysis, and alert actions.

API Use case
Custom visualizations Create custom visualizations for analyzing data patterns and trends.
Custom alert actions Implement a custom response to alerts.
Modular inputs

Scripted inputs
Index data from unique sources or in non-standard formats.

Splunk Web customization

Modify login page and other components.

See also

See the following resources for additional information.

To learn about See
  • Building visualizations and dashboards
  • Using Simple XML
  • Working with alerts
  • General app building guidance
  • Leveraging Splunk SDKs
  • Creating custom search commands
  • Managing access to custom search commands
  • Custom search command examples
  • Using the Splunk REST API

Advanced XML Deprecation

As of Splunk Enterprise 6.3, the Advanced XML feature of the Splunk Web Framework is officially deprecated.

What deprecation means

There will no longer be any feature enhancements to the Advanced XML framework.

Support during deprecation

  • Any apps or dashboards using Advanced XML will continue to work.
  • Advanced XML will continue to be supported. Bugs will be fixed and support cases will be handled.

New app development and app migration

  • Because there will be no further investment in the Advanced XML framework, any future development should be done using other features of the Splunk Web Framework (Simple XML, Simple XML jS/CSS extensions, HTML).
  • For existing apps or dashboards that use Advanced XML, while not necessary, we request that developers begin the migration process away from Advanced XML. We encourage developers to provide feedback at devinfo@splunk.com if there are any issues with migration.
  • For information about building dashboards and other visualizations using Simple XML, see Editing Simple XML in Dashboards and Visualizations.

Notice of removal

Splunk provides notice of the planned removal of Advanced XML in the version 7.3.0 Deprecated features in the Release Notes.

Last modified on 12 August, 2019
Custom visualizations overview

This documentation applies to the following versions of Splunk® Enterprise: 7.0.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.0.5, 7.0.6, 7.0.7, 7.0.8, 7.0.9, 7.0.10, 7.0.11, 7.0.13, 7.1.0, 7.1.1, 7.1.2, 7.1.3, 7.1.4, 7.1.5, 7.1.6, 7.1.7, 7.1.8, 7.1.9, 7.1.10, 7.2.0, 7.2.1, 7.2.2, 7.2.3, 7.2.4, 7.2.5, 7.2.6, 7.2.7, 7.2.8, 7.2.9, 7.2.10, 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, 7.3.5, 7.3.6, 7.3.7, 7.3.8, 7.3.9

Was this documentation topic helpful?

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters