Splunk Developer Fast Start

Course Duration

3.5 Days

Audience

Employees of federal, state and local governments; and businesses working with the government.

Prerequisites

Familiarity with Splunk search and knowledge objects. Python programming experience required. Understanding of web development concepts (HTML, JavaScript, REST APIs) is helpful.

Course Description

This 3.5-day Fast Start series bundles four developer modules. Participants learn to build Splunk apps and add-ons using the Splunk Software Development Kit (SDK), create custom visualizations and UI components, develop REST API integrations, and implement Splunk best practices for app packaging and certification. This series leads to the Splunk Certified Developer certification.

Learning Objectives

• Set up a Splunk development environment and use the Splunk SDK for Python
• Build Splunk apps and add-ons following Splunk app framework conventions
• Create custom search commands using the Splunk SDK
• Develop custom visualizations using Splunk's JavaScript libraries
• Integrate external data sources and systems via the Splunk REST API
• Package and certify Splunk apps for distribution
• Implement Splunk's SimpleXML and SplunkJS Stack for dashboard development

Course Outline

Splunk Development Fundamentals

• Splunk app architecture
• Development environment setup
• Splunk SDK for Python
• App packaging and deployment

Building Splunk Apps

• App and add-on framework
• Custom search commands
• Alert actions
• Custom REST endpoints

Dashboard and Visualization Development

• SimpleXML dashboards
• Splunk Dashboard Studio
• Custom visualizations with JavaScript
• SplunkJS Stack

REST API and Integrations

• Splunk REST API overview
• Authentication and tokens
• Integrating external data sources
• Building modular inputs

Frequently Asked Questions