topic Re: Splunk Enterprise Security: Is there a developer version? in Splunk Enterprise Security

Splunk Enterprise Security: Is there a developer version?

rohansecadvbot — Fri, 17 Nov 2017 16:17:01 GMT

Hi
I am trying to create add-ons for splunk enterprise security. is there a developer version of the app , with sample data, that i can install on my local splunk enterprise (like the cloud sandbox trial thats offered). I have a splunk dev license.

Thanks

Re: Splunk Enterprise Security: Is there a developer version?

rpille_splunk — Fri, 17 Nov 2017 17:40:33 GMT

See http://dev.splunk.com/view/enterprise-security/SP-CAAAFA6. There's a contact email there that you can use to request a dev copy.

Re: Splunk Enterprise Security: Is there a developer version?

LukeMurphey — Fri, 17 Nov 2017 18:17:49 GMT

ES includes data samples that can be used to populate the indexes accordingly. To use them, just install the Eventgen app along with ES. Eventgen will automatically begin making events.

Thus, all you need to do is:

Request a Developer copy from http://dev.splunk.com/view/enterprise-security/SP-CAAAFA6
Use Eventgen app to populate the indexes

There are tons of resources that can be helpful for writing apps so make sure to ask questions here if you run into trouble.