What do you want to see in a Splunk Mobile app?

[carasso]

Here's a very early version of a Splunk App I wrote that generates HTML friendly to small screens and fat fingers.

Use it on your phone or ipad, for example.

http://splunk-base.splunk.com/apps/28665/splunk-mobile

Give it a try. It's a very early version.  The charting only supports timechart right now.

Please post suggestions here. What features do you want?

[carasso]

If you or your users have an iPhone, consider looking at

       http://www.innovato.com

It's Splunk Alerting on your iPhone. Available now. It's not an official Splunk product, but a really useful skunkworks project.

[aluetjen]

The core functionality currently implement is exactly what I need.

I would be looking mainly for the polishing:

• "Saved searches" menu replicated with sub menus.
• Graph formatting applied from saved search (incl additional chart tyypes etc.)
• Swipe through recent searches - after I deployed a change into production, there is usually a limited set of key searches and graphs that I keep an eye on. It would cool if I could swipe through these searches easily without having to navigate back and forwards.
• Minimalist version of the timeline with basic zoom in/out, distribution of events.

Great app! I hope it gets deployed with Splunk Storm soon!

[malberto]

alerting,
alerting details,
saved searches,
what's happening now,
integration with phone features

[Damien_Dallimor]

I heard about the flashless web ui also.

Does the iOS app support "push" for SPLUNK alerts ?

Also, if not already a feature, how about extending the app to be a "forwarder" for iOS metrics ie: user info, geolocation data etc...

DD.

[Damien_Dallimor]

Thanks David..I was presuming it was an iOS app, ergo, thinking of "Push Notification Service" in the iOS context (to augment other push alert channels in Splunk)

There are ways of executing "geolocation" code in the background for iOS apps, but not a full blown background service as is the case with android, and not very efficient with respect to mobile hardware resources.

[carasso]

1) the splunk mobile app is not an iOS app. It's an actual splunk app, that renders splunk convenient for small screens.
2) splunk "pushes" it's alert actions (e.g. email, rss), but for the list of alerts that hvae fired, you'll need to request that
3. iOS apparently is so sandboxed that you cannot really get an metrics. worse, only music programs are allowed to run in the background. we do have an early version of a forwarder for android but it's not ready.

[RicoSuave]

I'm not sure if you are aware, but i've heard that splunk will be going flashless in the future and will be viewable on tablets and phones. I am aware that your app will tailor it to small screens, which is great, but i just want to make sure you know.

[RicoSuave]

I was unaware of your current employer 😛

[carasso]

given that i work at splunk, yes, i've heard about the non-flash version 😉

the charting is the least of the issue though. this version is designed for small screens and fat fingers, while the current product was designed for fullsize displays, with mouse clicking precision. i'm by my phone 24/7 and wanted a way to run savedsearches, and see alerts.