Whether you’re building custom apps, diving into SPL2, or integrating AI and machine learning into your workflows, .conf25 is packed with technical sessions designed to push your skills further. This year’s Developer track has something for every builder—from hands-on AI workshops to best practices for app certification.
To help you make the most of your conference experience, we’ve highlighted six standout sessions tailored specifically for developers—organized by learning level to help you find the best fit for where you are now, and where you want to go.
Novice-Level Sessions: Build Your Foundation in Splunk Development
DEV1913 - SPL2 Apps: The New Kid In Town
Tuesday, Sep 9 | 12:30 PM - 12:50 PM EDT
What can you do with an SPL2-based app that you can’t do with an SPL app? Design multiple searches, either chained or branched, in a single interface file. Curate data and employ sensitive data masking for specific user roles. Create extensible and reusable custom functions. Seamlessly handle JSON data. Use partitioned functions to define a single function with a default behavior but with multiple implementations based on the value of a variable.
DEV1226 – Dive Into App Development with the New Splunk Developer Program
September 9 | 2:00–2:20 PM EDT
Got a great idea for your next Splunk app but struggling on where to get started? Look no further than the new Splunk Developer Program! Whether you are lost on where to get started, looking for the community to share your work with, or hoping to promote your apps and build your reputation, the Splunk Developer Program will be your one-stop shop. In this session, you’ll get a first look at all you can achieve and access with this new free program launching now!
DEV1938 – AI Exploration: MLTK, DSDL App, and AI Assistant in Splunk
September 10 | 12:30–1:30 PM EDT
Join a hands-on workshop to integrate Splunk with Jupyter notebooks and discover how powerful Splunk is for using and optimizing your AI models. We'll provide the code to set up your first model and import it as ONNX. With Splunk you'll train, test, and tune to produce great visualizations that are easy to explain. We'll use the Assistant to generate SPL from natural language, and explore data for anomaly detection and more real-world scenarios. No data science expertise required!
Note: This is an Interactive Workshop Session. Please bring your own laptop to dive into product use cases, walk through real scenarios and demo as you go. Attendance is capped based on content and sessions will not be recorded.
Intermediate Sessions: Strengthen and Scale Your App Development Skills
DEV1390 - From Idea to Seamless Deployment & Publishing: Splunk App Development Insights from ENGIE France Retail
Tuesday, Sep 9 | 3:00 PM - 3:45 PM EDT
Discover the full journey of Splunk app development—from idea to deployment. Learn best practices for performance, security, and compliance while optimizing searches and enhancing UI/UX. Explore real-world insights from ENGIE’s use of Splunk, tackling challenges in Cloud and Enterprise environments. Finally, master the Splunkbase publishing process with step-by-step guidance on validation, certification, and increasing your app’s visibility.
DEV1483 – Splunk UI Toolkit: Custom Problem to Custom Splunk App
September 9 | 10:30–11:30 AM EDT
Have you been craving a specific user experience that extends beyond normal dashboards? Learn how Lockheed Martin unlocked a standardized alert triage workflow by building a custom Splunk app using the Splunk UI Toolkit: a set of free, public React packages used in many Splunk products you know and love. Follow along in this workshop as we guide you from a real-life business problem to a full-fledged custom Splunk app, while acquiring practical tips to implement at your own company.
Note: This is an Interactive Workshop Session. Please bring your own laptop to dive into product use cases, walk through real scenarios and demo as you go. Attendance is capped based on content and sessions will not be recorded.
DEV1455 – Fly Through AppInspect: Best Practices to Help Keep Your App Secure and Compatible With the Splunk Platform
September 10 | 1:30–2:15 PM EDT
Go from zero to hero in this session with an AppInspect engineer. Learn the ins and outs of AppInspect, including checks and tags, the API, CLI, and documentation, so you can secure and certify your app confidently.
Advanced Topics: Power Up with AI, ML, and CI/CD
DEV1666 – AI Agents Unleashed: Build Your Splunk-Powered Sidekick in One Explosive Workshop
September 10 | 11:00 AM–12:00 PM EDT
Struggling with manual Splunk data digs? In this workshop, build an AI agent with LangChain's LangGraph to search, analyze, and extract insights from Splunk Enterprise Security in real time. Clone a GitHub template, code custom tools to query Splunk, tap its API, and download Splunkbase apps, all in one session. Bring your laptop and leave with a game-changing skill!
Note: This is an Interactive Workshop Session. Please bring your own laptop to dive into product use cases, walk through real scenarios and demo as you go. Attendance is capped based on content and sessions will not be recorded.
DEV1601 – Mastering Splunk Add-Ons: Contribute and Collaborate Efficiently
September 9 | 1:00–1:20 PM EDT
Join us for an engaging and practical session on contributing to Splunk Add-ons. This session will guide you through the contribution process, best practices, and CI/CD tooling to ensure high-quality outputs. Whether you're a beginner or an experienced developer, you'll understand how to submit impactful contributions, test efficiently, and collaborate with the Splunk community.
Explore More
Want the full list of developer-focused sessions?
These six picks are just the beginning. The Developer Learning Path includes a wide variety of sessions designed to help you build, test, and optimize your Splunk apps.
View all Developer Learning Path sessions
Ready to build your full agenda?
Check out the full .conf25 session catalog and filter by role, product, or learning level to find even more content tailored to developers.
Looking to grow beyond .conf?
Explore the Splunk Developer Community Learning Path to access curated year-round content, tutorials, and tools that support your growth across the full development lifecycle.
Let’s make .conf25 your most impactful conference yet.
Security threats won’t wait—and neither should you.
