Splunk Dev

What do you experienced folks recommend in order to really know everything about Splunk?

rshoun
Explorer

I just purchased the Building Splunk Solutions Book for one resource and I really want to get into the Dev Side of Splunk but as I am slowly introducing myself to this area, what IDE's or potential open-source resources to you all recommend in order to really get your hands into developing Splunk Apps? (Other than Google) I am assuming Python is the best language for this? Any suggestions or input?

0 Karma
1 Solution

cmerriman
Super Champion

http://dev.splunk.com/ has a bunch of documentation. You can look at all sorts of how-tos and whatnot for developing apps.

http://dev.splunk.com/python is the overview for the SDK for Python, if you're most familiar with Python.

View solution in original post

0 Karma

woodcock
Esteemed Legend

To REALLY know Splunk you need to SPL a ton OR see it done well a ton. The best way to do the latter is to go to the Splunk Answers leaderboard and pick some people in the top 50 and follow them or go back and look at their answers:
https://answers.splunk.com/users/index.html?all=1&sort=karma

More and more people are providing SPL to spoof dummy events so you can play around with the full answer and deconstruct how each works. I HIGHLY recommend @martin_mueller, @lguinn, @dwaddle, any of the Aplura guys ( @starcher, @dshpritz ), and many more (sorry if I slighted anybody by leaving you off, but I am just recalling the ones that I have learned much deep stuff from). Also be sure to join the #general channel and lurk on slack.

Another GREAT way to learn is to download popular or complicated apps from Splunkbase and tear them apart to see how it works. You can learn a TON from this and very quickly.

0 Karma

cmerriman
Super Champion

http://dev.splunk.com/ has a bunch of documentation. You can look at all sorts of how-tos and whatnot for developing apps.

http://dev.splunk.com/python is the overview for the SDK for Python, if you're most familiar with Python.

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...