Getting Data In

What is meant by Splunk integration?

Mohsin123
Path Finder

Hi,

what do you mean by integrating and application with Splunk and what are the steps?

0 Karma
1 Solution

tmarlette
Motivator

This is an extremely broad question, but I might be able to point you in the right direction.

Integrating an application with Splunk:

Integration generally consists of data on-boarding, data cleaning / parsing, and then dashboard creation.

  • first you need to get data from your application into Splunk
  • next, you'll need to clean that data so it makes sense, creating fields, events, transforms, etc..
  • finally, you'll be able to create dashboards showing your application / system within Splunk.

For each of these stages you'll need to understand the data you're looking at, as well as what the final goal is supposed to look like.
Also, for each of these stages, these short sentences do not encompass the entirety of work that goes into 'integration'.

It sounds like you're pretty new to Splunk, so your best bet is to get some education, or begin with a system that already has an app on splunkbase that's easy. This way you don't have to create everything from scratch, and you can start tinkering.

View solution in original post

tmarlette
Motivator

This is an extremely broad question, but I might be able to point you in the right direction.

Integrating an application with Splunk:

Integration generally consists of data on-boarding, data cleaning / parsing, and then dashboard creation.

  • first you need to get data from your application into Splunk
  • next, you'll need to clean that data so it makes sense, creating fields, events, transforms, etc..
  • finally, you'll be able to create dashboards showing your application / system within Splunk.

For each of these stages you'll need to understand the data you're looking at, as well as what the final goal is supposed to look like.
Also, for each of these stages, these short sentences do not encompass the entirety of work that goes into 'integration'.

It sounds like you're pretty new to Splunk, so your best bet is to get some education, or begin with a system that already has an app on splunkbase that's easy. This way you don't have to create everything from scratch, and you can start tinkering.

View solution in original post

.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!