Splunk Dev

How to develop splunk app using java?

charmsstyler
Explorer

I am a newbie and I am not sure if this was requested prior, but I have following questions.

How Can we develop, package and deploy Splunk App with Java?

What are the tools available? How to create the UI of the App?

Would appreciate any help. Thanks

Tags (3)
0 Karma
1 Solution

stefandagerman
Path Finder

Splunk apps are not really code, they are collections of searches, dashboards, reports, scripts etc. that are grouped together in a directory.
I would suggest you peruse this
http://docs.splunk.com/Documentation/Splunk/latest/AdvancedDev/Whatsinthismanual to learn how to go about creating them.
A good starting point: http://docs.splunk.com/Documentation/Splunk/latest/AdvancedDev/AppIntro

View solution in original post

stefandagerman
Path Finder

Splunk apps are not really code, they are collections of searches, dashboards, reports, scripts etc. that are grouped together in a directory.
I would suggest you peruse this
http://docs.splunk.com/Documentation/Splunk/latest/AdvancedDev/Whatsinthismanual to learn how to go about creating them.
A good starting point: http://docs.splunk.com/Documentation/Splunk/latest/AdvancedDev/AppIntro

ChrisG
Splunk Employee
Splunk Employee

Have you looked at the Splunk SDK for Java?

ChrisG
Splunk Employee
Splunk Employee

No, you are correct: the Java SDK is really meant for external applications. See stefandagerman's answer for information about what Splunk Web apps are. There might be some way to do what you are thinking of (I don't know enough to rule it out completely), but it would be...unusual.

charmsstyler
Explorer

yes something like that. so my app is accessible on the Home screen menu 'App'. Is that doable? how is it so?

0 Karma

ChrisG
Splunk Employee
Splunk Employee

So, just to make sure I understand: you want to write a compiled Java application and put it in /etc/apps so that it runs within Splunk Web?

charmsstyler
Explorer

@ChrisG yes I have, isn't it an external application? or is it deploy-able to Splunk app instance?

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Your Feedback. Our Roadmap. Visit the PX Feedback Booth at .conf26

You use Splunk every day, come and help shape what's next.  Save Your Seat: Product-Focused Sessions at ...

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

The Problem: Too Many Alerts, Too Little Context Security operations teams running Splunk Enterprise Security ...

Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas

Watch Now Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas     Do you ever feel ...