Splunk Tech Talks
Deep-dives for technical practitioners.

Build Your First SPL2 App!

WhitneySink
Splunk Employee
Splunk Employee

Screenshot 2024-09-05 at 2.00.27 PM.png

Do you want to SPL™, too? SPL2, Splunk's next-generation data search and preparation language, is designed to serve as the single entry point for data processing behaviors across data in motion and at rest. While it is already available Splunk Data Management (DM) pipelines in Splunk® Edge Processor and Ingest Processor, it is now in public beta in Splunk Enterprise!

Not only can you build dashboards, reports and alerts with SPL2 (just like SPL today), but also leverage SPL2’s advanced code-like capabilities like custom functions, custom types, views, imports, and exports to solve long-standing administration and developer challenges.

Watch this Tech Talk to learn…

  • What SPL2 is, and how it extends SPL’s capabilities for developers and admins
  • How to build your first app with SPL2
  • How SPL2 can help solve common access control challenges with run-as-owner views, and conduct data quality validation with custom type checks

Watch the full Tech Talk here:

(view in My Videos)

Contributors
Get Updates on the Splunk Community!

A Four-Part Event Series: Full Stack Observability For the AI Era

As AI reshapes applications, infrastructure, and the way teams operate, the traditional boundaries of ...

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Event Series: Level up your SOC: Advancing with Splunk Enterprise Security

AI has fundamentally raised the stakes for security operations, and this three-part series is your guide to ...