Hello per the documentation on the developer website: "The webhook functionality is built into Splunk Enterprise as an app, and is located here: $SPLUNK_HOME/etc/apps/alert_webhook. If you are so inclined, you can clone it, and then modify it however you want. For example, you might choose to do this if your application accepts a specific payload that does not match to the Splunk Enterprise default." http://dev.splunk.com/view/dev-guide/SP-CAAAE7A ... View more

Hello per the documentation on the developer website: "The webhook functionality is built into Splunk Enterprise as an app, and is located here: $SPLUNK_HOME/etc/apps/alert_webhook. If you are so inclined, you can clone it, and then modify it however you want. For example, you might choose to do this if your application accepts a specific payload that does not match to the Splunk Enterprise default." http://dev.splunk.com/view/dev-guide/SP-CAAAE7A ... View more

I have to agree that there may be an application or technical add-on in https://splunkbase.splunk.com/ that will already have a prebuilt dashboard(s) based on the sourcetype you are currently indexing (Cisco devices, F5, Palo Alto etc.). Additionally, you can build your own custom dashboard that are built upon SPL searches that you have run. So if you know the metrics you would like to measure, you can search for them and save them as a visualization on a dashboard. Much more on this topic can be found by following the link below: https://docs.splunk.com/Documentation/Splunk/6.5.3/Viz/CreateDashboards ... View more

Actually, that link may have the diagram you are looking for. I have attached the specific image that I think will be helpful. If you look at bottom portion of the image that starts at $SPLUNK_HOME you can see the file paths to particular apps through the $SPLUNK_HOME/etc/apps path. Each of those apps will have a structure that is similar to the orange and green "$APP_HOME" diagram at the top of the attached picture where you will be able to edit your configuration files for a specific app (in the local directory which is at the right of the diagram). It is important to remember the precedence of configuration files whenever making changes to them. Below is a link that explains configuration file precedence and a list of both Global configuration files and App/User specific configuration files. http://docs.splunk.com/Documentation/Splunk/6.5.3/Admin/Wheretofindtheconfigurationfiles ... View more