Hey @mleati , That is a good point, if you look at the code of this example I provided: https://github.com/splunk/react_search_example - An app outside of Splunk using Splunk Utils to search against Splunk That examples does indeed show how to do post-process searches for apps outside of Splunk.  For apps within Splunk, the @splunk/search-job package can help you out easily, we have Post Process capability built-in.   Hope that helps! Note that if you are using the Splunk UI Toolkit, searches and API calls should be done with our packages if they relate strictly to UI, so I wouldn't recommend trying to make an app with the Splunk UI toolkit and referencing the old Splunk JavaScript SDK or SplunkJS/Splunk Web Framework and mixing functionality just yet.  ... View more

Hello @mleati,   I work with @ryanoconnor as a PM for the Splunk UI Toolkit and I think I can help out with your question. Simply put, SearchJob uses Splunk Utils to complete its functionality, but by providing the search capabilities under the SearchJob package, we simplify the process for developers to run searches within Splunk Web (ie, your app is "on" Splunk). So if your app is in Splunk Web, we highly recommend that you use SearchJob, and it will be a simpler experience to run your searches that way.  Splunk Utils on the other hand, is our "catch all" for interacting with the REST API. You can use it to store secrets, run searches, or read the KV store. The main reason why one would use Splunk Utils specifically for searching, is if they have an application outside of Splunk Web (for example, their own web app) and they want to pull Splunk data. Hope that clarifies it for you. Regarding documentation, we hope to improve the documentation for Search Job and Splunk Utils in the near future, however we do have our examples gallery, and here are a few examples that I think would help specifically to your question.  https://github.com/splunk/SUIT-example-for-visualizations - A clear set of examples for searching within Splunk using Search Job and tying those results to visualizations https://github.com/splunk/react_search_example - An app outside of Splunk using Splunk Utils to search against Splunk https://github.com/splunk/SUIT-setup-page-example - An example of leveraging Splunk Utils to accomplish a common Splunk App workflow, which is to store a secret in the storage/passwords API endpoint.    If you have any other questions, please reach out!   ... View more

Hi @adetheodore ,    Although this may not assist necessarily in the query-writing aspect of your question, we do provide some example dashboards with the product for Splunk Enterprise 8.2 and higher, in the Examples Hub, which you can find by going to the Dashboard listing page in Search and Reporting and clicking the link at the top.This is a collection of example dashboards for various use cases if you need help in terms of design, organization, and messaging for the dashboard. If you use one of these examples you can likely replace the searches with the correct ones necessary for your use case. Hopefully this can help in some aspects of your situation.  ... View more

Hello Ted,  Glad to hear that tutorial 2 worked out well but I am sorry about the errors and things we may have missed. If you don't mind, could you email me at nhaq@splunk.com regarding the errors you experienced so that we can work on improving them? It would be a huge help. Thank you!     ... View more

Hey Ted,  Thanks for pointing that out. We hope to soon have more examples where we can showcase how to use Splunk data in custom applications with Splunk UI and Splunk Dashboards. I have two other examples I want to share, the first one is a dashboard example that uses static data however the static data is within the dashboard definition. You can find that example in this github.  The other example is one made by one of our field users. This example actually has some interaction with using json data that we attach and have the user upload. I think this can also help with what you are looking for. You can find that here Lastly, if you have any other "types" of examples you would like to see, I would like to hear your feedback, we hope to expand our library to include more useful examples for developers with unique and relatable use cases.    ... View more