We’re excited to announce the launch of a foundational enhancement to Splunkbase: App Tiering.  Because we’ve listened closely to customer feedback, customers can now filter and browse apps based on author type—Splunk, Cisco, Partners, and Community. This simple yet powerful update introduces clearer trust signals and helps accelerate the path from search to solution. This update is more than just a new filter—it's the first step toward a more nuanced and effective approach to app discovery. By laying the groundwork for differentiated quality tiers and deeper engagement, we're creating a path toward a future where customers can confidently navigate offerings that best fit their unique needs. Apps marked as Built by Splunk or Built by Cisco are built and supported by Splunk and Cisco, respectively.  Apps marked as Built by Partners are built by official Splunk Partnerverse Build motion partners. If you’d like to learn more about being a Splunk Partner reach out to partnerverse@splunk.com. Community apps are the bulk of Splunkbase apps. It’s where Splunkbase began - admins building apps for other admins. This is a vital part of our marketplace that is now highlighted in a place of its own!  Our goal is simple: make it easier for customers to find exactly what they’re looking for, without limiting the variety of options available. This release balances structure and flexibility—offering powerful tools to narrow down choices while still embracing the diversity that makes our ecosystem thrive. In today’s digital landscape, application marketplaces have become essential for staying competitive. They streamline operations, improve efficiency, enable innovation, and deliver significant business value. For vendors, they enhance customer retention and open new channels for differentiation. The Critical Role of Application Marketplaces, a report by Futurum Research in collaboration with Splunk, explores how organizations are using platforms like Splunkbase, which features matter most to users, and how these ecosystems are adapting to today’s evolving IT and security landscape. As outlined in the Futurum Research report: “Looking across the application marketplaces companies utilize, several factors that influence their use of a marketplace stand out.” Application marketplaces have become mission-critical in the race to stay digitally competitive. What’s emerging on Splunkbase is only the beginning—stay tuned for what’s next. ... View more

Welcome to your go-to roundup of everything happening in the Splunk App Dev Community! Whether you're building new solutions, refining your existing apps, or just getting started, we’ve got a wealth of updates, insights, and opportunities for you to grow your skills and get more from the Splunk Platform. Splunk Developer Program + Splunk Build-a-thon  The Splunk Developer Program is launching in beta—a new *free* program designed to provide our developer community with the tools and resources needed to build high-quality apps all from a centralized hub. Check it out / sign up at preview.dev.splunk.com We’re celebrating this launch with an exciting hackathon! This is your chance to showcase your skills, explore Splunk’s developer capabilities, and compete for amazing prizes including .conf passes, Splunk EDU credits, and Cisco Store gift cards. Register Now! App Dev Community Office Hours Our most recent Community Office Hours session focused on OpenSSL3 and other upcoming changes to the Splunk Platform. Experts Tedd Hellmann and Michelle Moreira provided guidance on how to get your environment ready, while answering live audience questions and sharing actionable tips. If you missed it, no worries—you can watch it On Demand. Tech Talk: Holistic Visibility and Effective Alerting Across IT and OT Assets   On April 21st, we hosted a Tech Talk with security experts from Tenable to explore how combining Tenable and Splunk helps organizations achieve holistic visibility and effective alerting across both IT and OT infrastructures. It’s a must-watch for anyone focused on proactive cybersecurity. Watch it On Demand. SPL2 Hands-On Workshop Series Our SPL2 workshop series is here to help you unlock the full potential of the Splunk platform. These sessions walk you through getting started with Edge Processor, Ingest Processor, and utilizing SPL2 for app development. Perfect for developers ready to level up their Splunk skills. Catch the workshops On Demand. Developer Spotlight Series We’re excited to continue our Developer Spotlight blog series, where we feature standout developers from across our Splunk Community: Cameron Schmidt: A veteran Splunk app developer with over a decade of experience, Cameron has contributed dozens of apps to Splunkbase. Read more. Brett Adams: A SplunkTrust member and consultant, Brett’s innovative development work and community leadership have made him a key voice in the ecosystem. Read more. Preparing for OpenSSL3 and Platform Changes The next Splunk Platform release brings important security and compliance enhancements, including the transition to OpenSSL3. It’s vital to prepare your environment and apps now. We’ve compiled helpful resources to guide you: Preparing your Splunk Environment for OpensSSL3 Secure Your Future: A Deep Dive into the Compliance and Security Enhancements for the Next Splunk Platform Release Preparing to upgrade from 9.x to the upcoming release of Splunk Enterprise and Splunk Cloud Platform Splunkbase Year in Review 2024 2024 was a year of innovation and progress for Splunkbase and the App Dev Community. From enhanced tools and developer resources to new app ecosystem features, we’ve laid a strong foundation for an even bigger 2025. Check out the Year in Review. Join the Conversation and be part of the Splunk App Dev Community Connect with the Community on the #appdev Slack channel by clicking on this link, and if you are not part of our Slack community yet, get added here! ... View more

Reflecting on 2024, it’s clear that innovation and collaboration have defined the journey for Splunk developers, partners, and customers. From transformative app integrations to powerful AI enhancements and a thriving developer community, this year has been packed with momentum—and we’re just getting started. With the infographic linked below, let’s walk through the impactful ways the Splunk community came together to solve challenges, share knowledge, and push the boundaries of what’s possible! Hear from our customers and partners In 2024, we saw a number of partners and customers leverage Splunkbase apps to drive digital transformation. Here are a few standout examples: The following case studies showcase how Splunk Partners create winning joint solutions:   Splunk & Recorded Future Integration Gaining Digital Resilience with Recorded Future and Splunk. This collaboration tackles data overload, compliance challenges, and SOC bandwidth issues by integrating advanced threat intelligence and automation. Read more Mastering Threat Hunting. This insightful Tech Talk with Recorded FDuture dives into the world of threat hunting and explores the key differences between indicator-based and behavior-based approaches. Read more Infoblox App for Splunk Enhance Security & Network Visibility with Infoblox. Infoblox, a Splunk partner since 2011, developed an app to empower SOC analysts with advanced threat detection and response, boosting security efficiency. Read more   Splunk AI Assistant for SPL app With the launch of Splunk AI Assistant for SPL App, we offer bi-directional translation between natural language (NL) and Splunk Search Processing Language (SPL) to help Splunk users save time.   Developer Spotlight Closing out the year, we launched a Developer Spotlight blog series, where we feature some awesome Splunk developers from across our Community while showcasing their work. Check out the first spotlight on Paul Stout and his work behind the Duck Yeah! App. Also, if you are interested in being our next Spotlight, let us know by filling this form.    Apply to DAC 2.0  Builder Bar Returns – Revitalized with a renewed focus on the Developer Track at .conf24, we were honored to host and engage with 700+ Splunk practitioners. App Ecosystem Growth – Over the past year, Splunk has expanded its developer outreach and education, strengthening its community. A variety of resources – blogs, videos, tech talks, and courses – have helped developers grow the ecosystem. Blogs and videos shared best practices, while expert-led Tech Talks and courses provided deep insights and hands-on learning. These initiatives have empowered developers with the latest tools and knowledge to drive innovation. What’s Coming in 2025 Updated Splunkbase App Listing Experience featuring ability to create app listing drafts, view AppInspect results immediately, and conduct more administrative tasks like changing the app owner.  Developer Program Launch + Hackathon: This program empowers developers with tools, resources, and support to build innovative apps, enhance data insights, and grow within the Splunk ecosystem. Register for the Hackathon here .conf25: Thank you to everyone who participated in the call for papers process. We are actively working through content and event planning for an even better experience for our builders. Splunk .conf25 is heading to Boston this year, register now!  As we wrap up 2024, we want to thank our incredible Splunkbase community for their passion, innovation, and dedication. Your contributions continue to make Splunk a powerful platform for data-driven insights, security, and operational excellence. 2025 promises to be an even more exciting year with enhanced developer experiences, new features, and a stronger focus on AI and security. Stay engaged, keep building, and let’s shape the future of Splunkbase together! ... View more

In our third Spotlight feature, we're excited to shine a light on Brett—a Splunk consultant, innovative developer, and esteemed member of the SplunkTrust. With over six years of experience, Brett has become a key figure in the Splunk community. His journey into app development began in 2019, driven by his passion for solving real-world problems, often fueled by unique use cases and his own creative spark. When he's not transforming data, Brett brings his love for video games, cars, and public transport into his work, while also dedicating time to hobbyist coding, open-source contributions, and home automation projects. Join us as we dive into Brett's inspiring journey! How Building Custom Apps Transformed My Career I've been a Splunk Consultant for 6 years, currently with Deloitte Australia, and a member of the SplunkTrust for three and a half years. I began developing Splunk apps in 2019 to solve a specific customer problem that couldn't achieve the right outcome using Add-on Builder, so I taught myself how to use the SDK and write apps directly in Python. My first app was a GDI app to get audit logs from Atlassian Cloud. That experience sparked my journey into app development, leading me to build dozens of apps, most of them available in Splunkbase, to ingest and manage various data sources in Splunk. From Personal App Dev Projects to Innovation and Success at Splunk Almost half of my apps are not solving a real world problem, but instead were something that I wanted. The second app I ever wrote ingested Metrics from the Forza video games, and the third app ingested Metrics from my car. Over the years, my best apps have been the ones I personally wanted and cared about. This has allowed me to continue learning and improving my skills without losing interest, which provides better outcomes for customers, and also contributes interesting use cases to the breadth of what Splunk can do. A memorable moment was when a group of Splunk interns were demoing a public transport use case they had built using my GTFS app, without realizing I was the developer. A Journey from Data Center Monitoring to Cybersecurity Expertise I've been a Splunk user since 2016, and primary work in Splunk Enterprise, however the last few years I have had to focus more on Splunk Cloud. I got into Splunk through a quirky start—using it to monitor air conditioners after seeing a demo from a salesperson. So my entrance into Splunk was monitoring data center air conditioners, weirdly enough. My focus later shifted to cybersecurity, especially in the financial sector, where I deepened my expertise. Now, I work broadly across Splunk, often in cybersecurity, and have published several single-purpose apps on Splunkbase. The Have I Been Pwned Domain Search app.  This app is a service that can notify individuals and organizations when their credentials have been found in a data breach. Domain search is a newer feature that allows organizations to search for all breaches that include any email in their domains, and access that via API. The Have I Been Pwned Domain Search app takes your API key and downloads all the breach information for the domains you have verified with Have I Been Pwned. It uses a custom Splunk UI setup page to make it easy to get started, and has a bunch of built in dashboards so you can quickly visualize and investigate the data. Building a Game-Changing Splunk App with Troy Hunt's API As soon as Troy Hunt, creator of Have I Been Pwned, announced the Domain Search API, I knew it would be a highly valuable data source for Splunk, because it's exactly what I wanted in Splunk 6 years earlier when I was working as a Cyber Security Analyst. So despite not having any customers asking for it, or even having a use for it myself, I got to work building the best app I possibly could, and even collaborated with Troy directly to suggest improvements that made the App work even better. It can be used by any industry, any company, any type of business that will need this or that will take advantage of the support given by the app. As a result the app was highlighted on Troy's blog and I met up with him in person for a coffee chat after the release. Top Developer Tools and Resources for Building Apps I used to build all my apps in Config Explorer by Chris Younger, which I still highly recommend for anyone using Enterprise, but these days I am using Dev Containers in VSCode, so that I can build fully custom user interfaces with Splunk UI. The Splunk UI framework has been fantastic to work with and their tutorials were enough to get me started without even knowing React. My other two main resources are just using dev.splunk.com and reading the Splunk spec files directly.  Tips and Best Practices for Beginners Building Apps for Splunk I think that Add-on Builder is a great starting point, but to become a skilled app developer, you really need to go beyond what it's capable of and understand how the systems work. The more you learn to combine its capabilities yourself, the better your Splunk capabilities will be.  So, the only other advice I tend to give people is just use Splunk, build everything in Splunk, do anything in Splunk because it's just a great way to learn and find the edge cases. Each challenge, driven by personal motivation, has become a valuable step forward in my development journey. Think of Splunk as a Swiss army knife: it can do almost anything, and pushing its limits is a great way to learn and a whole lot of fun.  Off the Clock, Still in the Code One of the reasons I have so many Splunk apps is because I do enjoy coding. I think software development and coding is sort of one of my hobbies. I also maintain numerous Home Assistant integrations, open source libraries, and am working on a vehicle telematics app for the Splunk EdgeHub. Not because anyone's asked me to because I want to see if that's possible. So again, it's just things I enjoy and I'm interested in messing around with. Outside, I enjoy cycling and walking with my family. Conclusion Brett’s journey through the Splunk ecosystem is a testament to what’s possible when passion meets purpose. From solving real-world problems to building tools just for fun, his story highlights how curiosity and creativity can evolve into impactful innovation.  Whether he’s building tools to monitor game data, contributing to cybersecurity, or just exploring what’s possible with Splunk, Brett brings both passion and purpose to everything he does. His journey reminds us that some of the best solutions—and most fulfilling projects—come from ideas we’re personally excited about. And in Brett’s case, that excitement continues to drive both his professional success and his contributions to the wider Splunk community. Want to be our next Developer Spotlight? Let us know by filling out this form! ... View more

Introduction In this Developer Spotlight, we feature Cameron Schmidt, a Splunk app developer at Hurricane Labs. With over a decade of experience, he has helped enhance Splunk’s functionality with over dozens of Splunk apps — many of which are featured on Splunkbase. Join us as we explore his journey and impact. From Curiosity to Code: A Developer's Journey Cameron’s journey into software development began 13 years ago, fueled by his passion for problem-solving and data-driven solutions. For the past nine years, he has been a key contributor at Hurricane Labs, where he has developed numerous Splunk apps, including the Better Webhooks app and the Hurricane Labs Content+ app. "I enjoy solving complex problems, optimizing workflows, and building applications that make data more accessible and actionable," Cameron shares. His work focuses on creating new integrations and enhancing existing tools to improve the user experience for Splunk developers and administrators. Getting Started with Splunk: The First Steps Cameron was first introduced to Splunk as a college intern working in his university’s Security Department. "At the time, our team had just started using Splunk for threat detection, but there was a steep learning curve. No one had deep expertise yet, which gave me the opportunity to dive in and learn it from the ground up." As he became more familiar with Splunk, Cameron saw the need for additional tools to expand its capabilities. "We quickly realized that while Splunk was powerful, some of our needs went beyond its default features. That’s when I started developing custom Splunk apps to fill the gaps." This hands-on experience set the foundation for his career. After college, he joined Hurricane Labs as a Splunk app developer, where he has spent years building custom solutions for organizations looking to maximize their Splunk investments. Creating Custom Splunk Solutions Throughout his career, Cameron has developed apps for a wide range of organizations, from small startups to large enterprises. "Every business has unique needs. While Splunk is an incredible platform, sometimes the built-in tools don’t quite get users where they need to be. That’s where custom development comes in." With extensive experience developing Splunk applications, Cameron has built dozens of apps tailored to security monitoring, performance optimization, and specialized integrations. "I love the challenge of extending Splunk’s capabilities to meet new demands. There’s always a way to push the limits of what’s possible with the right tools and a bit of creativity." The Better Webhooks App One of Cameron’s notable contributions is the Better Webhooks app, which enhances Splunk’s webhook functionality. "Splunk has a built-in webhook feature that triggers HTTP requests when alerts occur, but it’s fairly limited and lacks flexibility," he explains. Seeing an opportunity to improve the integration experience, Cameron built the Better Webhooks app. "Think of it as upgrading a basic wrench to an adjustable one. This app expands integration possibilities, adds advanced features, and improves security—something that’s crucial for many businesses." At Hurricane Labs, for example, the team relies on Webex for communication, but Splunk’s default webhook security was insufficient. "This app not only increases functionality but also ensures safer integrations, which was a major improvement for us." Go-To Developer Resources When it comes to building Splunk apps, Cameron has a few go-to resources. "I visit the Splunk Developer Portal frequently—it’s full of valuable documentation that I highly recommend. Splunk Lantern is also a great place to find well-written, in-depth articles." He’s also an active participant in the Splunk Community Slack group. "It’s a volunteer-driven space, but I’ve found it incredibly helpful when tackling tricky development challenges. The community is always willing to share knowledge." Pro Tips from Cameron For those new to Splunk app development, Cameron emphasizes the platform’s flexibility. "With many tools, you’re often constrained by what an app or integration allows you to do. That hasn’t been my experience with Splunk—its openness is one of the reasons I love building apps for it." He encourages new developers to experiment and push boundaries. "I hope other app developers discover the same sense of freedom and creativity that I’ve found in Splunk development. There’s always room to innovate." A Spicy Hobby: Growing Peppers Outside of development, Cameron has a unique hobby—growing peppers. "It started as a COVID project, but I’ve really come to love it. I built a small raised garden in my backyard, where I grow all sorts of hot pepper varieties. Every fall, I turn them into hot sauce and give them away." "Some of them can be extremely hot, so I always make sure people are prepared! But not all of them are super spicy—there’s a good mix." Conclusion Cameron Schmidt's passion for development and problem-solving drives his impact in the Splunk community. His commitment to creating innovative tools and empowering organizations with data serves as an inspiration for aspiring developers. Stay tuned for more inspiring stories in our Developer Spotlight series!  Want to be our next Developer Spotlight? Let us know by filling out this form! ... View more