The end-to-end customization of Splunk

Splunk app development usually starts with the UI. Based on your needs, the Splunk user interface can be modified in the simplest (changing a menu layout) to the most complex (utilizing custom HTML and JavaScript code to completely change the look and feel) way. In this book, we've already covered several interesting UI customizations:

• Dashboards: These visually present search results

• Form search: This simplifies searches by presenting a search box, which runs filters or more complex logic behind the scenes

• Advanced views: This allows view customization beyond what is available in simple XML syntax

Beyond the UI, a Splunk app can be further customized for handling specific types of data. Through Splunk Web, you can further develop your app's functionality with the following actions:

• Create specific indexes used only by your app

• Add specific searches, reports, and fields

• Restrict access to the app's object(s)

• Add views and navigation menus to the app

• Set up...