Splunk Live 2016 Brisbane/Melbourne - Developer Breakout

Splunk for Developers
Join the Developer workshop to learn about the many options there are for developers to extend and integrate with the Splunk platform by using our various language SDKs, the Web Framework , creating custom components such as Search Commands and Modular Inputs and ultimately understanding the potential opportunity for you in creating your own Splunk Apps.

Transcript

1. Grigori Melnik, Principal Product Manager – Splunk Developer Platform Copyright © 2015 Splunk Inc. Splunk for Developers Matthew Erbs Melbourne matthewerbs github/merbla
2. Grigori Melnik, Principal Product Manager – Splunk Developer Platform Disclaimer 2 During the course of this presentation, we may make forward looking statements regarding future events or the expected performance of the company. We caution you that such statements reflect our current expectations and estimates based on factors currently known to us and that actual events or results could differ materially. For important factors that may cause actual results to differ from those contained in our forward-looking statements, please review our filings with the SEC. The forward-looking statements made in the this presentation are being made as of the time and date of its live presentation. If reviewed after its live presentation, this presentation may not contain current or accurate information. We do not assume any obligation to update any forward looking statements we may make. In addition, any information about our roadmap outlines our general product direction and is subject to change at any time without notice. It is for informational purposes only and shall not, be incorporated into any contract or other commitment. Splunk undertakes no obligation either to develop the features or functionality described or to include any such feature or functionality in a future release.
3. Grigori Melnik, Principal Product Manager – Splunk Developer Platform 3 Who am I?
4. Grigori Melnik, Principal Product Manager – Splunk Developer Platform Copyright © 2015 Splunk Inc. I’m a developer!
5. Grigori Melnik, Principal Product Manager – Splunk Developer Platform 5 How can Splunk help me? 5
6. Grigori Melnik, Principal Product Manager – Splunk Developer Platform 6 A day in the life of a dev • Code • Build • Test • Package • Release • Configuration • Monitor
7. Grigori Melnik, Principal Product Manager – Splunk Developer Platform 7 7 CI / Build Servers Project and Issue Tracking Code Repository QA / Testing Tools End-To-End Visibility Across The Dev Tool Chain Deployment Servers / Automation
8. Grigori Melnik, Principal Product Manager – Splunk Developer Platform 8 CI / Build Server Quality Review Task Tracking What Data Can You Splunk? Which code has already been reviewed for this release/sprint? Who has completed the most code reviews? What code has NOT been reviewed? Who is changing files? What kinds of files are being changed? What branches are most active? What types of activities are occurring for a branch? Version Control How many builds completed today/this week/this month? Which check-in kicked off this build? Which tests ran against this failed build? Which tasks are assigned to which developers? What progress is being made to complete assigned tasks? What tasks remain for this release/sprint? 8
9. Grigori Melnik, Principal Product Manager – Splunk Developer Platform 9 Splunkbase
10. Grigori Melnik, Principal Product Manager – Splunk Developer Platform Copyright © 2015 Splunk Inc. Building Splunk Apps
11. Grigori Melnik, Principal Product Manager – Splunk Developer Platform 11 Who is a developer? 1
12. Grigori Melnik, Principal Product Manager – Splunk Developer Platform 12 EVERYONE can be a Splunk App Developer! 1
13. Grigori Melnik, Principal Product Manager – Splunk Developer Platform 13 Splunk for Application Developers 1 REST API Build Splunk Apps Extend and Integrate Splunk Simple XML JavaScript/CSS Extensions .Net JavaScript Python Ruby Java PHP Data Models Search Extensibility Modular Inputs SDKs KV Store
14. Grigori Melnik, Principal Product Manager – Splunk Developer Platform Log directly to Splunk via HTTP, TCP, UDP Integrate search results with other applications using custom visualizations Create and run searches from other applications The REST API and SDKs 14 Visualize Search Manage Add/Delete Users Manage Inputs Index
15. Grigori Melnik, Principal Product Manager – Splunk Developer Platform 15 The Splunk REST API Exposes an API method for every feature in the product – Whatever you can do in the UI – you can do through the API – Index, Search, Visualize, Manage API is RESTful – Endpoints are served by splunkd – Requests are GET, POST, and DELETE HTTP methods – Responses are Atom XML & JSON – Versioning as of Splunk 5.0 – Search results can be output in CSV/JSON/XML 1
16. Grigori Melnik, Principal Product Manager – Splunk Developer Platform 16 What does a Splunk App look like?
17. Grigori Melnik, Principal Product Manager – Splunk Developer Platform Copyright © 2015 Splunk Inc. Lets build an app…
18. Grigori Melnik, Principal Product Manager – Splunk Developer Platform 18 • Find some data • Get the data into Splunk • Search for the Data • Visualise the data The Plan
19. Grigori Melnik, Principal Product Manager – Splunk Developer Platform 19 The Data
20. Grigori Melnik, Principal Product Manager – Splunk Developer Platform 20 Static Data/Lookups ferry_stop_name,ferry_stop_ref,latitude,lon gitude,... Apollo Road,307147,-27.443417,153.063745 ...
21. Grigori Melnik, Principal Product Manager – Splunk Developer Platform 21 The Modular Input
22. Grigori Melnik, Principal Product Manager – Splunk Developer Platform 22 A Custom Search Command geodistance latA=MyLat lngA=MyLong latB=Ferry.Latitude lngB=Ferry.Longitude meters=distance | where distance <1000
23. Grigori Melnik, Principal Product Manager – Splunk Developer Platform 23 The Visualisation
24. Grigori Melnik, Principal Product Manager – Splunk Developer Platform 24 Some parting thoughts… • Help yourself (modular input errors) • Source control • Build Process • Continuous Integration & Delivery
25. Grigori Melnik, Principal Product Manager – Splunk Developer Platform 25 Its YOUR data… OWN IT!
26. Grigori Melnik, Principal Product Manager – Splunk Developer Platform Copyright © 2015 Splunk Inc. Resources
27. Grigori Melnik, Principal Product Manager – Splunk Developer Platform 27 Where to go for more Info • Tutorials, Code Samples, Getting Started, Downloads – http://dev.splunk.com • Splunk Developer Guidance – http://dev.splunk.com/goto/devguide • GitHub – https://github.com/splunk – https://github.com/merbla/SplunkLive2016-Brisbane • Twitter – https://twitter.com/splunkdev • Blogs – http://blogs.splunk.com/dev 27
28. Copyright © 2015 Splunk Inc. 28 Copyright © 2015 Splunk Inc. Questions
29. Copyright © 2015 Splunk Inc. 29 SEPT 26-29, 2016 WALT DISNEY WORLD, ORLANDO SWAN AND DOLPHIN RESORTS • 5000+ IT & Business Professionals • 3 days of technical content • 165+ sessions • 80+ Customer Speakers • 35+ Apps in Splunk Apps Showcase • 75+ Technology Partners • 1:1 networking: Ask The Experts and Security Experts, Birds of a Feather and Chalk Talks • NEW hands-on labs! • Expanded show floor, Dashboards Control Room & Clinic, and MORE! The 7th Annual Splunk Worldwide Users’ Conference PLUS Splunk University • Three days: Sept 24-26, 2016 • Get Splunk Certified for FREE! • Get CPE credits for CISSP, CAP, SSCP • Save thousands on Splunk education!