SlideShare a Scribd company logo
Grigori Melnik, Principal Product Manager – Splunk Developer Platform
Copyright	Š	2015	Splunk	Inc.
Splunk	for	Developers
Matthew	Erbs
Brisbane
matthewerbs
github/merbla
Grigori Melnik, Principal Product Manager – Splunk Developer Platform
2
How	can	Splunk	help	me?
2
Grigori Melnik, Principal Product Manager – Splunk Developer Platform
3
A	day	in	the	life	of	a	dev
• Code
• Build
• Test
• Package
• Release
• Configuration
• Monitor
Grigori Melnik, Principal Product Manager – Splunk Developer Platform
4 4
CI	/	Build	
Servers
Project	and	Issue	
Tracking
Code	
Repository
QA	/	Testing	
Tools
End-To-End	Visibility	Across	The	Dev	Tool	Chain	
Deployment	Servers	/	
Automation
Grigori Melnik, Principal Product Manager – Splunk Developer Platform
5
CI	/	Build	
Server
Code	
Review
Task	
Tracking
What	Data	Can	You	Splunk?
Logs	– Which	code	has	already	been	reviewed	for	this	release/sprint?	Who	has	
completed	the	most	code	reviews?	What	code	has	NOT	been	reviewed?	
Logs/API	– Who	is	changing	files?	What	kinds	of	files	are	being	changed?	What	
branches	are	most	active?	What	types	of	activities	are	occurring	for	a	branch?
Version	
Control
Logs/API	– How	many	builds	completed	today/this	week/this	month?	Which	
check-in	kicked	off	this	build?	Which	tests	ran	against	this	failed	build?
Logs	– Which	tasks	are	assigned	to	which	developers?	What	progress	is	being	
made	to	complete	assigned	tasks?	What	tasks	remain	for	this	release/sprint?	
5
Grigori Melnik, Principal Product Manager – Splunk Developer Platform
Copyright	Š	2015	Splunk	Inc.
Building	Splunk	Apps
Grigori Melnik, Principal Product Manager – Splunk Developer Platform
7
Who	is	a	developer?
7
Grigori Melnik, Principal Product Manager – Splunk Developer Platform
8
Everyone	can	be	a	
Splunk	App	Developer!
8
Grigori Melnik, Principal Product Manager – Splunk Developer Platform
9
Splunk	for	Application	Developers
9
REST	API
Build	Splunk	Apps Extend	and	Integrate	Splunk
Simple	XML
JavaScript/CSS	Extensions .Net
JavaScript
Python
Ruby
Java
PHP
Data	Models
Search	Extensibility
Modular	Inputs
SDKs
KV	Store
Grigori Melnik, Principal Product Manager – Splunk Developer Platform
Log	directly	to	
Splunk	via	HTTP,	
TCP,	UDP
Integrate	search	
results	with	other	
applications	using	
custom	
visualizations
Create	and	run	
searches	from	
other	applications
The	REST	API	and	SDKs
10
VisualizeSearch Manage
Add/Delete	Users
Manage	Inputs
Index
Grigori Melnik, Principal Product Manager – Splunk Developer Platform
11
The	Splunk	REST	API
Exposes	an	API	method	for	every	feature	in	the	product
– Whatever	you	can	do	in	the	UI	– you	can	do	through	the	API
– Index,	Search,	Visualize,	Manage
API	is	RESTful
– Endpoints	are	served	by	splunkd
– Requests	are	GET,	POST,	and	DELETE	HTTP	methods
– Responses	are	Atom	XML	&	JSON	
– Versioning	as	of	Splunk	5.0
– Search	results	can	be	output	in	CSV/JSON/XML
1
Grigori Melnik, Principal Product Manager – Splunk Developer Platform
12
What	does	a	Splunk	App	look	like?
Grigori Melnik, Principal Product Manager – Splunk Developer Platform
Copyright	Š	2015	Splunk	Inc.
Lets	build	an	app…
Grigori Melnik, Principal Product Manager – Splunk Developer Platform
14
• Find	some	data
• Get	the	data	into	Splunk
• Search	for	the	Data
• Visualise the	data
The	Plan
Grigori Melnik, Principal Product Manager – Splunk Developer Platform
15
The	Data
Grigori Melnik, Principal Product Manager – Splunk Developer Platform
16
The	Modular	Input
Grigori Melnik, Principal Product Manager – Splunk Developer Platform
17
Static	Data/Lookups
Grigori Melnik, Principal Product Manager – Splunk Developer Platform
18
A	Custom	Search	Command
geodistance latA=MyLat lngA=MyLong
latB=Ferry.Latitude lngB=Ferry.Longitude
meters=distance | where distance <1000
Grigori Melnik, Principal Product Manager – Splunk Developer Platform
19
The	Visualisation
Grigori Melnik, Principal Product Manager – Splunk Developer Platform
20
Some	parting	thoughts…
• Help	yourself	(modular	input	errors)
• Source	control
• Build	Process
• Continuous	Integration	&	versioning
Grigori Melnik, Principal Product Manager – Splunk Developer Platform
Copyright	Š	2015	Splunk	Inc.
Resources
Grigori Melnik, Principal Product Manager – Splunk Developer Platform
22
Where	to	go	for	more	Info
• Tutorials,	Code	Samples,	Getting	Started,	Downloads
– http://dev.splunk.com
• Splunk	Developer	Guidance
– http://dev.splunk.com/goto/devguide
• Splunk	Base	(Apps)
– https://splunkbase.splunk.com
• GitHub
– https://github.com/splunk
• Twitter
– https://twitter.com/splunkdev
• Blogs
– http://blogs.splunk.com/dev
22
Copyright Š 2015 Splunk Inc.23
SEPT	26-29,	2016
WALT	DISNEY	WORLD,	ORLANDO
SWAN	AND	DOLPHIN	RESORTS
• 5000+		IT	&	Business	Professionals
• 3	days	of	technical	content
• 165+	sessions	
• 80+	Customer	Speakers
• 35+	Apps	in	Splunk	Apps	Showcase
• 75+	Technology	Partners
• 1:1	networking:	Ask	The	Experts	and	Security	
Experts,	Birds	of	a	Feather	and	Chalk	Talks
• NEW	hands-on	labs!	
• Expanded	show	floor,	Dashboards	Control	
Room	&	Clinic,	and	MORE!	
The	7th Annual	Splunk	Worldwide	Users’	Conference
PLUS	Splunk	University
• Three	days:	Sept	24-26,	2016
• Get	Splunk	Certified	for	FREE!
• Get	CPE credits	for	CISSP,	CAP,	SSCP
• Save	thousands	 on	Splunk	education!

More Related Content

ODP
Niemnte agile
PDF
Continuous Integration @ Haptik
PPTX
Devops and git basics
PPTX
Perforce on Tour 2015 - Optimising the Developer Pipeline: Deliver Faster & ...
PPTX
How do you implement Continuous Delivery? Part 2: Code Management
PDF
A Reference Architecture to Enable Visibility and Traceability across the Ent...
PPT
Flex and .NET Integration
PPTX
It's all about feedback - code review as a great tool in the agile toolbox
Niemnte agile
Continuous Integration @ Haptik
Devops and git basics
Perforce on Tour 2015 - Optimising the Developer Pipeline: Deliver Faster & ...
How do you implement Continuous Delivery? Part 2: Code Management
A Reference Architecture to Enable Visibility and Traceability across the Ent...
Flex and .NET Integration
It's all about feedback - code review as a great tool in the agile toolbox

What's hot (18)

PDF
Introducing GitLab
PDF
OpenTuesday: Agile Testautomatisierung und Continuous Integration
PDF
Adopting a security attitude in DevOps via DevOpsSec
PPTX
PPTX
South East Dreamin 2019
PPTX
Ti weekopenshift
PDF
Agile android
PDF
Professional iOS development
PDF
Continuous Integration on my work
PDF
Creative Branching Models for Multiple Release Streams
PDF
Agnostic Continuous Delivery
PDF
Introducing Gitora,the version control tool for PL/SQL
 
PPTX
Egit democamp-darmstadt-2011-06-21
PPTX
Using Github Insight as metric for the Developer collaboration and work metri...
PDF
Continuous Delivery Agile Tour Beirut 2015
PPTX
Egit democamp-karlsruhe-2011-11-29
PDF
A Study of the Characteristics of Developers′ Activities in GitHub
PPTX
Devoxx 2016 Using Jenkins, Gerrit and Spark for Continuous Delivery Analytics
Introducing GitLab
OpenTuesday: Agile Testautomatisierung und Continuous Integration
Adopting a security attitude in DevOps via DevOpsSec
South East Dreamin 2019
Ti weekopenshift
Agile android
Professional iOS development
Continuous Integration on my work
Creative Branching Models for Multiple Release Streams
Agnostic Continuous Delivery
Introducing Gitora,the version control tool for PL/SQL
 
Egit democamp-darmstadt-2011-06-21
Using Github Insight as metric for the Developer collaboration and work metri...
Continuous Delivery Agile Tour Beirut 2015
Egit democamp-karlsruhe-2011-11-29
A Study of the Characteristics of Developers′ Activities in GitHub
Devoxx 2016 Using Jenkins, Gerrit and Spark for Continuous Delivery Analytics
Ad

Similar to SplunkLive Melbourne Splunk for Developers (20)

PPTX
Splunk for Developers Breakout Session
 
PPTX
SplunkLive! Seattle - Splunk for Developers
PPTX
Splunk for Developers
 
PPTX
Splunk for Developers
 
PPTX
Splunk for Developers
 
PPTX
Splunk for Developers Breakout Session
 
PDF
Throw Your Future Self a Lifeline with a Little DevOps Data!
 
PPTX
Innovate Better Through Machine data Analytics
PPTX
SplunkLive! Developer Session
 
PPTX
SplunkLive! London 2016 Splunk for Devops
 
PDF
SplunkLive! London 2015 - DevOps Breakout
 
PPTX
SplunkLive London 2014 Developer Presentation
PPTX
DevOps Powered by Splunk
 
PDF
Splunk for DevOps - Faster Insights - Better Code
PPTX
Splunk at Sabre
 
PPTX
Customer Presentation - Cerner
 
PPTX
A Lap Around Developer Awesomeness in Splunk 6.3
PDF
Echostar Customer Presentation
 
PPTX
Splunk Developer Platform
PDF
Splunk in Nordstrom: IT Operations
Splunk for Developers Breakout Session
 
SplunkLive! Seattle - Splunk for Developers
Splunk for Developers
 
Splunk for Developers
 
Splunk for Developers
 
Splunk for Developers Breakout Session
 
Throw Your Future Self a Lifeline with a Little DevOps Data!
 
Innovate Better Through Machine data Analytics
SplunkLive! Developer Session
 
SplunkLive! London 2016 Splunk for Devops
 
SplunkLive! London 2015 - DevOps Breakout
 
SplunkLive London 2014 Developer Presentation
DevOps Powered by Splunk
 
Splunk for DevOps - Faster Insights - Better Code
Splunk at Sabre
 
Customer Presentation - Cerner
 
A Lap Around Developer Awesomeness in Splunk 6.3
Echostar Customer Presentation
 
Splunk Developer Platform
Splunk in Nordstrom: IT Operations
Ad

More from Gabrielle Knowles (20)

PDF
SplunkLive Sydney Enterprise Security & User Behavior Analytics
PDF
SplunkLive Sydney Scaling and best practice for Splunk on premise and in the ...
PDF
SplunkLive Sydney Machine Learning & Analytics
PDF
SplunkLive Melbourne Machine Learning & Analytics
PDF
SplunkLive Melbourne Scaling and best practice for Splunk on premise and in t...
PDF
SplunkLive Melbourne Enterprise Security & User Behavior Analytics
PDF
SplunkLive Perth Enterprise Security & User Behavior Analytics
PDF
SplunkLive Perth Machine Learning & Analytics
PDF
SplunkLive Brisbane Splunk for Operational Security Intelligence
PDF
SplunkLive Brisbane Splunking the Endpoint
PDF
SplunkLive Brisbane Getting Started with IT Service Intelligence
PDF
SplunkLive Brisbane Splunk for Developers
PDF
SplunkLive Canberra Enterprise Security & User Behavior Analytics
PDF
SplunkLive Canberra Machine Learning & Analytics
PDF
SplunkLive Canberra Getting Started with IT Service Intelligence
PDF
Getting Started with Splunk
PDF
Customer Presentation - Student Job Search
PDF
Delivering New Visibility and Analytics for IT Operations
PDF
Splunk for Security
PDF
New Features, Pivot and Search Dojo
SplunkLive Sydney Enterprise Security & User Behavior Analytics
SplunkLive Sydney Scaling and best practice for Splunk on premise and in the ...
SplunkLive Sydney Machine Learning & Analytics
SplunkLive Melbourne Machine Learning & Analytics
SplunkLive Melbourne Scaling and best practice for Splunk on premise and in t...
SplunkLive Melbourne Enterprise Security & User Behavior Analytics
SplunkLive Perth Enterprise Security & User Behavior Analytics
SplunkLive Perth Machine Learning & Analytics
SplunkLive Brisbane Splunk for Operational Security Intelligence
SplunkLive Brisbane Splunking the Endpoint
SplunkLive Brisbane Getting Started with IT Service Intelligence
SplunkLive Brisbane Splunk for Developers
SplunkLive Canberra Enterprise Security & User Behavior Analytics
SplunkLive Canberra Machine Learning & Analytics
SplunkLive Canberra Getting Started with IT Service Intelligence
Getting Started with Splunk
Customer Presentation - Student Job Search
Delivering New Visibility and Analytics for IT Operations
Splunk for Security
New Features, Pivot and Search Dojo

Recently uploaded (20)

PPTX
Business Ppt On Nestle.pptx huunnnhhgfvu
PPTX
Acceptance and paychological effects of mandatory extra coach I classes.pptx
PPTX
CEE 2 REPORT G7.pptxbdbshjdgsgjgsjfiuhsd
PPTX
advance b rammar.pptxfdgdfgdfsgdfgsdgfdfgdfgsdfgdfgdfg
PPTX
The THESIS FINAL-DEFENSE-PRESENTATION.pptx
PPTX
MODULE 8 - DISASTER risk PREPAREDNESS.pptx
PPTX
Introduction-to-Cloud-ComputingFinal.pptx
PPTX
Introduction to Basics of Ethical Hacking and Penetration Testing -Unit No. 1...
PPT
Chapter 3 METAL JOINING.pptnnnnnnnnnnnnn
PDF
Recruitment and Placement PPT.pdfbjfibjdfbjfobj
PDF
22.Patil - Early prediction of Alzheimer’s disease using convolutional neural...
PPTX
05. PRACTICAL GUIDE TO MICROSOFT EXCEL.pptx
PDF
Foundation of Data Science unit number two notes
PDF
Fluorescence-microscope_Botany_detailed content
PPTX
Computer network topology notes for revision
PPTX
STUDY DESIGN details- Lt Col Maksud (21).pptx
PDF
Galatica Smart Energy Infrastructure Startup Pitch Deck
PPTX
Logistic Regression ml machine learning.pptx
PPT
Miokarditis (Inflamasi pada Otot Jantung)
Business Ppt On Nestle.pptx huunnnhhgfvu
Acceptance and paychological effects of mandatory extra coach I classes.pptx
CEE 2 REPORT G7.pptxbdbshjdgsgjgsjfiuhsd
advance b rammar.pptxfdgdfgdfsgdfgsdgfdfgdfgsdfgdfgdfg
The THESIS FINAL-DEFENSE-PRESENTATION.pptx
MODULE 8 - DISASTER risk PREPAREDNESS.pptx
Introduction-to-Cloud-ComputingFinal.pptx
Introduction to Basics of Ethical Hacking and Penetration Testing -Unit No. 1...
Chapter 3 METAL JOINING.pptnnnnnnnnnnnnn
Recruitment and Placement PPT.pdfbjfibjdfbjfobj
22.Patil - Early prediction of Alzheimer’s disease using convolutional neural...
05. PRACTICAL GUIDE TO MICROSOFT EXCEL.pptx
Foundation of Data Science unit number two notes
Fluorescence-microscope_Botany_detailed content
Computer network topology notes for revision
STUDY DESIGN details- Lt Col Maksud (21).pptx
Galatica Smart Energy Infrastructure Startup Pitch Deck
Logistic Regression ml machine learning.pptx
Miokarditis (Inflamasi pada Otot Jantung)

SplunkLive Melbourne Splunk for Developers

  • 1. Grigori Melnik, Principal Product Manager – Splunk Developer Platform Copyright Š 2015 Splunk Inc. Splunk for Developers Matthew Erbs Brisbane matthewerbs github/merbla
  • 2. Grigori Melnik, Principal Product Manager – Splunk Developer Platform 2 How can Splunk help me? 2
  • 3. Grigori Melnik, Principal Product Manager – Splunk Developer Platform 3 A day in the life of a dev • Code • Build • Test • Package • Release • Configuration • Monitor
  • 4. Grigori Melnik, Principal Product Manager – Splunk Developer Platform 4 4 CI / Build Servers Project and Issue Tracking Code Repository QA / Testing Tools End-To-End Visibility Across The Dev Tool Chain Deployment Servers / Automation
  • 5. Grigori Melnik, Principal Product Manager – Splunk Developer Platform 5 CI / Build Server Code Review Task Tracking What Data Can You Splunk? Logs – Which code has already been reviewed for this release/sprint? Who has completed the most code reviews? What code has NOT been reviewed? Logs/API – Who is changing files? What kinds of files are being changed? What branches are most active? What types of activities are occurring for a branch? Version Control Logs/API – How many builds completed today/this week/this month? Which check-in kicked off this build? Which tests ran against this failed build? Logs – Which tasks are assigned to which developers? What progress is being made to complete assigned tasks? What tasks remain for this release/sprint? 5
  • 6. Grigori Melnik, Principal Product Manager – Splunk Developer Platform Copyright Š 2015 Splunk Inc. Building Splunk Apps
  • 7. Grigori Melnik, Principal Product Manager – Splunk Developer Platform 7 Who is a developer? 7
  • 8. Grigori Melnik, Principal Product Manager – Splunk Developer Platform 8 Everyone can be a Splunk App Developer! 8
  • 9. Grigori Melnik, Principal Product Manager – Splunk Developer Platform 9 Splunk for Application Developers 9 REST API Build Splunk Apps Extend and Integrate Splunk Simple XML JavaScript/CSS Extensions .Net JavaScript Python Ruby Java PHP Data Models Search Extensibility Modular Inputs SDKs KV Store
  • 10. Grigori Melnik, Principal Product Manager – Splunk Developer Platform Log directly to Splunk via HTTP, TCP, UDP Integrate search results with other applications using custom visualizations Create and run searches from other applications The REST API and SDKs 10 VisualizeSearch Manage Add/Delete Users Manage Inputs Index
  • 11. Grigori Melnik, Principal Product Manager – Splunk Developer Platform 11 The Splunk REST API Exposes an API method for every feature in the product – Whatever you can do in the UI – you can do through the API – Index, Search, Visualize, Manage API is RESTful – Endpoints are served by splunkd – Requests are GET, POST, and DELETE HTTP methods – Responses are Atom XML & JSON – Versioning as of Splunk 5.0 – Search results can be output in CSV/JSON/XML 1
  • 12. Grigori Melnik, Principal Product Manager – Splunk Developer Platform 12 What does a Splunk App look like?
  • 13. Grigori Melnik, Principal Product Manager – Splunk Developer Platform Copyright Š 2015 Splunk Inc. Lets build an app…
  • 14. Grigori Melnik, Principal Product Manager – Splunk Developer Platform 14 • Find some data • Get the data into Splunk • Search for the Data • Visualise the data The Plan
  • 15. Grigori Melnik, Principal Product Manager – Splunk Developer Platform 15 The Data
  • 16. Grigori Melnik, Principal Product Manager – Splunk Developer Platform 16 The Modular Input
  • 17. Grigori Melnik, Principal Product Manager – Splunk Developer Platform 17 Static Data/Lookups
  • 18. Grigori Melnik, Principal Product Manager – Splunk Developer Platform 18 A Custom Search Command geodistance latA=MyLat lngA=MyLong latB=Ferry.Latitude lngB=Ferry.Longitude meters=distance | where distance <1000
  • 19. Grigori Melnik, Principal Product Manager – Splunk Developer Platform 19 The Visualisation
  • 20. Grigori Melnik, Principal Product Manager – Splunk Developer Platform 20 Some parting thoughts… • Help yourself (modular input errors) • Source control • Build Process • Continuous Integration & versioning
  • 21. Grigori Melnik, Principal Product Manager – Splunk Developer Platform Copyright Š 2015 Splunk Inc. Resources
  • 22. Grigori Melnik, Principal Product Manager – Splunk Developer Platform 22 Where to go for more Info • Tutorials, Code Samples, Getting Started, Downloads – http://dev.splunk.com • Splunk Developer Guidance – http://dev.splunk.com/goto/devguide • Splunk Base (Apps) – https://splunkbase.splunk.com • GitHub – https://github.com/splunk • Twitter – https://twitter.com/splunkdev • Blogs – http://blogs.splunk.com/dev 22
  • 23. Copyright Š 2015 Splunk Inc.23 SEPT 26-29, 2016 WALT DISNEY WORLD, ORLANDO SWAN AND DOLPHIN RESORTS • 5000+ IT & Business Professionals • 3 days of technical content • 165+ sessions • 80+ Customer Speakers • 35+ Apps in Splunk Apps Showcase • 75+ Technology Partners • 1:1 networking: Ask The Experts and Security Experts, Birds of a Feather and Chalk Talks • NEW hands-on labs! • Expanded show floor, Dashboards Control Room & Clinic, and MORE! The 7th Annual Splunk Worldwide Users’ Conference PLUS Splunk University • Three days: Sept 24-26, 2016 • Get Splunk Certified for FREE! • Get CPE credits for CISSP, CAP, SSCP • Save thousands on Splunk education!