Developing in Splunk

In this course, we will explore some of the features that Splunk Enterprise offers and how to use them. We’ll look at what components make the platform work and how we manage these components. How roles and administration are managed, and the security mechanisms that are implemented to protect our data and work within the platform. Lastly, we will go through the troubleshooting process and optimization and check the Splunk Enterprise logs one by one.

In this course, we will be discussing Splunk apps. What are Splunk apps and how do we create them? After learning what Splunk Apps are and creating these apps, we will look at integrating data inputs. We will discover various data types, such as structured data, network security data and more. We’ll finish the course with a look at releasing and maintaining Splunk apps, where we will also visualize some of the processes.

In this course, we will start with Splunk REST API. What is Splunk REST API? We will begin by learning the request methods, encoding schema and interaction with the API. We’ll continue with Splunk SDK, where we will discuss authentication, authorization and more. Moving onto the Splunk KV-Store, we will explore what KV-Store is used for and how we create KV Collections. Last but not least, we will talk about Splunk HTTP Event Collector (HEC). We will understand how data is sent to the HEC and logging libraries (JS). Then you will have the opportunity to try a hands-on Splunk project.