What is Splunkbase?
Inside Splunk, there is a lot of apps you can download to extend the functionality your Splunk application. Splunkbase is a platform that allowing us to download those apps.
Apps that are built by plunk will have a “Splunk Buit”Logo while apps that are certified by Splunk will have the “Splunk Certified” Logo.
However, there is other apps that may not have passed the Splunk Certification but they have also very useful.
How to download a Splunk App?
Suppose we want to download an app called “Splunk Dashboard Examples”. Following is the steps:
This detail page indicated this app is built by Splunk, and also provide a brief overview regarding to this Splunk App.
Following table listed the meaning of each columns
Name;;;Name of the Splunk App;nn;
Folder Name;;;Where is the app stored in the Splunk server;nn;
Version;;;Version number of the app;nn;
Update Checking;;;Would the server check for any new version of the Splunk App;nn;
Visible;;;). Mot of the apps will have a user interface. However, it is not mandatory.;nn;
Sharing;;;Sharing permissions for this app;nn;
Status;;;Status of current app;nn;
Actions;;;Actions can do in this page for the app;nn;
What is a Splunk Apps?
Basically a Splunk Apps is simply a set of related config files. A config file is a text file.
Let’s have a look those underneath config files for the “Splunk Dashboard Examples” Splunk App.
As indicated from from step 10, the app is stored under folder “Simple_xml_examples”
Following is the full path to this Splunk App:
This can be variant depends of where is the Splunk server being installed.
Goto the “default” folder.
Cost for a Splunk App?
Most Splunk Apps are free, but there is also a few premium apps which you will need a licenses.
Who Develop Splunk Apps?
The answer is very variant, it can be Splunk them-self, Software vendor etc.
What is Add-on?
You may come across with the term Add-on. Add-ons are simply are subsets of an app. It is for specify data collection. It don’t have GUI because they are part of the larger app.