23
Grigori Melnik, Principal Product Manager – Splunk Developer Platform Copyright © 2015 Splunk Inc. Splunk for Developers Matthew Erbs Brisbane matthewerbs github/merbla

SplunkLive Melbourne Splunk for Developers

Embed Size (px)

Citation preview

Page 1: SplunkLive Melbourne Splunk for Developers

Grigori Melnik, Principal Product Manager – Splunk Developer Platform

Copyright©2015SplunkInc.

SplunkforDevelopersMatthewErbs

Brisbane

matthewerbsgithub/merbla

Page 2: SplunkLive Melbourne Splunk for Developers

Grigori Melnik, Principal Product Manager – Splunk Developer Platform2

HowcanSplunkhelpme?

2

Page 3: SplunkLive Melbourne Splunk for Developers

Grigori Melnik, Principal Product Manager – Splunk Developer Platform3

Adayinthelifeofadev

• Code• Build• Test

• Package• Release• Configuration

• Monitor

Page 4: SplunkLive Melbourne Splunk for Developers

Grigori Melnik, Principal Product Manager – Splunk Developer Platform4 4

CI/BuildServers

ProjectandIssueTracking

CodeRepository

QA/TestingTools

End-To-EndVisibilityAcrossTheDevToolChain

DeploymentServers/Automation

Page 5: SplunkLive Melbourne Splunk for Developers

Grigori Melnik, Principal Product Manager – Splunk Developer Platform5

CI/BuildServer

CodeReview

TaskTracking

WhatDataCanYouSplunk?

Logs–Whichcodehasalreadybeenreviewedforthisrelease/sprint?Whohascompletedthemostcodereviews?WhatcodehasNOTbeenreviewed?

Logs/API–Whoischangingfiles?Whatkindsoffilesarebeingchanged?Whatbranchesaremostactive?Whattypesofactivitiesareoccurringforabranch?

VersionControl

Logs/API– Howmanybuildscompletedtoday/thisweek/thismonth?Whichcheck-inkickedoffthisbuild?Whichtestsranagainstthisfailedbuild?

Logs–Whichtasksareassignedtowhichdevelopers?Whatprogressisbeingmadetocompleteassignedtasks?Whattasksremainforthisrelease/sprint?

5

Page 6: SplunkLive Melbourne Splunk for Developers

Grigori Melnik, Principal Product Manager – Splunk Developer Platform

Copyright©2015SplunkInc.

BuildingSplunkApps

Page 7: SplunkLive Melbourne Splunk for Developers

Grigori Melnik, Principal Product Manager – Splunk Developer Platform7

Whoisadeveloper?

7

Page 8: SplunkLive Melbourne Splunk for Developers

Grigori Melnik, Principal Product Manager – Splunk Developer Platform8

EveryonecanbeaSplunkAppDeveloper!

8

Page 9: SplunkLive Melbourne Splunk for Developers

Grigori Melnik, Principal Product Manager – Splunk Developer Platform9

SplunkforApplicationDevelopers

9

RESTAPI

BuildSplunkApps ExtendandIntegrateSplunk

SimpleXML

JavaScript/CSSExtensions .NetJavaScriptPython

RubyJavaPHP

DataModels

SearchExtensibility

ModularInputs

SDKs

KVStore

Page 10: SplunkLive Melbourne Splunk for Developers

Grigori Melnik, Principal Product Manager – Splunk Developer Platform

LogdirectlytoSplunkviaHTTP,

TCP,UDP

Integratesearchresultswithotherapplicationsusing

customvisualizations

Createandrunsearchesfrom

otherapplications

TheRESTAPIandSDKs

10

VisualizeSearch Manage

Add/DeleteUsers

ManageInputs

Index

Page 11: SplunkLive Melbourne Splunk for Developers

Grigori Melnik, Principal Product Manager – Splunk Developer Platform11

TheSplunkRESTAPIExposesanAPImethodforeveryfeatureintheproduct– WhateveryoucandointheUI– youcandothroughtheAPI– Index,Search,Visualize,Manage

APIisRESTful– Endpointsareservedbysplunkd– RequestsareGET,POST,andDELETEHTTPmethods– ResponsesareAtomXML&JSON– VersioningasofSplunk5.0– SearchresultscanbeoutputinCSV/JSON/XML

11

Page 12: SplunkLive Melbourne Splunk for Developers

Grigori Melnik, Principal Product Manager – Splunk Developer Platform12

WhatdoesaSplunkApplooklike?

Page 13: SplunkLive Melbourne Splunk for Developers

Grigori Melnik, Principal Product Manager – Splunk Developer Platform

Copyright©2015SplunkInc.

Letsbuildanapp…

Page 14: SplunkLive Melbourne Splunk for Developers

Grigori Melnik, Principal Product Manager – Splunk Developer Platform14

• Findsomedata• GetthedataintoSplunk• SearchfortheData• Visualise thedata

ThePlan

Page 15: SplunkLive Melbourne Splunk for Developers

Grigori Melnik, Principal Product Manager – Splunk Developer Platform15

TheData

Page 16: SplunkLive Melbourne Splunk for Developers

Grigori Melnik, Principal Product Manager – Splunk Developer Platform16

TheModularInput

Page 17: SplunkLive Melbourne Splunk for Developers

Grigori Melnik, Principal Product Manager – Splunk Developer Platform17

StaticData/Lookups

Page 18: SplunkLive Melbourne Splunk for Developers

Grigori Melnik, Principal Product Manager – Splunk Developer Platform18

ACustomSearchCommand

geodistance latA=MyLat lngA=MyLonglatB=Ferry.Latitude lngB=Ferry.Longitudemeters=distance | where distance <1000

Page 19: SplunkLive Melbourne Splunk for Developers

Grigori Melnik, Principal Product Manager – Splunk Developer Platform19

TheVisualisation

Page 20: SplunkLive Melbourne Splunk for Developers

Grigori Melnik, Principal Product Manager – Splunk Developer Platform20

Somepartingthoughts…

• Helpyourself(modularinputerrors)• Sourcecontrol• BuildProcess• ContinuousIntegration&versioning

Page 21: SplunkLive Melbourne Splunk for Developers

Grigori Melnik, Principal Product Manager – Splunk Developer Platform

Copyright©2015SplunkInc.

Resources

Page 22: SplunkLive Melbourne Splunk for Developers

Grigori Melnik, Principal Product Manager – Splunk Developer Platform22

WheretogoformoreInfo• Tutorials,CodeSamples,GettingStarted,Downloads

– http://dev.splunk.com

• SplunkDeveloperGuidance– http://dev.splunk.com/goto/devguide

• SplunkBase(Apps)– https://splunkbase.splunk.com

• GitHub– https://github.com/splunk

• Twitter– https://twitter.com/splunkdev

• Blogs– http://blogs.splunk.com/dev

22

Page 23: SplunkLive Melbourne Splunk for Developers

Copyright © 2015 Splunk Inc.23

SEPT26-29,2016WALTDISNEYWORLD,ORLANDOSWANANDDOLPHINRESORTS

• 5000+IT&BusinessProfessionals• 3daysoftechnicalcontent• 165+sessions• 80+CustomerSpeakers• 35+Apps inSplunkAppsShowcase• 75+TechnologyPartners• 1:1networking:AskTheExpertsandSecurityExperts,BirdsofaFeatherandChalkTalks

• NEWhands-on labs!• Expandedshowfloor,DashboardsControlRoom&Clinic,andMORE!

The7th AnnualSplunkWorldwideUsers’Conference

PLUSSplunkUniversity• Threedays:Sept24-26,2016• GetSplunkCertifiedforFREE!• GetCPE creditsforCISSP,CAP,SSCP• Savethousands onSplunkeducation!