Database Reference
In-Depth Information
Splunk's app environment
Developing and maintaining different apps in a large enterprise environment can be diffi-
cult. In today's world, computer and application architectures can be quite complicated.
Different types of data come in from many different places, and these data files and streams
need to be monitored and acted upon in many diverse ways - which is why Splunk is so
useful. Splunk's app environment is a term that refers to the way that Splunk apps work
with the rest of Splunk. Splunk's infrastructure allows developers to easily create apps that
build on the usefulness of the Splunk platform as they integrate with it. Splunk's environ-
ment makes deploying their enterprise system with appropriate apps easy, which is one
reason for its recent dramatic growth.
Creating a Splunk applications
The concept of creating an app is easy, although it may sound intimidating to new users.
This is considered a great practice for a company or organization wanting to use Splunk's
capabilities. A company's different business units may want to have their own apps that
contain their distinctive domain data. A company-specific app can make it easier to integ-
rate the different objects related to a Splunk search head. A Splunk search head is a Splunk
Enterprise instance that controls the management of search functions by sending search re-
quests to a set of what are called search peers (or indexers who index and respond to search
head requests), and then compiling the results and sending them back to the user. This is
useful in that any field extraction, search, report, or dashboard created in the context of an
app stays in that app unless it is moved. So if multiple business units or departments are
sharing a Splunk search head, this keeps their system tidy without having objects cluttered
around in random apps. For this reason, more and more apps are being added to Splunk's
copious collection all the time.
