Are you a Splunk Developer? Then .conf22 is the conference for you!
This year, we’ve got 16 great Splunk Developer breakout sessions focusing on extending the Splunk platform with high-quality apps, add-ons and customizations with great CI/CD tools and automation. Sessions will also look at the latest technologies available and how to use tooling even to manage Splunk!
Check out the many great opportunities below, and discover how you can level up and apply these new skills in the following sessions:
DEV1127C - The Developer's App Starter Kit
Welcome to the world of Splunk Developer! We will dive right in and introduce you to everything you need to know to start using all the dev tools at your disposal. You'll learn the basic concepts of apps and add-ons and how to get data in using Splunk® REST APIs. And, once you've built your apps, how to package and deploy them to your environment, as well as Splunkbase™. Ready? Let's go!
DEV1168C - Best Practices and Better Practices for Splunk Development
Uplevel your Splunk Fu by learning best practices for Splunk development that will make you a Splunk Ninja in no time! In this session, you'll learn all the tips and tricks you've regretted not knowing for Splunkbase™, cloud vetting, Splunk® AppInspect, Splunk® Cloud Platform, debugging, and more!
DEV1385C - Debug Deep Dive: Using Visual Studio Code to Debug Splunk Code Wherever It Runs
Bugs happen because we all make mistakes. But are you still relying on so-called print statement debugging to find bugs? This type of debugging is inefficient, time-consuming, and difficult to decipher. There has to be a better way, and now there is! We’ll take a deep dive into using Visual Studio Code® to debug custom search commands, modular inputs, alert actions, custom REST handlers, or pretty much any custom code in your Splunk environment.
DEV1352C - Splunk® Cloud Developer Edition - Learn How You Can Get Splunk Cloud Environment and Test Your App To Be Cloud Ready
Splunk app developers need access to Splunk® Cloud to understand how their app behaves in Splunk Cloud. Join us to learn how we empower developers to test and deliver apps for Splunk Cloud with the Splunk® Cloud Developer Edition. See the preview release features for testing and detecting errors in your application to Splunk Cloud.
DEV1603C - Finding Threats Better With Splunk® Common Information Model (CIM) in Your Searches and Custom Add-ons
Would you like to get more value from your Splunk platform investment by detecting more true positives, having fewer false positives, and getting faster search performance? Learn how Splunk’s GDI team maps events into predictable CIM data models and fields and how you can improve your custom TAs’ CIM mapping to enable CIM-driven searches and detections rather than sourcetype-driven content.
DEV1160B - Forget Add-on Builder! Build Splunk Platform Apps With Config Explorer!
Forget Splunk® Add-on Builder, take your Splunk app development to the next level without leaving the Splunk® Web UI by using the amazing Config Explorer app. We will demonstrate how you can develop, test, debug, and publish your app from inside the Config Explorer app, leveraging its rich integrations with the Splunk® REST API to simplify config reloading, and custom hook functions to automate common tasks like packaging, AppInpect testing and uploading to Splunkbase™.
DEV1437B - Generating Test Data in Seconds! Is This for Real?
Enriching your Splunk® test environment with production data will give you a better insight into how your dashboard/extractions will look. However, using production data in the test environment may expose confidential information and will just give static output. This session will share how you can continuously generate test data without exposing confidential information in your test environment.
DEV1439B - Is Your Electric Car Giving You Sky High Power Bills? Splunk to the Rescue!
An electric car, wholesale power pricing, a smart plug and Splunk® SOAR. This is the story of how I used Splunk platform to not only charge my EV for free, but got paid to do it as well! You'll learn about writing apps for Splunk and SOAR as well as some troubleshooting between them.
DEV1434B - Turn On the Beats With Splunk® Dashboard Studio – Batch Execution Analysis and Tracking System (BEATS) At Coles
Coles is one of the largest supermarkets in Australia. To provide real-time visibility into batch status for critical Supply Chain operations, Accenture myWizard AIOPS and Coles built the BEATS app on Splunk's new dashboard framework. The app has helped Coles provide executive glass table reports on batch execution and predictive stats and alerting capabilities to the Supply Chain support teams.
DEV1703B - How Expedia Enables Self-Service Management and Deployment of >2000 Apps With CI/CD Splunk App Deployments With Splunk® AppInspect Validation and You Can Too!
We will cover the process Expedia uses to deploy Splunk apps to 7 different search clusters in over 30 different indexing clusters. Currently this process is controlling 2000 apps! For the deployment mechanism we use Splunk® AppInspect in a CI/CD pipeline to ensure all apps are in a valid state before getting deployed to the correct cluster.
DEV1518B - Splunkbase™ App Development Made Easy With CI/CD
Using CI/CD technologies and principals, our Splunk development team has been able to quickly build and test our Splunkbase applications. We will walk through, step by step, our development processes including our git merge process and the pipelines we have created. We will demonstrate merging new features, running the app through Splunk® AppInspect, and packing for upload on Splunkbase™.
DEV1120B - Using CI/CD To Keep Up With the Demands of an Ever Changing Splunk Environment
The multi-cluster Splunk environment at US Courts is large-scale and constantly changing, and our Splunk security content development needs to be able to change even faster. To keep up with all of the changes, and stay out of fire-fighting mode, we use source control, Ansible®, Jenkins pipelines and unit tests to streamline and automate our review and publishing process. Learn how we set up our Git repository to handle multiple clusters and how we are using Docker to develop and test Splunk content. We treat everything as code, making everything transparent, faster, repeatable and revertible.
DEV1619C - Create Dashboards With Custom Visualizations and Interactivity and Level Up Your Splunk Apps Using the Splunk Dashboards Framework and UI Toolkit
Do you want to push beyond the capabilities available with Splunk® Dashboard Studio? Are you looking for ways to embed custom visualizations, layouts and interactivity in your Splunk app? With the Splunk® Dashboard Framework and UI toolkit, the sky's the limit.
DEV1204B - Making Your Splunk App Look Sweet With SUIT
Developers building Splunk apps in 2022 have an entire suite of front-end tools publicly available to them. These tools provide a modern development methodology, accessibility and a consistent look and feel within the Splunk platform. These are, in fact, the same tools Splunk uses to build the Splunk platform. App developers far and wide have been improving the user interfaces of their Splunk apps by adopting the Splunk® UI Toolkit (SUIT). Learn how SUIT can help with the latest app you are building or using to improve existing apps.
DEV1564B - React UI and Splunk: Fast, Flexible and Really, Really, Ridiculously Good Looking Dashboards
Over the past year at Pacific Northwest National Laboratory, we have been migrating our HTML dashboards to Splunk® UI and the differences in speed and capability have been incredible! We will share the benefits of React based dashboards including custom visualizations and API consumption, and demo some of our dashboards that highlight the impressive features now available to Splunk developers.
DEV1451B - Balancing Openness and Governance With Automation Across the Splunk Stack at UBS
Ever wanted to know how to deploy a fully clustered environment with a click of a button? What if this also included automated governance checks to ensure the environment containing trillions of events remains stable? At .conf22, we will track UBS's journey from basic version control to a fully automated pipeline with governance across the Splunk stack.
Follow all the conversations coming out of #splunkconf22!
----------------------------------------------------
Thanks!
Tom Chavez
The Splunk platform removes the barriers between data and action, empowering observability, IT and security teams to ensure their organizations are secure, resilient and innovative.
Founded in 2003, Splunk is a global company — with over 7,500 employees, Splunkers have received over 1,020 patents to date and availability in 21 regions around the world — and offers an open, extensible data platform that supports shared data across any environment so that all teams in an organization can get end-to-end visibility, with context, for every interaction and business process. Build a strong data foundation with Splunk.