Splunk Application Boilerplate (version 1.0). Developing Splunk Apps with Docker.

We develop applications for Splunk. We develop applications for Splunk that allow you to monitor containerized applications. We develop these applications because we love containers. Of course, we use containers in our development workflow.

Today we are happy to share our development practices with you, the way we use Splunk Image and App Inspect to build our applications.

We are open sourcing two projects:

• Boilerplate of Splunk app and developer scripts that allow you to leverage Docker for development, feel free to use it to build and deliver Splunk Applications.
• Docker Image with Splunk AppInspect, which we will support moving forward and keep up to date.

The benefits of using our Boilerplate app:

• Splunk is distributed as a Docker Image. If you break something, tear down the environment and create a new one.
• Splunk can be preconfigured with any possible requirements you might have, which you can define with Splunk configuration files.
• Support for Splunk Licenses, if you have Splunk Development License.
• Default configurations allow you to start developing right away.
• Check our Tips & Tricks section.

And it is easy to get started:

Step 0. Bootstrap your application by following our step-by-step guidance

Step 1. Run Splunk Up to bootstrap your Splunk environment

Step 2. Run Splunk Logs to wait until Splunk is ready

Step 3. Run Splunk Web to open your application in Splunk Web

Read more on GitHub.

Enjoy!