Splunk Developer's Guide - Second Edition 2nd ed. Edition

Disappointed

I don't know just where you are on your journey of learning how to become a competent developer of splunk add-on's and applications. As you're looking for sources of knowledge you might find yourself digging through the splunk docs, looking at other add-on's, trying the add-on builder and doing lots of trial and error. Eventually you will really want a clear and concise book just like this one. This isn't a book that has all of the in's and out's and history of Splunk. This is a book that will focus on your goal of learning how to develop splunk apps. Buy it, read it, grow!

While this is, likely, an exhaustive step-by-step guideon "how-to" write and install a SPLUNK app, it lacksaddressing the why's.Why would one spend time writing an app ?Chapter 1, enumerating add-ons, gives these reasons:"Applications allow us to quickly share configurations,... " (p. 2)Regrettably, none of these reasons, especiallyinformation context related, were demonstrated.The book might benefit from an additional roundof proof-reading:"... naming source types to match your App is a good idea,This also allows you to break down the incoming data intospecific groupings" (p. 23).Unsure of how naming facilitates breaking data into groupings.Hopefully, these and other issues will be corrected in thebook's next edition.

I've been a reviewer for this book and it's been a pleasure to work with Kyle and to discover chapter after chapter how the author exposed the topics in a clear and effective way.This book is for all those people who still think that Splunk is just a geek toy: well, they will have to change their mind after reading this book! Following the labs and trying out the Reference Splunk App developed for this book, readers will find and experiment how Splunk is a complete and exhaustive platform to developer powerful data analytic application.This book is also a must read for Data Scientists that want to discover and experiment the full power and flexibility of Splunk as a developing platform, exploiting all his indexing and querying power, together with it's ability to organize and present information in an effective and immediate way.

Authoritative book based on years of building high quality apps and add-ons and helping users in the Splunk community. If you're going to build Splunk content that you intend to have other people use, you should read this.