Copyright©2016SplunkInc.

MarshallAgnewSeniorSo>wareEngineeratSplunk

BuildingSplunkVisualizaDonswiththeNewCustomVisualizaDonAPI

Disclaimer

2

DuringthecourseofthispresentaDon,wemaymakeforwardlookingstatementsregardingfutureeventsortheexpectedperformanceofthecompany.WecauDonyouthatsuchstatementsreflectourcurrentexpectaDonsandesDmatesbasedonfactorscurrentlyknowntousandthatactualeventsorresultscoulddiffermaterially.Forimportantfactorsthatmaycauseactualresultstodifferfromthosecontainedinourforward-lookingstatements,pleasereviewourfilingswiththeSEC.Theforward-lookingstatementsmadeinthethispresentaDonarebeingmadeasoftheDmeanddateofitslivepresentaDon.Ifrevieweda>eritslivepresentaDon,thispresentaDonmaynotcontaincurrentor

accurateinformaDon.WedonotassumeanyobligaDontoupdateanyforwardlookingstatementswemaymake.InaddiDon,anyinformaDonaboutourroadmapoutlinesourgeneralproductdirecDonandis

subjecttochangeatanyDmewithoutnoDce.ItisforinformaDonalpurposesonlyandshallnot,beincorporatedintoanycontractorothercommitment.SplunkundertakesnoobligaDoneithertodevelopthefeaturesorfuncDonalitydescribedortoincludeanysuchfeatureorfuncDonalityinafuturerelease.

Agenda

  WhyUseCustomVisualizaDons  CustomVisualizaDonsinSplunk  OverviewoftheAPI  CodingDemo  LearningMore

3

WhyVisualizaDonMaZers

4

Splunkexcelsatunderstandingmachinedata

WhyVisualizaDonMaZers

5

HumansareexcellentatseeingvisualpaZerns

WhyVisualizaDonMaZers

6

VisualizaDonbridgesthegap

Built-InVisualizaDons

7

Splunkhasbuilt-invisualizaDonsformanyofthemostcommondatatypesandtasks

Built-InVisualizaDons

8

Splunkhasbuilt-invisualizaDonsformanyofthemostcommondatatypesandtasks

CustomVisualizaDons

9

ThevisualizaDonframeworkmakesitpossibleforSplunkuserstobringinanyvisualizaDontheywant

QuickDemo

10

SplunkSupportedVisualizaDons

11

•  SankeyDiagram•  Treemap•  Timeline•  Punchcard•  CalendarHeatmap•  HorseshoeMeter•  StatusIndicator•  HorizonChart•  LocaDontracker•  ParallelCoordinates•  BulletChart

WebuiltasetofsupportedvisualizaDonstobothaddresssomeofthetoprequests,andtoserveassamplesfordevelopers

ButthatisjusttheDpoftheiceberg—therealpoweristheAPI

CustomVisualizaDonsinSplunk

12

  Packagedinapps  AvailableacrossSplunk(Search,dashboards,reports,otherapps)  PermissionedlikeallSplunkknowledgeobjects  CanbefoundandinstalledfromtheSplunkUI  ImplementedinJavaScriptusinganyframeworkadeveloperwants

ACustomVisualizaDonApp

13

appnameappserverstaDcvisualizaDons<visualizaDon_name>

visualizaDon.jsvisualizaDon.cssformaZer.htmldefaultvisualizaDons.conf

JavaScript

14

SplunkVisualizaDonBase–  Mainentrypointforlogicandrendering–  ExtendinvisualizaDon.js–  Overridedatahandlingandrenderingmethods

SplunkVisualizaDonUDls–  UDliDesforcolorschemes,Dmezonehandling,booleannormalizaDon,and

securitybest-pracDces

formaZer.html

15

  Containshtmlforthevizeditordialog  PropertyvaluesgetpickedupandpassedtoJavaScript  SupportsSplunk-styleformelementsaswebcomponents  Alsosupportshtmlinputs

visualizaDon.css

16

  ContainscssrulesforthevisualizaDon

visualizaDons.conf

17

  System-wideconfiguraDonforthevisualizaDons–  User-facinglabels–  Userhelpstrings–  Defaultheight–  Selectability

  CandeclaremulDplevizesperapp

Webpack

18

  WestronglysuggestusingwebpacktobuildvisualizaDonsintoacontainedpackage

ACustomVisualizaDonAppwithWebpack

19

appnameappserverstaDc

visualizaDons<visualizaDon_name>srcvisualizaDon_source.js

webpack.config.jsvisualizaDon.jsvisualizaDon.cssformaZer.html

package.jsondefaultvisualizaDons.conf

CodingDemo

20

LearningMore

21

  What'sNew–CustomVisualiza4ons:MichaelPorath  Dashboards,Aler4ng,Repor4ngandVisualiza4on-What’sNew:MichaelPorathandNicholasFilippi

  STEPupyourappdevelopmentgame:TeddHellmannandDavidPoncelow  DashboardWizardry:SiegfriedPuchbauerandNicholasFilippi  FasterSplunkAppCer4fica4onwithSplunkAppInspect:GrigoriMelnikandAndrewNortrup

  BestPrac4cesforDevelopingSplunkAppsandAdd-ons:JasonConger  Visualiza4onanddashboardclinicsandboothsontheshowfloor

RelatedbreakoutsessionsandacDviDes…

LearningMore

22

CustomVisualizaDonOverviewStep-by-StepTutorialAPIReferenceExamplesonSplunkBaseCodeFromthisTalk

OnlineResources

THANKYOU