This documentation applies to the following versions of Splunk: 4.0 , 4.0.1 , 4.0.2 , 4.0.3 , 4.0.4 , 4.0.5 , 4.0.6
An App is a collection of configurations ranging from scripts, knowledge objects, custom UIs, and back-end settings. Each App has its own directory so it can be easily packaged and distributed.
An App can be as simple as creating a couple of custom dashboards for different groups within your business, or creating your own Web pages for Splunk's webserver to serve. You can write search and input scripts, create custom roles, skin and rebrand the Splunk Web UI, and more. Splunk is highly customizable, so you can decide exactly how you want your Splunk installation to work.
4.0 introduces a new App framework that supports app creation at all levels, so you can build a powerful App for Splunk via configuration instead of coding.
Splunk's App framework provides these kinds of capabilities:
Each App is a workspace that presents relevant data in a customized setting. Apps can contain any or all of the following:
Use this manual and Splunk's built-in App framework to create your own App. Building an App is as simple as creating a few saved searches and views to display those saved searches. Continue on to the next page in this section for an overview of App building.