For Splunkbot, I wanted the web server to run inside the process to make everything very self-contained and easy to distribute. I chose Expressjs for the webserver framework, and with that I chose the default jade for the templating language. For the web interface, I chose to base the pages on Bootstrap to make building the markup and CSS much simpler. Of course, I could probably do a better job of not making it look like a stock Bootstrap project, but at this point it works and I’m getting lazy.
Third, I built an interface that would allow us to search logs for any arbitrary text and have them display back in a format that looks like an IRC client. Also, and possibly coolest, we can use the same code to run a real-time search and display an IRC client like view of the channel in real-time. Try it out, open up an IRC client and head to EFnet #splunk, and then type some text and watch the Live page, and you’ll see it show up in real-time. For the code, check out Splunkbot.prototype.logsearch and Splunkbot.prototype.livesearch.
So, I encourage you to download the SDK, take a look around. If you have any problems getting started, first check out our excellent Dev site, which contains taons of documentation and examples, and also feel free to check out #splunk on EFnet (I’m Coccyx!) or hit me up on Twitter. If you build something, I’m in Marketing, and we like to tell people about things, so please get ahold of me and tell me what you’ve done so we can tell the rest of the world!