App Architecture • Room 2

Building an App

Building a Splunk app involves creating views (dashboards), navigation (via `default/data/ui/nav/default.xml`), and saved searches.

The `default.xml` navigation file controls the app's menu bar. Each `<view>` element links to a dashboard XML file stored in `default/data/ui/views/`.

Knowledge Check

Prove your understanding to clear the room (Rewards XP)

In the Splunk REST API, create a new app by POSTing to the apps endpoint. Write: `| rest /services/apps/local` to list all installed apps.

Splunk Search Bar