Creating a Custom D3 Application with Visualizations in Splunk

This is a slightly lengthy tutorial on creating your own D3 (or any other open source JavaScript library) visualization and app for use in Splunk. It assumes familiarity with creating Splunk Apps, as well as with JavaScript, and as such is at a more intermediate level: before creating this app, you might want to work on both your JavaScript skills and work on creating some Splunk visualizations with Splunk JS or Simple XML. You...


Putting WebCenter Sites 12c on Amazon EC2

For local developer environments in the previous version of WebCenter Sites, 11g, developers had use of a Jump Start Kit (JSK) that was relatively lean and self-contained. The footprint of the JSK, while not trivial, was roughly the same as a small-ish virtual machine. With the latest release of WCS 12c (12.2.1) a JSK does not currently exist, and as a developer testing integration, or building functional pieces currently requires a complete install of Sites.

In an earlier post by Michael, he discussed the process of getting up and running with WebCenter Sites 12c step-by-step. In...


Creating and Using New Custom Visualizations in Splunk 6.4

Visualizations are not new to Splunk, whether XML or (D3) JavaScript, but the visualizations offered in Splunk 6.4 are the easiest and most powerful yet!

Splunk has four large improvements to visualizations: 12 New D3 Visualizations The ability to add and extend your own visualizations to the library Developer APIs An Enhanced Visualization Picker New...

Integrating Twitter and WCS: A Primer On Asset Event Listeners And Other Mechanisms

Welcome back!

In my previous article, I outlined the different mechanisms in WCS for plugging your own ad-hoc logic into the asset save processing flow.

Before diving into the subject at hand, here are a couple of things we are NOT going to resolve in this article:

The "best possible" asset model for supporting Twitter integration. Asset model, like any data model, varies significantly depending on each project's specific...

Trimming Down your Splunk Indexer Storage with TSIDX Retention Settings

Hi everyone.  Today I wanted to cover the tsidx retention feature that was released in Splunk version 6.4.  This feature helps you reduce the storage costs for your indexer while maintaining actively searchable data.  Also in this blog, I wanted to try a new format and convey the information in an FAQ style.  Please leave a comment if you found the new format helpful for learning about tsidx retention.

Tsidx File Fundamentals

First let's cover some fundamentals about tsidx files.

Q. What is a tsidx file?
A. Tsidx stands for "time-series index" file.  It's created at...


Stay In Touch