What’s New in the Splunk SDKs?

Today we’re thrilled to announce that the Splunk Software Development Kits for Java and Python have graduated to general availability (GA) and the Splunk SDK for JavaScript has been updated since it shipped as GA with Splunk 5 Enterprise. The Splunk SDKs make it faster and more efficient to program against the Splunk REST API using constructs and syntax familiar to developers experienced with Java, Python, JavaScript and PHP (now in public preview).  Developers can easily manage HTTP access, authentication and namespaces in just a few lines of code. The SDKs also simplify output from searches.  The REST API returns search results in XML, JSON, or CSV in a raw format. The SDKs provide results readers (helper classes for Python and Java, a code example for JavaScript) that parse these events and return them in a simplified structure with clear key-value pairs.  For a full list of changes for each SDK, check out Splunk on GitHub, but here are some of the highlights:

The Splunk SDK for Java

  • Added new specific helper Args and Collection classes that make it easier to discover and use functionality specific to certain endpoints, like initiating a search or managing a saved search
  • Better handling of multi-value fields when reading data from Splunk (through an improved ResultsReader interface)
  • Added support for easier management (enabling, disabling and modifying) of Modular Inputs
  • Easier handling of input and output streams, e.g. providing developer-friendly wrappers for sending data to Splunk via TCP.
  • Added ability to programmatically delete indexes

The Splunk SDK for JavaScript

  • Added ability to log JSON objects directly from the SDK
  • Improved Job management like tracking the progress – you can now get callbacks for job completion, job progress and job error and cancellation events
  • The default Splunk version for the Splunk SDK for JavaScript is now Splunk Enterprise 5.

The Splunk SDK for Python

  • Allows auto login to Splunk from the client to refresh user authentication sessions
  • Improved Job Management including the ability to run export
  • Added support for easier management (enabling, disabling and modifying) of Modular Inputs
  • Easier management of roles, such as adding or removing capabilities
  • Easier handling of input streams, e.g. providing developer-friendly wrappers for sending data to Splunk via TCP.

As always, the Splunk SDKs are available for FREE on GitHub – clone away and commence hacking.  What are you waiting for?  Get started!

Post a Comment

Your email is never published nor shared. Required fields are marked *

*
*