SBN

AppInspect All the (Splunk) Things

At Hurricane Labs, we find Splunk’s AppInspect to be an invaluable tool at our disposal. We use it almost every day in some capacity.

Because we use it so much, we’re always looking for ways to make our Splunk app inspection process easier. Therefore, we’re happy to announce not one, but two AppInspect related tools.

An update to AppInspect App for Splunk

One update pertains to our AppInspect App for Splunk that we released a couple of years ago. We’ve rebuilt the front-end of this app from the ground up using Splunk’s new UI Toolkit. 

A major change in the app is that now you can select specific tags before submitting your app to AppInspect. All of this information is stored in a custom configuration file, so if there are a combination of tags that you use for your apps, you can save it once and be done.

In the previous version of the AppInspect App for Splunk, a more annoying problem with the app was that it required you to re-login to your Splunk Account every time you wanted to use the app. The new version solves this problem by checking your current token to see if it’s still valid; if it is, it will just skip the login process altogether.

Side Note: Splunk’s UI Toolkit has significantly sped up our custom front-end development time in Splunk. If you’re an app developer and you haven’t checked it out yet, we highly recommend it.

New release: AppInspect CLI

The second AppInspect tool we are releasing is an AppInspect CLI. 

Now, you may be saying to yourself, “but that already exists…” However, this is slightly different in that it is a CLI tool that uses the AppInspect API. We use it at Hurricane Labs as a part of our Splunk App Build process. We also like to use it in conjunction with the regular AppInspect CLI in order to compare results.

You can download the AppInspect API CLI Wrapper here.

And, if you’re a Mac user, you can download it using Homebrew. Instruction can be found in the README file in the link above.

Conclusion

As always, we’d love to hear from you regarding these tools. Your feedback helps us to improve what we’ve built for the Splunk community. 

Happy Splunking!

The post AppInspect All the (Splunk) Things appeared first on Hurricane Labs.

*** This is a Security Bloggers Network syndicated blog from Hurricane Labs authored by Ian Gillespie. Read the original post at: https://hurricanelabs.com/splunk-tutorials/appinspect-all-the-splunk-things/?utm_source=rss&utm_medium=rss&utm_campaign=appinspect-all-the-splunk-things