Skip to content

Latest commit

 

History

History
60 lines (43 loc) · 3.5 KB

README.md

File metadata and controls

60 lines (43 loc) · 3.5 KB
Raw

Splunk .conf22 - DEV1385C Debug Deep Dive

Companion material and source code for all demos performed in session DEV1385C

General Debugging Workflow

  1. From Visual Studio Code, open the folder of the Splunk app on the Splunk instance containing the thing you want to debug. For example, to debug a modular input in an app with an ID of TA-conf22-debugging, open the following folder in Visual Studio Code:
$SPLUNK_HOME/etc/apps/TA-conf22-debugging
  • Do not open the file containing the code of the modular input directly. Open the folder of the Splunk app.
  1. Add 4 lines of code to the thing you want to debug
  2. Start the thing you want to debug
  3. Debug the thing with Visual Studio Code

Build

This add-on is built with Splunk's UCC Generator. Install ucc-gen per the instructions. Then, execute the following from the command line in the root of this repository to build the add-on:

ucc-gen --ta-version=<version>

Example:

ucc-gen --ta-version=1.0.0

The add-on will be built in an output directory in the root of the repository.

Launch Docker container with add-on

Create a .env text file in the root of your cloned repository with the following:

SPLUNK_APP_ID=TA-conf22-debugging
SPLUNK_VERSION=latest
SPLUNK_PASSWORD=<SPLUNK ADMIN PASSWORD>

# Optional - SPLUNKBASE_USERNAME and SPLUNKBASE_PASSWORD are used to install apps from Splunkbase when the container is built
SPLUNKBASE_USERNAME=<YOUR SPLUNKBASE USERNAME>
# Create an OS environment variable for your Splunkbase password.  Example:
# export SPLUNKBASE_PASSWORD=<YOUR SPLUNKBASE PASSWORD>

# Optional - install the Splunk Add-on for Microsoft Visual Studio Code for debugging
SPLUNK_APPS_URL=https://splunkbase.splunk.com/app/4801/release/0.1.2/download

Launch the container using the following command from the root of the repository:

docker compose up -d

Resources