Custom Add-Ons

Question 1

After managing sourcetypes and extracting fields, which key step comes next in the Add-On Builder?

Answer 1

Map to data models.

Question 2

What are the steps to Add-On Builder?

Answer 2

1. Manage sourcetypes
2. Map to Data Models
3. Validate and Package

Question 3

Where is the Add-On Builder available from?

Answer 3

SplunkBase

Question 4

What does the Add-On Builder do?

Answer 4

• Builds add ons for custom ES data.
• Normalizes custom data to the CIM
• Built-in validation
• Should not be used on production servers

Question 5

Which of the following features can the Add-on Builder configure in a new add-on?
- Normalize data
- Translate data
- Summarize data
- Expire data

Answer 5

Normalize data