topic Re: Splunk App for Web Analytics has no data in All Apps and Add-ons

Splunk App for Web Analytics has no data

dglass0215 — Mon, 27 Apr 2015 19:25:17 GMT

I have went through the setup of the Splunk App for Web Analytics and read the documentation, but it does not display any data. I suspect part of the problem may be with the configuration of the Splunk Weblog Add-on as that seems to be very buggy. Has anyone been able to deploy the Splunk App for Web Analytics and have it return results? Please help!

Re: Splunk App for Web Analytics has no data

juvetm — Mon, 27 Apr 2015 19:37:59 GMT

hi
i think this link may you
https://splunkbase.splunk.com/app/2699/#/documentation

Re: Splunk App for Web Analytics has no data

dglass0215 — Mon, 27 Apr 2015 19:40:52 GMT

juvetm...I'm not sure if you were trying to be a smart a** or not but I have already read the documentation. Thanks! Do you use the app and are able to give me any real help??

Re: Splunk App for Web Analytics has no data

jbjerke_splunk — Tue, 28 Apr 2015 15:10:42 GMT

Hi dglass2015

It's difficult to say what the problem might be without any details. In your post you mention Splunk Weblog addon. That addon does not do any data inputs and does not need to be configured at all. It just needs to be installed. The app setup page checks if this has been installed or not.

To troubleshoot, do you get any results for this search query?

tag=web

If you do, verify that the data model has been accelerated.

If not, do you get anything for this query?

index=* (sourcetype=access OR sourcetype=iis)

If not, the sourcetype for the data you have in Splunk is not according to the documentation. You can use sourcetype renaming, reimporting the data under a new sourcetype, or by modifying the eventtype definition.

If you let me know more details I can try and help.

Re: Splunk App for Web Analytics has no data

jbjerke_splunk — Tue, 28 Apr 2015 15:11:39 GMT

There was a typo in the last search. It should read
index=* (sourcetype=access* OR sourcetype=iis)