topic Instead of a Home Page showing up with three different URLs, is there a way to combine all variations to one URL string? in Splunk Search

Instead of a Home Page showing up with three different URLs, is there a way to combine all variations to one URL string?

spammenot66 — Tue, 12 Apr 2016 21:55:30 GMT

Is there anyway to treat all loaded home pages for a given URL path to be the same? For example the home page can show up as:
1) ending with forward slash, for example: http://mysite.com/site1/
2) have no forward slash at the end of the URI stem, for example http://mysite.com/site1
3) have an index.html file, for example: http://mysite.com/site1/index.html

Instead of site1 showing up with three different URLs, is there a way to combine all of them to show up as http://mysite.com/site1? Is there someway to remove last forward slash / or last instance of /index.html from the URL string?

Re: Instead of a Home Page showing up with three different URLs, is there a way to combine all variations to one URL string?

lguinn2 — Wed, 13 Apr 2016 00:04:35 GMT

You could do this in your search string like this

your_search_here
| url = case(like(url,"%/index.html"),substr(url,1,len(url)-11), 
                    like(url,"%/index.htm"),substr(url,1,len(url)-10), 
                    like(url,"%/"),substr(url,1,len(url)-1), 
                    1==1,url)
| next_thing_here

Hopefully I am not off-by-one on the string length calculations... 🙂

Re: Instead of a Home Page showing up with three different URLs, is there a way to combine all variations to one URL string?

spammenot66 — Thu, 04 Aug 2016 02:41:53 GMT

thanks for the reply.