Does the Splunk App for Web Analytics support more than one website from a single source?

[burras]

Just wondering more than anything else - Does this app support multiple websites sourced from a single log file? The reason I ask is that we're looking to use this for monitoring CDN transactions. We have the Origin logs that we're able to dole out to individual log sources, but the concurrent CDN data comes in as a single log file that represents about a dozen different URLs all intermingled together.

The way I'm looking at it right now in the websites setup, we'd have all of our URLs tied specifically back to their original sources on the Origins and then have another entry for each website with a single host and source log file. Anyone see any issues with that sort of configuration?

[burras · Accepted solution]

After doing my own research into this, it appears that the answer is "no". It appears that each website, host, and source must be unique. As soon as I tried to add a 2nd website to an existing host/source combination, it overwrote the previously existing configuration.