I know I can install the Website Monitoring app from Splunkbase on Splunk Enterprise, but what about on Splunk Cloud? If I use Splunk Cloud, some of the Splunkbase apps (like Website Monitoring) do not work. How do I achieve the same? I am looking for a SaaS solution.
Finally they replied back on my request to add it to cloud. It took the Splunk Cloud team a month to review the Website Monitoring app and let me know that this app is not secure enough. Their email is reproduced below.
Thank you for your app install request. Your app did not meet security and functionality requirements for Splunk Cloud for the following reasons:
The application contains plain text credentials, stored in website_monitoring.conf, which are not permitted in Splunk Cloud. Please see http://blogs.splunk.com/2011/03/15/storing-encrypted-credentials/ for suggestions on how to address this issue.
The application can be configured for unencrypted communication, which is not permitted in Splunk Cloud. All communication must be encrypted (HTTPS preferred).
Once these issues are remedied you can resubmit your app for review.
* If the customer would like the display elements in this app (e.g., dashboards, panels, etc..), they should modify the app, or engage Professional Services to modify the app on their behalf to remove any unneeded components
* Customers may wish to install this app on a heavyweight forwarder.
Question: would publishing a version that doesn't allow monitoring HTTP sites (only HTTPS) work for you? I have considered making a cloud-only version of Website Monitoring but I figured that most people wouldn't bother using it if you couldn't monitor non-SSL websites.
Let me know; I would be willing to consider making a cloud-only version.
I'm pretty sure that Website Monitoring is being deployed on cloud just fine. I would be very surprised if it didn't. I suggest talking to your support contact.
Let me know if it doesn't work; I'll look into making changes as necessary. If you find out that it does work, could you be so kind to approve this answer so that I can confirm it is functional on cloud?
I asked about this. I was told that the app is not cloud certified because it "can be configured to monitor websites via HTTP" (which is a security concern). I don't see why this should be an issue in this case since this is used to monitor open source information. I recommend taking this up with Support. Mention case CO-8391if you do.
In the meantime, I have provided feedback to them indicating why I think it should be cloud certified.
BTW: you can install the app on a heavy forwarder as a workaround.
The problem is that all of our servers are on cloud. We are looking for a proper cloud solution. As of now we are using Sumo Logic on cloud with New Relic. As Sumo Logic & Splunk does not provide website monitoring, there is no convincing reason to move out of Sumo Logic into Splunk. Had Splunk supported it, then we would have a very good reason.
Thanks for your support though.