All Apps and Add-ons

Splunk App for Web Analytics: How to exclude images from a search, and how can I search what organization an audience is connecting from?

kc5ods
Explorer

So, looking at audience, I can see where they're connecting from etc - is there any way to see what organization, say, stanford.edu, and sort by universities or .edu addresses?

Also, is there any way to exclude images and other filler files from a search and just include .htm/.html and .mp3/mp4 files, so I can quickly see which actual pages are most popular and not see that all the first-page images are the most popular things on my site? thanks.

0 Karma

jbjerke_splunk
Splunk Employee
Splunk Employee

Hi kc5ods

There is currently no way of extracting organizations from a URL or domain. This could be made possible using a lookup that you can create and attach to the source data. It should then be relatively easy to add a couple of panels that groups the traffic by this new field.

As for the exclusion of images and other files - This should already be part of the app? This is done using event types and by checking the "file" field for various extensions.

Can you double check that you have the field called "file" when doing this search:

tag=web

If not, perhaps you can tweak the "file" field extraction until you have this field?

j

0 Karma
Get Updates on the Splunk Community!

Ready, Set, SOAR: How Utility Apps Can Up Level Your Playbooks!

 WATCH NOW Powering your capabilities has never been so easy with ready-made Splunk® SOAR Utility Apps. Parse ...

DevSecOps: Why You Should Care and How To Get Started

 WATCH NOW In this Tech Talk we will talk about what people mean by DevSecOps and deep dive into the different ...

Introducing Ingest Actions: Filter, Mask, Route, Repeat

WATCH NOW Ingest Actions (IA) is the best new way to easily filter, mask and route your data in Splunk® ...