All Apps and Add-ons

Splunk App for Web Analytics: Why is the web.bytes field not populated?

New Member

We are in the process of setting up the Splunk App for Web Analytics, and one of the gaps we have identified is that the web.bytes field is not populated after the Web Analytics app does its magic. We are seeing site visits come up, but this particular field never seem to show any data. Is there a particular field we need to make sure that IIS includes in the logs for this to be populated?

Our web servers are all running Windows Server 2012 R2, if that helps any.

0 Karma

Path Finder

Yes, make sure the following fields are enabled in your IIS logging:

We pretty much enabled all the IIS logging and the app looks pretty good. Make sure to read up on the threads in here, we had to make a change to the Data Model in order for the app to work in a search head cluster. Also, read the latest update on http_user_agent.

0 Karma
Get Updates on the Splunk Community!

Database Performance Sidebar Panel Now on APM Database Query Performance & Service ...

We’ve streamlined the troubleshooting experience for database-related service issues by adding a database ...

IM Landing Page Filter - Now Available

We’ve added the capability for you to filter across the summary details on the main Infrastructure Monitoring ...

Dynamic Links from Alerts to IM Navigators - New in Observability Cloud

Splunk continues to improve the troubleshooting experience in Observability Cloud with this latest enhancement ...