Splunk App for Web Analytics has no data

[dglass0215]

I have went through the setup of the Splunk App for Web Analytics and read the documentation, but it does not display any data. I suspect part of the problem may be with the configuration of the Splunk Weblog Add-on as that seems to be very buggy. Has anyone been able to deploy the Splunk App for Web Analytics and have it return results? Please help!

[jbjerke_splunk]

Hi dglass2015

It's difficult to say what the problem might be without any details. In your post you mention Splunk Weblog addon. That addon does not do any data inputs and does not need to be configured at all. It just needs to be installed. The app setup page checks if this has been installed or not.

To troubleshoot, do you get any results for this search query?

tag=web

If you do, verify that the data model has been accelerated.

If not, do you get anything for this query?

index=* (sourcetype=access OR sourcetype=iis)

If not, the sourcetype for the data you have in Splunk is not according to the documentation. You can use sourcetype renaming, reimporting the data under a new sourcetype, or by modifying the eventtype definition.

If you let me know more details I can try and help.

J

[jbjerke_splunk]

There was a typo in the last search. It should read
index=* (sourcetype=access* OR sourcetype=iis)

j

[juvetm]

hi
i think this link may you
https://splunkbase.splunk.com/app/2699/#/documentation

[dglass0215]

juvetm...I'm not sure if you were trying to be a smart a** or not but I have already read the documentation. Thanks! Do you use the app and are able to give me any real help??