Website Monitoring App: monitor sites beyond a single sign on page.

[kdimaria]

Is there some way to configure the App to have login credentials so it passes the single sign on page? When I put the url's I want, it returns 200 but I am assuming it is pinging the sign on page and not the actual URL because when you go to that url in a browser, it redirects to the sign on page. Thanks.

[LukeMurphey]

Website Monitoring does not currently support HTML forms authentication (the type of authentication where you fill out an HTML form to get the website to let you in). However, you may be able to use the Website Inputs app instead since it does support form authentication. You could so this by:

1. Installing Website Inputs (see https://splunkbase.splunk.com/app/1818/)
2. Create an input against the website you want to monitor. I recommend using the wizard that is built into the app.
3. When you get the step two of the wizard ("Enter Credentials"), make sure to set the authentication so that you can log in to the website. You may need to the change the browser to FireFox or Chrome if the forms authentication requires Javascript to authenticate. Make sure to install the browser on the host accordingly.
4. Leave the selector blank in step three ("Define CSS Selector")
5. Create a search to analyze the output of the input you just created such that it alerts you accordingly. You will likely want to consider the following fields: content_md5, content_sha224, response_code, response_size, request_time

Once you get the input created, you could use a search like this:

source="web_input://my_input_with_forms_auth" | table _time content* response* request*

[kdimaria]

Thanks, Does this app do the same time of monitoring by getting the response code and the response time? And when I go to the link it redirects me to an entirely different webpage to log in then I can access a bunch of different webpages. Will it work for that?

[LukeMurphey]

I neglected a field in my list. The request_time contains the response time.

As for the link redirection: you will need to define the URL of the login page in the wizard in the authentication step of the wizard. Put the URL of the page you want to monitor into the fist page of the wizard.

[kdimaria]

So theres two places for input? one for the URL we need authentication for then we put in the credentials then we put the other URL that we want monitored that is past that single sign on page?

[LukeMurphey]

Correct. The wizard has a page specifically for configuring authentication. It accepts a URL for the login page since it may not be the same page you want to monitor.