All Apps and Add-ons

Website Monitoring: How to configure with app with multiples proxies?


I don't know how to accomplish this configuration. I have an URL listen on port 80 but it is binding to 2 servers with the same port


Any idea on how to setup the $SPLUNK_HOME/etc/apps/website_monitoring/local/website_monitoring.conf file?

0 Karma


It depends on how the servers are binding to the same port.

The options I could see are:

1. The host is binding on different IP addresses
If this is the case, you should be able to setup an input for each IP address.

2. The web-servers are behind a reverse proxy and are using domain names to distinguish between both of them
In this case, you should be able to setup an input for each host name to has the inputs distinguish between each server. The app supports SNI and thus should work even if the sites use SSL.

3. The web-servers are behind a reverse proxy that is load-balancing
In this case, it may not be possible to have separate inputs that monitor both of the sites or to guarantee when both sites would be monitored (unless the reverse proxy has some way of allowing you specify which server to go to).

0 Karma


Yes, the 2 servers using the port 8080 are load balancing behind apache configuration in the port 80. So, I want to have a way to identify when one node is down.

Should I setup a proxy per node?

Thanks in advance

0 Karma
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.