All Apps and Add-ons

Website Monitoring: How to configure with app with multiples proxies?

Explorer

I don't know how to accomplish this configuration. I have an URL listen on port 80 but it is binding to 2 servers with the same port

Server1:8080
Server2:8080

Any idea on how to setup the $SPLUNK_HOME/etc/apps/website_monitoring/local/website_monitoring.conf file?

0 Karma

Champion

It depends on how the servers are binding to the same port.

The options I could see are:

1. The host is binding on different IP addresses
If this is the case, you should be able to setup an input for each IP address.

2. The web-servers are behind a reverse proxy and are using domain names to distinguish between both of them
In this case, you should be able to setup an input for each host name to has the inputs distinguish between each server. The app supports SNI and thus should work even if the sites use SSL.

3. The web-servers are behind a reverse proxy that is load-balancing
In this case, it may not be possible to have separate inputs that monitor both of the sites or to guarantee when both sites would be monitored (unless the reverse proxy has some way of allowing you specify which server to go to).

0 Karma

Explorer

Yes, the 2 servers using the port 8080 are load balancing behind apache configuration in the port 80. So, I want to have a way to identify when one node is down.

Should I setup a proxy per node?

Thanks in advance

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!