All Apps and Add-ons

Why are some domains not parsed properly in the URL Parser?

mstarks
Engager

Some domains include the domain with the tld, and the subdomain with the domain. Examples include:

weddingdayhives.blogspot.com
culinary-adventures-with-cam.blogspot.com.au
glowing-fire-7414.firebaseapp.com

Anyone else?

0 Karma
1 Solution

mstarks
Engager

I think this is due to a misunderstanding of the way urlparser uses lists. By default, the Mozilla list is used, which includes domains like firebaseapp.com. This is not an IANA TLD, but a Mozilla Public Suffix List TLD, hence my confusion. To use IANA root domains, just pass it to the listname parameter (i.e. listname="iana"). It really all depends on your use case.

View solution in original post

mstarks
Engager

I think this is due to a misunderstanding of the way urlparser uses lists. By default, the Mozilla list is used, which includes domains like firebaseapp.com. This is not an IANA TLD, but a Mozilla Public Suffix List TLD, hence my confusion. To use IANA root domains, just pass it to the listname parameter (i.e. listname="iana"). It really all depends on your use case.

Get Updates on the Splunk Community!

Index This | When is October more than just the tenth month?

October 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What’s New & Next in Splunk SOAR

 Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us for an ...