I'd like to take a look at the Web Analytics application, but I have a few questions.
We have our Apache logs sent to one index. There are two different formats for the logs - most have a pipe delimited custom format, and the second is access-common. Can the app be modified to handle the custom format?
During the initial setup, it asked for some information on IP addresses - what IP's are they asking for?
To be asked later 🙂
Anyone use it? Any thoughts?
Switched over to the web intelligence app and set up our apaches to log to a second location using access_combined.
Works like a charm!
Switched over to the web intelligence app and set up our apaches to log to a second location using access_combined.
Works like a charm!
4.1.4 -> didn't end up getting it working..
What splunk version are you on?