Getting Data In

How to monitor my local browser history in Splunk?


I have installed Splunk Enterprise free version on my personal PC. I want to track the URLs are visited from the browser in my Splunk dashboard. I tried to monitor the local App data directory (C:\Users\hp\AppData\Local\Google\Chrome\User Data\Default).

Still I am unable to get the URL details in my Splunk.

Thanks in advance

0 Karma

Splunk Employee
Splunk Employee

hi twh1,

The history file found at that path is a SQLite db file.

If you try and open that file in a text editor, you will see that it is not an readable text file, and as such, Splunk won't be able to handle it the way you would like by simply pointing a monitor at it.

It looks like there is an app on Splunkbase that claims to be able to allow you to index these files, though I have never tried it. It appears to leverage a python script and SQLite binary...which means a universal forwarder won't be able to do it without some customization as a UF doesn't ship with python.

I'll give it a try when I get the chance.

- MattyMo
0 Karma
Get Updates on the Splunk Community!

Introducing Ingest Actions: Filter, Mask, Route, Repeat

WATCH NOW Ingest Actions (IA) is the best new way to easily filter, mask and route your data in Splunk® ...

Splunk Forwarders and Forced Time Based Load Balancing

Splunk customers use universal forwarders to collect and send data to Splunk. A universal forwarder can send ...

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...