webping does't index all the content but part of it

[royimad]

Hello Guys,

I have setup webping app to monitor a web page and it's working fine, except for the option where i should enable index results - it index part of the page not all the page source.
if i show the source of my web page it show some

division in the page that doesn't exist on the index results on splunk. what could be the problem.?

Thanks

urls.conf

[PREPRODAPP]
url = https://mysite.mydomain.net/accesslogin.action
timeout = 600
userAgent = Mozilla/4.0
indexMD5 = true
indexResults= true

[MuS · Accepted solution]

Hi royimad,

could it be that your webpage returns some strange characters which are handled in Splunk as line break and therefore your events are split in multiple events?

You can verify this by running the webmon script from the CLI like this:

$SPLUNK_HOME/bin/splunk cmd python $SPLUNK_HOME/etc/apps/PathToYourApp/bin/webmon.py

and verify the output.

cheers, MuS

[royimad]

It works:)!... instead of using webping.py i used webmon.py

[royimad]

hello, the web page didn't split into several events