I have setup webping app to monitor a web page and it's working fine, except for the option where i should enable index results - it index part of the page not all the page source.
if i show the source of my web page it show some
url = https://mysite.mydomain.net/accesslogin.action
timeout = 600
userAgent = Mozilla/4.0
indexMD5 = true
could it be that your webpage returns some strange characters which are handled in Splunk as line break and therefore your events are split in multiple events?
You can verify this by running the webmon script from the CLI like this:
$SPLUNK_HOME/bin/splunk cmd python $SPLUNK_HOME/etc/apps/PathToYourApp/bin/webmon.py
and verify the output.