Getting Data In
Highlighted

webping does't index all the content but part of it

Builder

Hello Guys,

I have setup webping app to monitor a web page and it's working fine, except for the option where i should enable index results - it index part of the page not all the page source.
if i show the source of my web page it show some

division in the page that doesn't exist on the index results on splunk. what could be the problem.?

Thanks

urls.conf

[PREPRODAPP]
url = https://mysite.mydomain.net/accesslogin.action
timeout = 600
userAgent = Mozilla/4.0
indexMD5 = true
indexResults= true

0 Karma
Highlighted

Re: webping does't index all the content but part of it

SplunkTrust
SplunkTrust

Hi royimad,

could it be that your webpage returns some strange characters which are handled in Splunk as line break and therefore your events are split in multiple events?

You can verify this by running the webmon script from the CLI like this:

$SPLUNK_HOME/bin/splunk cmd python $SPLUNK_HOME/etc/apps/PathToYourApp/bin/webmon.py

and verify the output.

cheers, MuS

View solution in original post

Highlighted

Re: webping does't index all the content but part of it

Builder

hello, the web page didn't split into several events

0 Karma
Highlighted

Re: webping does't index all the content but part of it

Builder

It works:)!... instead of using webping.py i used webmon.py

0 Karma
Speak Up for Splunk Careers!

We want to better understand the impact Splunk experience and expertise has has on individuals' careers, and help highlight the growing demand for Splunk skills.