If I wanted to continuesly monitor HTTP get request to a particular web server, how would I go about doing this?

[MiltonTheGreat]

So from what I know, I would have to add data to splunk. I know where to go to do this, but I am not sure what to put for http request to a server. I am not sure if I would need to create a lookup search for this or if it's already included in splunk by default.

[jkat54]

Typically you would start by installing a universal forwarder on your web server that you want to monitor. Then you would configure the forwarder to monitor the webserver logs and to forward them to your indexer. From there you could search the logs using your search head.

You’ll want to review the getting data in guides, understand your final objectives and do what is required to make that happen.

[jkat54]

You would need web server logs to begin with.

Or

You would need web proxy logs to begin with

Or

You would need a network sniffer log to begin with

Or

You could use Splunk Stream App/TA to create a network sniffer on individual forwarders and monitor their web activities.

Do you have any of the above?

Are you just looking for sample data for any of the above maybe?