Splunk Search

Splunk has built-in mbtiles server. Can this be used for mbtiles that we create ourselves?

wegscd
Contributor

I noticed that our splunk installs have a $SPLUNK_HOME/share/splunk/mbtiles/splunk-tiles.mbtiles file.

This makes me suspect that the webserver bundled in with Splunk has the ability to serve tiles. Has anyone seen this, or have any hints as to if this can be used for mbtiles that we create ourselves?

Tags (3)

wegscd
Contributor

Did a little digging. The provided mbtiles file provided the tiles used by a geostats map if you don't change the mapping.tilelayer.url. The provided file is accessed @

https://host:8000/en-US/splunkd/__raw/services/mbtiles/splunk-tiles/{z}/{x}/{y}

(may have the z-y-x order wrong there).

I laid another mbtiles file down alongside the splunk-tiles.mbtiles and tried to get to it using the same url, but changing the 'splunk-tiles' to the name of my mbtiles file. Got a 404. Will keep digging into it, but thought I'd post what I've found so far.

Right now I'm serving tiles up with tilestream, but if I can get Splunk to do it, it's one fewer piece of software to break on me...

abramble
Explorer

system/default/web.conf has an entry referring to it too. Though I don't know if it is possible to extend that definition to serve multiple tilesets.

[expose:mbtiles_splunk-tiles_ELEMENT_ELEMENT_ELEMENT]
pattern = mbtiles/splunk-tiles/*/*/*
0 Karma

wpreston
Motivator

From what I understand, you have to use a separate map server if you want to serve custom tiles. I received this answer from Splunk support around release 6.01 so things may have changed since then. The Simple XML Reference has an example using tiles from openstreetmap.org, but your own map tile server should work just as well:

<map>
   <option name="mapping.tileLayer.url">http://{s}.tile.openstreetmap.org/{z}/{x}/{y}.png</option>
   <option name="mapping.tileLayer.subdomains">[a,b,c]</option>
   <option name="mapping.tileLayer.maxZoom">18</option>
   <option name="mapping.tileLayer.attribution">
     Map data (c) 2012 OpenStreetMap contributors, CC-BY-SA.
   </option>
</map>
0 Karma

wegscd
Contributor

Thank you.

Can the splunk server serve the tiles from an .mbtiles file? I see an .mbtiles file in $SPLUNK_HOME/share/splunk/mbtiles/splunk-tiles.mbtiles, it must be there for a reason....

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Community Content Calendar, September edition

Welcome to another insightful post from our Community Content Calendar! We're thrilled to continue bringing ...

Splunkbase Unveils New App Listing Management Public Preview

Splunkbase Unveils New App Listing Management Public PreviewWe're thrilled to announce the public preview of ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...