Splunk Search

Splunk has built-in mbtiles server. Can this be used for mbtiles that we create ourselves?

wegscd
Contributor

I noticed that our splunk installs have a $SPLUNK_HOME/share/splunk/mbtiles/splunk-tiles.mbtiles file.

This makes me suspect that the webserver bundled in with Splunk has the ability to serve tiles. Has anyone seen this, or have any hints as to if this can be used for mbtiles that we create ourselves?

Tags (3)

wegscd
Contributor

Did a little digging. The provided mbtiles file provided the tiles used by a geostats map if you don't change the mapping.tilelayer.url. The provided file is accessed @

https://host:8000/en-US/splunkd/__raw/services/mbtiles/splunk-tiles/{z}/{x}/{y}

(may have the z-y-x order wrong there).

I laid another mbtiles file down alongside the splunk-tiles.mbtiles and tried to get to it using the same url, but changing the 'splunk-tiles' to the name of my mbtiles file. Got a 404. Will keep digging into it, but thought I'd post what I've found so far.

Right now I'm serving tiles up with tilestream, but if I can get Splunk to do it, it's one fewer piece of software to break on me...

abramble
Explorer

system/default/web.conf has an entry referring to it too. Though I don't know if it is possible to extend that definition to serve multiple tilesets.

[expose:mbtiles_splunk-tiles_ELEMENT_ELEMENT_ELEMENT]
pattern = mbtiles/splunk-tiles/*/*/*
0 Karma

wpreston
Motivator

From what I understand, you have to use a separate map server if you want to serve custom tiles. I received this answer from Splunk support around release 6.01 so things may have changed since then. The Simple XML Reference has an example using tiles from openstreetmap.org, but your own map tile server should work just as well:

<map>
   <option name="mapping.tileLayer.url">http://{s}.tile.openstreetmap.org/{z}/{x}/{y}.png</option>
   <option name="mapping.tileLayer.subdomains">[a,b,c]</option>
   <option name="mapping.tileLayer.maxZoom">18</option>
   <option name="mapping.tileLayer.attribution">
     Map data (c) 2012 OpenStreetMap contributors, CC-BY-SA.
   </option>
</map>
0 Karma

wegscd
Contributor

Thank you.

Can the splunk server serve the tiles from an .mbtiles file? I see an .mbtiles file in $SPLUNK_HOME/share/splunk/mbtiles/splunk-tiles.mbtiles, it must be there for a reason....

0 Karma
Get Updates on the Splunk Community!

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...