Splunk Search

visited websites

nesslee
Observer

Hello, I would like to set up statistics on the visited websites by the users. I would like to find all users who visited online shopping websites.  However, i have to exclude all the links related to advertising.   So how can i exclude the logs related to advertising so that I can measure the real number of visits to these shopping websites?  If this is difficult to measure, another idea can be counting only the users who logged in their personal account in these shopping websites, how do I specify this? I hope my question is clear, I am very new in Splunk..

example:

sourcetype=MWGaccess3 urlc="Online Shopping" | top limit=15 user

Labels (3)
0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

can you send log sample?

r. Ismo

0 Karma

nesslee
Observer

Hello,

Sorry I was not very clear in my question.

When a user visits a website, it can make hundreds of separate requests related to advertising. So i want to exclude all these logs and keep only the logs with 'real visits' to urlc: online shopping.

To be able to measure that, maybe I can take only the events where user logged into his account. In which field(s) I can find this type of information?

with keywords in url?  Mtg?  Status? Mt? rule? Connect_protocol?  http_method?

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...

Skip the Awkward Silence: Have a .conf-ersation at .conf26

Picture this. You arrive at .conf26 already having your socializing and networking plans mapped out. No ...

Rethinking Zero Trust: From Product Purchases to Logical Control Evidence

Note: This post outlines a proposed architecture and serves as an interest check. If we secure commitments ...