Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- About LukeMurphey
LukeMurphey
Champion
Member since:
01-19-2011
08-26-2024
Community Statistics
| Posts | 895 |
| Solutions | 191 |
| Karma Given | 126 |
| Karma Received | 477 |
| Member Since | 01-19-2011 |
Activity Feed
- Got Karma for Re: Using Session Credentials in a Splunk React App. 08-25-2024 03:26 AM
- Posted Re: Using Session Credentials in a Splunk React App on Splunk Dev. 08-23-2024 09:33 AM
- Got Karma for Re: How to get the Audit for Lookup files modification using the Lookup File Editor App?. 03-25-2024 05:30 AM
- Got Karma for Re: File Metadata only indexing on Splunk Startup. 02-21-2024 03:35 PM
- Got Karma for Re: Universal Forwarder: How to install app and configure input.conf?. 11-01-2023 02:32 PM
- Got Karma for Re: How to show a custom icon for a single value module (such as a stoplight)?. 05-22-2023 01:42 AM
- Got Karma for Re: What is the distinction between "events" versus "results"?. 05-17-2023 11:26 AM
- Posted Re: No new input type as Google Spreadsheet after installing Google Import and Export App? on All Apps and Add-ons. 03-01-2023 10:21 AM
- Got Karma for Re: Is there an easy way to close out 150K+ incident events?. 01-13-2023 07:25 AM
- Got Karma for Re: How to install the Website Monitoring Splunk app ?,How to install the website monitoring app. 12-06-2022 02:24 AM
- Posted Re: Splunkbase Website Monitoring Configuration on Splunk Cloud Platform. 09-14-2022 08:28 AM
- Got Karma for Re: How do I clear the cache to see the changes after updating a Splunk application?. 09-06-2022 01:31 AM
- Got Karma for Re: Why can I not relaunch react component on Splunk App?. 06-23-2022 03:00 PM
- Posted Re: Why can I not relaunch react component on Splunk App? on Splunk Dev. 06-23-2022 02:42 PM
- Got Karma for Re: minimum required files for an app?. 04-19-2022 08:17 AM
- Posted Re: FTP Receiver with sftp protocol on All Apps and Add-ons. 04-05-2022 02:38 PM
- Got Karma for Re: Should the Splunk Common Information Model Add-on go onto indexers only, or should it be installed on forwarders and search heads too?. 11-17-2021 07:28 AM
- Got Karma for Re: How do I determine why a Correlation Search isn't creating a notable event when I expected one?. 11-05-2021 06:14 PM
- Got Karma for How do I determine why a Correlation Search isn't creating a notable event when I expected one?. 11-05-2021 06:14 PM
- Got Karma for Re: How do I clear the cache to see the changes after updating a Splunk application?. 09-28-2021 01:08 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 2 | |||
| 1 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 2 | |||
| 0 | |||
| 0 |
08-15-2016
02:47 PM
Thanks for the follow-up. I made a bug ticket and will be fixing that issue where spaces in the key isn't allowed (http://lukemurphey.net/issues/1410). I'll fix that soon.
Sorry about the extra headache.
... View more
10-11-2017
12:19 AM
FYI: I added forms authentication to the Website Input app. That app is more for extracting information that monitoring for outages but it could be used for determining if the site is up too (since no matches would mean something was wrong).
... View more
07-09-2016
12:24 PM
I need to add support within the web inputs app itself to support this. I opened a ticket for this here: http://lukemurphey.net/issues/1394. My plan is to support this in version 3.1.
Update:
Version 3.1 adds the ability for non-admins to make inputs. Just assign users the "edit_modinput_web_input" capability. You will likely want to give them the "list_inputs" capability too.
... View more
03-16-2017
03:44 PM
https://answers.splunk.com/answers/492137/after-installing-the-filedirectory-information-inp-2.html
This is still a problem, can you take a look please?
... View more
02-24-2018
06:48 PM
You need to specify the index in your search or add that index to your user's list of indexes searched by default.
... View more
04-22-2016
09:42 AM
A note regarding minimal roles: you should be able to use roles without admin/admin_all_objects if you add capabilities using the permissions edit page in ES (Configure > General > Permissions). That page will set some low-level permissions to allow non-admins to read and write to things such as KV store collections.
... View more
04-19-2016
10:37 AM
The search that you are using doesn't filter out results that are within the threshold. For alerting, you want a search that only returns results when a problem is identified (zero results when there are zero problems).
The app comes with a search named "website_performance_problems" which is intended for this type of alerting. I recommend using or cloning that one since it filters results unless they exceed the timeout or indicate a failure (like an problematic return code).
... View more
04-07-2016
06:48 AM
Makes sense. I had assumed this was a custom dashboard.
... View more
01-09-2016
03:17 AM
Hi,
Thanks for all your work on version 1.2.
I have upgraded to that version this morning and it works perfectly 🙂
It's really good to get the data I need from the work that you've done to web_input.py, rather than mine.
Thanks again,
Richard.
... View more
01-02-2016
09:21 PM
This is likely happening because xyz is not a valid domain and doesn't resolve via DNS.
... View more
01-11-2017
06:18 PM
i am not getting updates from rss to my splunk instance can u suggest me whole procedure?
Thank you.
... View more
11-17-2015
04:04 PM
Even though the splunk service account is already a local admin, I had to add permissions for the file_meta_data directory. For whatever reason the app install process does not grant it rights. Works now. Thanks for the guidance, Luke!
... View more
04-19-2016
10:27 AM
Could try seeing if there is a traceback in the logs? See http://lukemurphey.net/projects/splunk-website-monitoring/wiki/Troubleshooting searches that would reveal it. A traceback would make narrowing this down much easier.
... View more
11-11-2015
02:14 PM
1 Karma
This is bug (SOLNESS-7989 for reference). We already have it fixed in development and the fix will be available in a maintenance release.
... View more
12-03-2018
11:10 PM
This is fixed in version 1.4.2.
... View more
02-02-2017
02:50 PM
Your root cause is likely different. Could you be so kind to open a new answers post? That way we can isolate what the root cause is in your specific case.
... View more
04-30-2018
01:06 PM
That comma is very important . I encountered an issue where the commas were missing after "User Email"} :
{"field": "user_email", "label": "User Email"}\
this caused the Incident Review - Event Attributes to be hidden and the add new entry button to disappear as well. It was not until those changes were made that it all worked out.
{"field": "user_email", "label": "User Email"},\
... View more
03-04-2020
03:01 AM
@ppablo_splunk Hi, this is my second question posted, first one went through but this one is put on moderation, can you please help me as well-
https://answers.splunk.com/answers/807292/summary-index-sistats-not-working-with-xyseries.html
... View more
07-30-2015
06:00 AM
Thank You this has resolved my issue!!!
... View more
09-01-2015
06:53 AM
refer http://answers.splunk.com/answers/283816/how-to-load-javascript-css-in-splunk-to-build-a-da.html
... View more
01-11-2016
03:34 AM
Hi , how about the role of the user?
... View more
08-15-2018
12:12 PM
Tried Chrome, same results.
... View more
06-06-2019
05:17 AM
@LukeMurphey - Where can we get more information about this global variable $C?
... View more
07-06-2015
09:55 PM
That's strange. Somehow the JSON data that is used by the modular input to preserve state (to remember when it last ran). I can make this call more resilient which should help it to recover more gracefully. However, this may be the result from other issues on the host (such as overloading).
I'm am planning to fix this in version 1.1.3; I will be logging the work under this issue report.
*Update: *
I released version 1.1.2 which handles bad checkpoint data gracefully.
... View more
06-10-2015
09:03 AM
3 Karma
Here are directions on how to set this up.
Step 1: Splunk Configuration
You will need to configure Splunk to work with an email server. To set this up, go the Splunk Manager at Server settings » Email settings.
Step 2: Configuring the Search
The app includes a search named "website_performance_problems" that works well for email alerting. To configure it for email alerting, open the "website_performance_problems" search in the Manager (Manager » "Searches, reports, and alerts"). Click the checkbox next to "Send email" alert action to enable it and complete the information necessary to use the alert action.
Step 3: Customizing Response Time Threshold (optional)
You may want to change the threshold that is used to determine if a site has been down too long. To do so, edit the "response_time_threshold" macro. You can change the macro in the Manager by going to "Advanced search" » "Search macros" and editing the "response_time_threshold" macro.
Step 4: Filtering Out Sites (optional)
You may want not want to receive email notifications for some sites. To filter these sites out, add a where clause to the "website_performance_problems" search just after the first search part. Below is an example of a search using where clauses to filter out some sites:
sourcetype="web_ping" (response_code>=400 OR timed_out=True) OR (total_time>`response_time_threshold` NOT (title="LukeMurphey.net") ) | where NOT like(url,"%splunk.com%") | fillnull response_code value="Connection failed" | eval response_code=if(timed_out == "True", "Connection timed out", response_code) | stats count as count max(total_time) as max_total_time by title url response_code | eval max_total_time=round(max_total_time, 2)." ms"
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
08-26-2024
02:24 PM
|
Karma given to
