Friday, January 5, 2018

monitoring - how to monitor web app availability with splunk?

I've recently downloaded and installed a Splunk 4.0.4 Server Enterprise trial (running on Windows Server 2008 if that matters), and now I want to set it up to monitor a few web pages in addition to the logs I'm already watching with Splunk.



I installed the "Web Page Monitor" app from the Splunk website, but now I'm baffled about how to set it up to start monitoring some web pages.



I poked around the file system and found \Program Files\Splunk\etc\apps\webping\ which (according to the MANIFEST file) has the friendly name of "Web Page Monitor". (No idea why Splunk isn't showing the friendly name on the Manager/Apps page-- it lists "webping" instead.)




Ideally, I'd like to have it check a particular URL every minute, and send me an email if it returns anything other than a 200 status or takes longer than 10 seconds to return.



Any idea how to do this?



UPDATE: I know that Splunk's monitoring/alerting support is pretty limited (and I'm trying out other monitoring tools in parallel) but that said my monitoring/alerting needs are not complex. Using multiple management tools, even if each is best-of-breed for its task, comes with a cost-- so while I'm trying out Nagios, etc. I'd also like to understand what Splunk can do (even if it's limited compared with other tools), so I can make an informed decision about whether to run a separate monitoring tool or not.

No comments:

Post a Comment

linux - How to SSH to ec2 instance in VPC private subnet via NAT server

I have created a VPC in aws with a public subnet and a private subnet. The private subnet does not have direct access to external network. S...