Security

WebStats errors on every link?

mikebian
New Member

I am trying to use the WebStats app. I loaded some data from an access.log file into Splunk and installed WebStats. Then I launch the "webstats" app. When I try to use any of the menu items in the app, I get error messages. Here is a sampling of them:

  • Error in 'savedsearch' command: Unable to find saved search named 'P_webstats_1h_AverageTimePerPage_fromSummary'.
  • Error in 'SearchOperator:loadjob': Cannot find artifacts for savedsearch_ident 'admin:SA_PF_webstats:P_webstats_1h_scheduled_TopPages'.
  • Module SearchSelectLister_0_3_0: Could not find a saved search named "P_webstats_1d_scheduled_TopPages".
  • PARSER: Applying intentions failed Error in 'SearchParser': Could not find macro 'custom_pre_processing' that takes 0 arguments. Expecting stanza name 'custom_pre_processing'.

Am I missing something here?

I am using Splunk 4.3 on Windows XP.

Thanks

Mike

Tags (1)
0 Karma

mikebian
New Member

I figured this out. I am very new to Splunk and didn't reailze the way this worked. When you install the webstats.spl file, the readme file gets extracted on the head server here:

\Program Files\Splunk\etc\apps\webstats

Also, the required add ons get extracted here:

\Program Files\Splunk\etc\apps\webstats\appserver\addons

and these need to be installed also. Once they are installed, you will be able to see their readme files in similar directories on the server and complete the required setup steps.

So, it's kind of working for me now. Still having some data issues, but I'll work through that.

0 Karma

mikebian
New Member

When I view objects for the app, I see the following:

  • client_statistics_by_id
  • client_statistics_by_ip default
  • page_geomap
  • page_statistics_PagesOverAll
  • page_statistics_TopPages
  • path_statistics_NStepsTo
  • path_statistics_PrevNext

I didn't get any errors installing it. I did it diretly the Splunk head machine.

The documentation page references a readme and a supporting addon called SA_PF_webstatss, neither of which I can find. The download is webstats.spl, so I am not even sure where to look for a readme file.

Thanks

Mike

0 Karma

somesoni2
SplunkTrust
SplunkTrust

Seems like the app is not installed properly. Could you please verify if you can see listed objects in Splunk UI (under WebStats app)?

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...