Splunk Search

Splunk has built-in mbtiles server. Can this be used for mbtiles that we create ourselves?

wegscd
Contributor

I noticed that our splunk installs have a $SPLUNK_HOME/share/splunk/mbtiles/splunk-tiles.mbtiles file.

This makes me suspect that the webserver bundled in with Splunk has the ability to serve tiles. Has anyone seen this, or have any hints as to if this can be used for mbtiles that we create ourselves?

Tags (3)

wegscd
Contributor

Did a little digging. The provided mbtiles file provided the tiles used by a geostats map if you don't change the mapping.tilelayer.url. The provided file is accessed @

https://host:8000/en-US/splunkd/__raw/services/mbtiles/splunk-tiles/{z}/{x}/{y}

(may have the z-y-x order wrong there).

I laid another mbtiles file down alongside the splunk-tiles.mbtiles and tried to get to it using the same url, but changing the 'splunk-tiles' to the name of my mbtiles file. Got a 404. Will keep digging into it, but thought I'd post what I've found so far.

Right now I'm serving tiles up with tilestream, but if I can get Splunk to do it, it's one fewer piece of software to break on me...

abramble
Explorer

system/default/web.conf has an entry referring to it too. Though I don't know if it is possible to extend that definition to serve multiple tilesets.

[expose:mbtiles_splunk-tiles_ELEMENT_ELEMENT_ELEMENT]
pattern = mbtiles/splunk-tiles/*/*/*
0 Karma

wpreston
Motivator

From what I understand, you have to use a separate map server if you want to serve custom tiles. I received this answer from Splunk support around release 6.01 so things may have changed since then. The Simple XML Reference has an example using tiles from openstreetmap.org, but your own map tile server should work just as well:

<map>
   <option name="mapping.tileLayer.url">http://{s}.tile.openstreetmap.org/{z}/{x}/{y}.png</option>
   <option name="mapping.tileLayer.subdomains">[a,b,c]</option>
   <option name="mapping.tileLayer.maxZoom">18</option>
   <option name="mapping.tileLayer.attribution">
     Map data (c) 2012 OpenStreetMap contributors, CC-BY-SA.
   </option>
</map>
0 Karma

wegscd
Contributor

Thank you.

Can the splunk server serve the tiles from an .mbtiles file? I see an .mbtiles file in $SPLUNK_HOME/share/splunk/mbtiles/splunk-tiles.mbtiles, it must be there for a reason....

0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...