Hi all,
I have installed the Splunk App for Web Analytics. I'm using access_combined as a source. I have the right permissions to see the index and I can see data when I search in the app context for tag=web, BUT on the 'create pages' setup step, I don't get any results.
I DO see results when I run the 'Generate User Sessions' lookup.
And, if I run the query from the 'create pages' setup I get results too....
Any ideas?
Thanks in advance.
Hi mrgibbon
I suspect the site is configured wrong and the site field is not being applied to the source and host combination.
There is a new version of the app (1.4) which greatly enhances the setup process with visual cues (green check marks) if it is configured correctly. It also includes a troubleshooting section that details some steps to follow.
https://splunkbase.splunk.com/app/2699/
j