In the environment we have Splunk running, we have a large number of websites that come and go. I am looking for the most dynamic and hopefully automatic way of adding website monitors.
I've seen a couple questions in other threads about adding website monitors in bulk. I saw that this was added quite a few versions ago, but I can't seem to figure out how it's done. This seems rather manual when my webites change frequently.
I also saw that this can be done by updating inputs.conf. I think I might be able to script this file, but not sure Splunk would automatically update what's being monitored.
Does anyone currently run this app in a more dymanic environment? Have you found away to manage the change?
The app includes a bulk input creator. Look for the view in the nav named "Create Inputs".
That said, it does depend on what you mean by dynamic. You can create inputs programmatically by using Splunk's REST API or you could make the inputs in inputs.conf (perhaps in a separate app that you can easily make in a development environment and upload to production via Splunk's app install UI).