Monitoring Splunk

Treat certain response codes as OK, in "Website Monitoring" app?

alexeig
Engager

(New to Splunk - please forgive rookie questions.)

The question is about Website Monitoring app's configuration.

It's somewhat similar to How to replace the response code value in a dashboard panel, however in my case I'd treat certain response codes (401, 503) as "OK" - not an error - for specific URLs. Possible?

Thanks!

Tags (1)
0 Karma

venky1544
Builder

quite a late response but i tried the below query which prints the response code in OK you need to edit for other response code

sourcetype="web_ping" website_monitoring_search_index| stats avg(total_time) as avg_response_time max(total_time) as max_response_time latest(response_code) as response_code latest(_time) as last_checked latest(title) as title latest(url) as url latest(total_time) as response_time range(total_time) as range min(total_time) as min by source|eval FinalStatus = if(response_code == 200, "OK", "Error")|table title FinalStatus last_checked | timesince(last_checked,last_checked)

0 Karma

sbattista09
Contributor
0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...