Splunk App for Web Analytics: How to exclude images from a search, and how can I search what organization an audience is connecting from?

[kc5ods]

So, looking at audience, I can see where they're connecting from etc - is there any way to see what organization, say, stanford.edu, and sort by universities or .edu addresses?

Also, is there any way to exclude images and other filler files from a search and just include .htm/.html and .mp3/mp4 files, so I can quickly see which actual pages are most popular and not see that all the first-page images are the most popular things on my site? thanks.

[jbjerke_splunk]

Hi kc5ods

There is currently no way of extracting organizations from a URL or domain. This could be made possible using a lookup that you can create and attach to the source data. It should then be relatively easy to add a couple of panels that groups the traffic by this new field.

As for the exclusion of images and other files - This should already be part of the app? This is done using event types and by checking the "file" field for various extensions.

Can you double check that you have the field called "file" when doing this search:

tag=web

If not, perhaps you can tweak the "file" field extraction until you have this field?

j