All Apps and Add-ons

Website Monitoring: How to configure with app with multiples proxies?

luisfernandez
Explorer

I don't know how to accomplish this configuration. I have an URL listen on port 80 but it is binding to 2 servers with the same port

Server1:8080
Server2:8080

Any idea on how to setup the $SPLUNK_HOME/etc/apps/website_monitoring/local/website_monitoring.conf file?

0 Karma

LukeMurphey
Champion

It depends on how the servers are binding to the same port.

The options I could see are:

1. The host is binding on different IP addresses
If this is the case, you should be able to setup an input for each IP address.

2. The web-servers are behind a reverse proxy and are using domain names to distinguish between both of them
In this case, you should be able to setup an input for each host name to has the inputs distinguish between each server. The app supports SNI and thus should work even if the sites use SSL.

3. The web-servers are behind a reverse proxy that is load-balancing
In this case, it may not be possible to have separate inputs that monitor both of the sites or to guarantee when both sites would be monitored (unless the reverse proxy has some way of allowing you specify which server to go to).

0 Karma

luisfernandez
Explorer

Yes, the 2 servers using the port 8080 are load balancing behind apache configuration in the port 80. So, I want to have a way to identify when one node is down.

Should I setup a proxy per node?

Thanks in advance

0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Wondering How to Build Resiliency in the Cloud?

IT leaders are choosing Splunk Cloud as an ideal cloud transformation platform to drive business resilience,  ...

Updated Data Management and AWS GDI Inventory in Splunk Observability

We’re making some changes to Data Management and Infrastructure Inventory for AWS. The Data Management page, ...