Configuring Web Intelligence App

Is there a way to configure the Splunk Web Intelligence App to use our buckets and our way of converting user-agents from an access log (sourcetype=access_combined) to browser names ?

This is what browser names from the Web Intelligence App look like:

ie-9
ie-8
safari (no version here ?!?)
ff-3-win

An example or two access_combined entries:

 - "Mozilla/5.0 (Windows NT 5.1; rv:13.0) Gecko/20100101 Firefox/13.0.1"  
 - "MSIE 8.0; Windows NT 5.2; Trident/4.0"

I want the browser names to be based on the browser name extractions done by this python based parser instead.

https://github.com/tobie/ua-parser/tree/master/py/ua_parser

Or this one:

https://github.com/JustinAzoff/splunk-scripts/blob/master/ua2os.py

Can the Web intelligence app even be configured to leverage a python script (or any other script) ?

python

asked 26 Jul '12, 13:20

asarolkar
69●2●15
accept rate: 17%

edited 26 Jul '12, 17:33

Be the first one to answer this question!

toggle preview

Follow this question

Email:

RSS:

Answers

Answers + Comments

Markdown Basics

*italic* or _italic_
**bold** or __bold__
link:[text](http://url.com/ "Title")
image?![alt text](/path/img.jpg "Title")
numbered list: 1. Foo 2. Bar
to add a line break simply add two spaces to where you would like the new line to be.
basic HTML tags are also supported

learn more about Markdown

Tags:

python ×154

Asked: 26 Jul '12, 13:20

Seen: 511 times

Last updated: 26 Jul '12, 17:33

Configuring Web Intelligence App

Follow this question

Splunk Resources

Related questions