Splunk Apps » Website Monitoring

I might employ a KV store lookup that allows people to declare the 400 codes that they want to be considered failures.

• macro
• CSV lookup (could have a controller which produces the appropriate file); this wouldn't replicate without a specific call though

As part of this, I ought to make this an alert.

[Website Performance Problem]
action.email.useNSSubject = 1
alert.suppress = 0
alert.track = 1
counttype = number of events
cron_schedule = */1 * * * *
dispatch.earliest_time = -5m
dispatch.latest_time = 0
display.general.type = statistics
display.page.search.tab = statistics
enableSched = 1
quantity = 0
relation = greater than
request.ui_dispatch_app = website_monitoring
request.ui_dispatch_view = search
search = sourcetype="web_ping" (`response_codes_to_alert_on` OR timed_out=True OR total_time>`response_time_threshold`) | fillnull response_code value="Connection failed" | eval response_code=if(timed_out == "True", "Connection timed out", response_code) | stats count as count max(total_time) as max_total_time by title url response_code | eval max_total_time=round(max_total_time, 2)." ms" 

Best UX would be:

• Have a link on the overview page to an alert editor
• The editor should allow users to specify:
  • which codes should be considered an error
  • what the threshold is for alerting
• Should link to the alerts page for editing (http://127.0.0.1:8000/en-US/app/website_monitoring/alert?s=%2FservicesNS%2Fnobody%2Fwebsite_monitoring%2Fsaved%2Fsearches%2FWebsite%2520Performance%2520Problem)

Some useful examples:

• https://github.com/LukeMurphey/splunk-simplexml-setup-example/blob/df230c951d48b69d33686207b2eb601bbf7f8a53/src/appserver/static/js/views/SetupView.js

• Handle saving response codes
• Handle errors
• Loading a custom entry
• Show message when done
• Add input validation
• Check permissions

Getting an error when either of the widgets are created.

• Has something to do with tokens?
  • Setting tokens to false doesn't change it
• Why does this not fail on other dashboards?
  • Insteon app does this in https://github.com/LukeMurphey/splunk-insteon/blob/master/src/appserver/static/js/views/AnnotateEventView.js
  • It blows up too

Error is here (promises is null):

                    var dfd = $.Deferred()
                      , inputs = this._getInputs();
                    if (inputs.length > 0) {
                        var promises = _(inputs).invoke("onInputReady");
                        $.when.apply($, promises).always(dfd.resolve)

The fix was to load an empty onInputReady():

response_code_input.onInputReady = function(){}
response_threshold_input.onInputReady = function(){}