Splunk Apps » Website Monitoring

Add executive summary that shows sites that are currently down, up and with warnings.

Could use a search like this:

sourcetype="web_ping" `website_monitoring_search_index`
| fillnull response_code value="Connection failed" 
| eval response_code=if(response_code="", "Connection failed", response_code)
| eval response_code=if(timed_out == "True", "Connection timed out", response_code)
| fillnull has_expected_string value="" 
| stats avg(total_time) as avg_response_time max(total_time) as max_response_time latest(response_code) as response_code latest(has_expected_string) as has_expected_string latest(_time) as last_checked latest(total_time) as response_time by source
| eval response_time=if(has_expected_string=="false", 100000, response_time)
| eval warning_threshold = 1000
| eval status=case(response_time > `response_time_threshold`, "ERROR", response_time > warning_threshold, "WARNING", true(), "OK")
| stats count(source) by status