This is somewhat a recap of Parsing Apache Logs with Splunk for real user hits....
To isolate Page Views on www.mos-eisley.dk, we do a Humio query:
parser=apache | source = "/var/log/apache2/www.mos-eisley.dk-access.log" | (url="/display*" or url="/pages/viewpage*")
Gives:
As we can see, some hits are wrong, so we fine grade the Humio query (refer to Parsing Apache Logs with Splunk for real user hits....):
parser=apache | source = "/var/log/apache2/www.mos-eisley.dk-access.log"| (url="/display*" or url="/pages/viewpage*") and url != "/display/public/HealthCheckPage*" and useragent!="*bot*" and useragent!="*spider*" and useragent!="*facebookexternalhit*" and useragent!="*crawler*" and useragent!="*Datadog Agent*"
Dashboard:
https://cloud.humio.com/shared/dashboards?token=pk3rx5PhidaWMTHOjMUYUti8
Dashboard Code:
