The Web section monitors requests to web servers.
- number of unique servers and clients
- number of successful and failed requests
- trends in successful and failed requests
- statistics by server response code
- trends by server response code
- trends in response volume
- event count trends by provider
- clients and servers with the highest traffic volume or request count
- event statistics broken down by client
- event statistics broken down by server
The section includes three dashboards.
The section uses the data source fields described below. Alias used: sm_cs_web_indexes.
| Field Name | Value |
|---|
event.kind | event |
event.category | email |
event.outcome | success | failure | unknown |
| Field Name | Value |
|---|
http.request.method | Request method. |
http.response.status_code | Server response code. |
http.response.body.bytes | Server response size in bytes. |
| Field Name | Value |
|---|
user.name | User specified in the request. |
Source of the request.
| Field Name | Value |
|---|
source.address | Source address of the request (name or IP address). |
source.ip | IP address of the request source. |
Destination server of the request.
| Field Name | Value |
|---|
destination.address | Address of the requested server (name or IP address). |
destination.ip | IP address of the requested server. |
destination.domain | Name (hostname or FQDN) of the requested server. |
| Field Name | Value |
|---|
url.original | Original address of the requested URL. |
url.path | Path of the requested URL. |
| Field Name | Value |
|---|
event.original | Original event text. |
user_agent.name | Name of the user's client software. |
user_agent.original | Original string with user's client software data. |
user_agent.os.name | Name of the OS of the device with the client software. |
Below is a table of dictionaries used by the section.
| Name | Fields | Description |
|---|
sm_cs_web_server_group_lookup | destination.address
server_group.name | Dictionary of web server groups. |