We have a web API hosted on IIS which is used to service a SPA and also used to provide data to IPhone/Android apps.
I want to filter the logs (maybe by user agent) so that i can see only the calls coming from the SPA running within browsers (including browsers on the mobile devices) and not any direct calls from the apps (both the SPA and the apps use the same URLs)
We forward all of our iis logs into splunk for analysis and so we have some really good searching and filtering capabilities. The problem is I'm not sure what to search/filter for.