<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Health Rule - Affected Entities in Splunk AppDynamics</title>
    <link>https://community.splunk.com/t5/Splunk-AppDynamics/Health-Rule-Affected-Entities/m-p/736766#M10067</link>
    <description>&lt;P&gt;Thanks - this is helpful&lt;/P&gt;</description>
    <pubDate>Thu, 07 Jan 2021 09:32:54 GMT</pubDate>
    <dc:creator>Daniel_Nash</dc:creator>
    <dc:date>2021-01-07T09:32:54Z</dc:date>
    <item>
      <title>Health Rule - Affected Entities</title>
      <link>https://community.splunk.com/t5/Splunk-AppDynamics/Health-Rule-Affected-Entities/m-p/736764#M10065</link>
      <description>&lt;P&gt;When setting Affected Entities for Health Rules there is an option to state:&lt;/P&gt;&lt;P&gt;"Business Transactions matching the following criteria"&lt;/P&gt;&lt;P&gt;I have used this to exclude certain business transactions and set it to&amp;nbsp;"Business Transactions matching the following criteria" NOT contains "_CatchAll"&lt;/P&gt;&lt;P&gt;I would like to exclude business transactions that have _CatchAll or GetCSS.aspx in the BT name - is this possible?&lt;/P&gt;&lt;P&gt;Can I simply set it to&amp;nbsp;"Business Transactions matching the following criteria" NOT contains "_CatchAll,GetCSS.aspx"?&lt;/P&gt;</description>
      <pubDate>Wed, 06 Jan 2021 16:02:01 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-AppDynamics/Health-Rule-Affected-Entities/m-p/736764#M10065</guid>
      <dc:creator>Daniel_Nash</dc:creator>
      <dc:date>2021-01-06T16:02:01Z</dc:date>
    </item>
    <item>
      <title>Re: Health Rule - Affected Entities</title>
      <link>https://community.splunk.com/t5/Splunk-AppDynamics/Health-Rule-Affected-Entities/m-p/736765#M10066</link>
      <description>&lt;P&gt;Hi&lt;/P&gt;

&lt;P&gt;As the health rule does not have the option to use the "in list" condition, you will have to revert to regex&lt;/P&gt;

&lt;P&gt;Just a simple test would look like this, that would match any BT name that does not have the following 2 words in the name&lt;/P&gt;
&lt;P&gt;^(?!.*(_CatchAll|GetCSS.aspx)).*$&lt;/P&gt;

&lt;P&gt;Not exactly sure how AppD would want the syntax and if it will work as above, however this piece works in normal regex&lt;/P&gt;

&lt;P&gt;Ciao&lt;/P&gt;</description>
      <pubDate>Thu, 07 Jan 2021 05:44:57 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-AppDynamics/Health-Rule-Affected-Entities/m-p/736765#M10066</guid>
      <dc:creator>Morelz</dc:creator>
      <dc:date>2021-01-07T05:44:57Z</dc:date>
    </item>
    <item>
      <title>Re: Health Rule - Affected Entities</title>
      <link>https://community.splunk.com/t5/Splunk-AppDynamics/Health-Rule-Affected-Entities/m-p/736766#M10067</link>
      <description>&lt;P&gt;Thanks - this is helpful&lt;/P&gt;</description>
      <pubDate>Thu, 07 Jan 2021 09:32:54 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-AppDynamics/Health-Rule-Affected-Entities/m-p/736766#M10067</guid>
      <dc:creator>Daniel_Nash</dc:creator>
      <dc:date>2021-01-07T09:32:54Z</dc:date>
    </item>
  </channel>
</rss>

