topic Alerts based on specific error code for a Business Transaction in Splunk AppDynamics

Alerts based on specific error code for a Business Transaction

Sahil_Gupta — Wed, 23 Jun 2021 06:50:38 GMT

Hi Experts,

I need suggestions on how we can send email alerts for specific error codes for a Business Transaction.

BT and Error detection is working as expected, the question is only on alerting part.

Consider, BT1 have errors reported as 400,500,300,XXX.

The requirement is to get an email alert when 500 errors are more than 1 for BT1.

Any pointers will be helpful.

Regards,

Sahil

Re: Alerts based on specific error code for a Business Transaction

Mark_Byrne — Wed, 23 Jun 2021 20:23:49 GMT

Hi Sahil,

If you have Analytics, then you could define an Analytics metric with a query similar to this:

SELECT count(*) FROM transactions WHERE transactionName = "BT1" and userExperience = "ERROR" and segments.errorList.errorCode = "500"

And then define your Health Rule based on this metric.

Mark

Re: Alerts based on specific error code for a Business Transaction

Sahil_Gupta — Sun, 27 Jun 2021 13:24:59 GMT

Hi @Mark.Byrne

Thanks for your suggestion, I missed mentioning that we do NOT have an analytics license.

Regards,

Sahil Gupta

Re: Alerts based on specific error code for a Business Transaction

Mark_Byrne — Mon, 28 Jun 2021 21:46:38 GMT

Hi Sahil,

I wondered if that was the case.

The only other thing I can think of, which might not be appropriate in your case, is to use the Error Detection configuration to ignore all HTTP errors apart from the 500.

This of course would mean you would lose visibility of the other errors codes, so probably isn't a good option.

Mark

Re: Alerts based on specific error code for a Business Transaction

Sahil_Gupta — Thu, 01 Jul 2021 16:01:38 GMT

Hi Mark,

As you pointed right, we can ignore all HTTP errors apart from the 500 but it is not a good solution. At least if we have an option to ignore errors for specific business transaction(Instead of whole Application), that would have helped.

Thanks Mark for your suggestions. Lets keep this discussion open to see if anyone else can contribute.

Regards,

Sahil Gupta