Need a custom variable for split the variable output

Ashish_Saxena3 — Wed, 01 Feb 2023 09:43:14 GMT

Hello,

Please help if some has done this before,

I need custom variable to split the variable output for my applications (xyzabc.com [P], abcxyz.com [G] & xyz123.com [S])

Output should be:
Application=[P]
Application=[S]
Application=[G]
_______

Please refer the below payload which I am using :

[
{
"labels": {
"Message": "A health rule violation occurred for the application ${latestEvent.application.name}",
"Time_of_Occurrence": "${action.triggerTime}",
"source": "AppD",
"Application_Name": "${latestEvent.application.name}",
"Event_Name": "${latestEvent.displayName}",
"Event_Message" : "${latestEvent.eventMessage}",
},
"annotations":
{
"type": "image",
"src": "${latestEvent.severityImage.deepLink}",
"alt": "${latestEvent.severity}",
"type_link": "link",
"href": "${latestEvent.deepLink}",
"text": "View this transaction in AppDynamics",
"Event_Message" : "${latestEvent.eventMessage}"
}

}
]

Re: Need a custom variable for split the variable output

Morelz — Thu, 02 Feb 2023 08:00:01 GMT

Hi Ashish

It uses Apache Velocity as an intermediary translator through which variables get resolved. Anything that is supported in https://velocity.apache.org/

Examples below, you can use an if statement for what you require

Ciao

topic Need a custom variable for split the variable output in Splunk AppDynamics

Need a custom variable for split the variable output

Re: Need a custom variable for split the variable output