All Apps and Add-ons

How to get APM Active Access Sessions?

rickehorne
New Member

I installed the app and was able to add servers and retrieve data. I found what looks to be a value for all of the connections to the F5, but I need to report on just the APM connections. Anyone have any idea where that can be found? Or perhaps some other way of retrieving? Our F5's are at version 14. The app only says it supports up to v12, but it seems to be working.
index=f5 STATISTIC_CLIENT_SIDE_CURRENT_CONNECTIONS statistics_types=STATISTIC_CLIENT_SIDE_CURRENT_CONNECTIONS "get_all_statistics.virtual_server.name"="/Common/myservername"
Returns what appears to be all connections for the server, the APM connections are about 1/2 of that.
{ [-]
time_stamp: 0
type: STATISTIC_CLIENT_SIDE_CURRENT_CONNECTIONS
value: { [-]
high: 0
low: 138
}
}

Thanks

0 Karma

walterk82
Path Finder

I don't think the iControl collection interface has been updated to support this data.

According to https://docs.splunk.com/Documentation/AddOns/released/F5BIGIP/Sourcetypes there is no f5:bigip:apm: definitions

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...