AppD Archive

Need to understand the 'Error/minute' metric in APP D

CommunityUser
Splunk Employee
Splunk Employee

Hi,

We have set up APP D for couple of services in our production environment. Now, we have a particular health rule variable defined as errosPerMinute and it's value is set up as

image.png

We want to understand -  1)Is it for all errors/minute within the application or is it for a particular service, where we are defining the health rule?

2) If it's for all errors, then how can we configure errors for a particular service?

Recently, we found that, A particular service (XX_XXXX XXXXcheck) is configured in the following way for critical condition -

image.png

And the expression:

image.png

We have only 4 errors on a particular day and the timing is different.

Service.Operation Outbound Time Inbound Time ID Response Code Date
XXXXXXX.Get 01:41:25 01:42:24 229375 500 03/02/2017
XXXXXXX.Get 01:42:24 01:43:23 229376 500 03/02/2017
XXXXXXX.Get 01:43:23 01:44:22 229377 500 03/02/2017
XXXXXXX.Get 01:44:22 01:45:21 229378 500 03/02/2017
XXXXXXX.Get 01:50:30 01:51:29 229406 500 03/02/2017

As per the expression, it should not fire the critical condition if it is only for XXXXXservice, but still the critical condition action was fired. Would you please help us understand it better.

Thank you. 

0 Karma

CommunityUser
Splunk Employee
Splunk Employee

I am curious, which version of controller are you using?

0 Karma

Saradhi_Pothara
Communicator

Hi Saptarsi,

1) It is on the service that the healh rule violation occured.

2) Could you check in the metric broswer the errors/min for that server and at the appserver level for the time at which the violation happened?

3) To test , you could try creating health rule  where in Overview select "Custom (Any Metrics), "Afftects" select "Application performance" and in the metric select errors/min for that particular service.

Regards,
Saradhi

0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...