AppD Archive

Policy for custom event not firing

CommunityUser
Splunk Employee
Splunk Employee

We have built a Custom event that gets triggered when there is a deployment of the Java Application.

The event looks like this :

--post-data "summary=$release&comment=$APP_NAME&eventtype=CUSTOM&severity=INFO&tier=$TARGETS" --user xxx@customer1 --password xxx

$APP_NAME resolves to FIN

comment resolves to FIN1-R1-0-320

when I filter for this on the event page

eventtype=CUSTOM or summary= FIN-R1-0-320 or comment= FIN it does not find it.

But if I look at the transaction analysis page, it shows up as little blue flags ...

Also on the Dashboard, I also see it top tight as Custom event together wit hthe other health policy events etc ...

I can't understand why i cant search on the event.

I also cant get it to fire an action ( email ) when it gets triggered ...

0 Karma

Arun_Dasetty
Super Champion

Hi,

- Regarding the query on click on "Custom" link from tier/app dashboard events section the events of type are not automatically filtering issue, we see the automatic filter is working fine in controller ui version 4.0, Can you please let us know what is the controller UI version you are using here?

- Regarding creating search criteria on property, we see you are not providing properties and we see as per docs the properties are the values of key and value paid passed while creating event using "propertynames" and "propertyvalues"

refer "create a custom event" section and check parameter name propertynames and propertyvalues, https://docs.appdynamics.com/display/PRO40/Use+the+AppDynamics+REST+API#UsetheAppDynamicsRESTAPI-Cre...

Check if that information helps.

Regards,

Arun

0 Karma

Arun_Dasetty
Super Champion

Hi,

As it is customer type event, Can you please click "clear criteria" filter button and click search with time trend selected during the time where custom event type is generated using post request on the corresponding application and confirm if you could see event in events screen as shown in screenshot below:

image.png

Regarding other query "I also cant get it to fire an action ( email ) when it gets triggered ", Can you please provide screenshots of relevant rule config and screenshots depicting the problem for more clarity?

Regards,

Arun

0 Karma
Get Updates on the Splunk Community!

Fall Into Learning with New Splunk Education Courses

Every month, Splunk Education releases new courses to help you branch out, strengthen your data science roots, ...

Super Optimize your Splunk Stats Searches: Unlocking the Power of tstats, TERM, and ...

By Martin Hettervik, Senior Consultant and Team Leader at Accelerate at Iver, Splunk MVPThe stats command is ...

How Splunk Observability Cloud Prevented a Major Payment Crisis in Minutes

Your bank's payment processing system is humming along during a busy afternoon, handling millions in hourly ...