AppD Archive

Policy for custom event not firing

CommunityUser
Splunk Employee
Splunk Employee

We have built a Custom event that gets triggered when there is a deployment of the Java Application.

The event looks like this :

--post-data "summary=$release&comment=$APP_NAME&eventtype=CUSTOM&severity=INFO&tier=$TARGETS" --user xxx@customer1 --password xxx

$APP_NAME resolves to FIN

comment resolves to FIN1-R1-0-320

when I filter for this on the event page

eventtype=CUSTOM or summary= FIN-R1-0-320 or comment= FIN it does not find it.

But if I look at the transaction analysis page, it shows up as little blue flags ...

Also on the Dashboard, I also see it top tight as Custom event together wit hthe other health policy events etc ...

I can't understand why i cant search on the event.

I also cant get it to fire an action ( email ) when it gets triggered ...

0 Karma

Arun_Dasetty
Super Champion

Hi,

- Regarding the query on click on "Custom" link from tier/app dashboard events section the events of type are not automatically filtering issue, we see the automatic filter is working fine in controller ui version 4.0, Can you please let us know what is the controller UI version you are using here?

- Regarding creating search criteria on property, we see you are not providing properties and we see as per docs the properties are the values of key and value paid passed while creating event using "propertynames" and "propertyvalues"

refer "create a custom event" section and check parameter name propertynames and propertyvalues, https://docs.appdynamics.com/display/PRO40/Use+the+AppDynamics+REST+API#UsetheAppDynamicsRESTAPI-Cre...

Check if that information helps.

Regards,

Arun

0 Karma

Arun_Dasetty
Super Champion

Hi,

As it is customer type event, Can you please click "clear criteria" filter button and click search with time trend selected during the time where custom event type is generated using post request on the corresponding application and confirm if you could see event in events screen as shown in screenshot below:

image.png

Regarding other query "I also cant get it to fire an action ( email ) when it gets triggered ", Can you please provide screenshots of relevant rule config and screenshots depicting the problem for more clarity?

Regards,

Arun

0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk on November 6 at 11AM PT, and empower your SOC to reach new heights! Duration: ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...