AppD Archive

Policy for custom event not firing

CommunityUser
Splunk Employee
Splunk Employee

We have built a Custom event that gets triggered when there is a deployment of the Java Application.

The event looks like this :

--post-data "summary=$release&comment=$APP_NAME&eventtype=CUSTOM&severity=INFO&tier=$TARGETS" --user xxx@customer1 --password xxx

$APP_NAME resolves to FIN

comment resolves to FIN1-R1-0-320

when I filter for this on the event page

eventtype=CUSTOM or summary= FIN-R1-0-320 or comment= FIN it does not find it.

But if I look at the transaction analysis page, it shows up as little blue flags ...

Also on the Dashboard, I also see it top tight as Custom event together wit hthe other health policy events etc ...

I can't understand why i cant search on the event.

I also cant get it to fire an action ( email ) when it gets triggered ...

0 Karma

Arun_Dasetty
Super Champion

Hi,

- Regarding the query on click on "Custom" link from tier/app dashboard events section the events of type are not automatically filtering issue, we see the automatic filter is working fine in controller ui version 4.0, Can you please let us know what is the controller UI version you are using here?

- Regarding creating search criteria on property, we see you are not providing properties and we see as per docs the properties are the values of key and value paid passed while creating event using "propertynames" and "propertyvalues"

refer "create a custom event" section and check parameter name propertynames and propertyvalues, https://docs.appdynamics.com/display/PRO40/Use+the+AppDynamics+REST+API#UsetheAppDynamicsRESTAPI-Cre...

Check if that information helps.

Regards,

Arun

0 Karma

Arun_Dasetty
Super Champion

Hi,

As it is customer type event, Can you please click "clear criteria" filter button and click search with time trend selected during the time where custom event type is generated using post request on the corresponding application and confirm if you could see event in events screen as shown in screenshot below:

image.png

Regarding other query "I also cant get it to fire an action ( email ) when it gets triggered ", Can you please provide screenshots of relevant rule config and screenshots depicting the problem for more clarity?

Regards,

Arun

0 Karma
Get Updates on the Splunk Community!

OpenTelemetry for Legacy Apps? Yes, You Can!

This article is a follow-up to my previous article posted on the OpenTelemetry Blog, "Your Critical Legacy App ...

UCC Framework: Discover Developer Toolkit for Building Technology Add-ons

The Next-Gen Toolkit for Splunk Technology Add-on Development The Universal Configuration Console (UCC) ...

.conf25 Community Recap

Hello Splunkers, And just like that, .conf25 is in the books! What an incredible few days — full of learning, ...