Splunk AppDynamics

Alerts based on specific error code for a Business Transaction

Sahil_Gupta
Explorer

Hi Experts,

I need suggestions on how we can send email alerts for specific error codes for a Business Transaction.

BT and Error detection is working as expected, the question is only on alerting part.

Consider, BT1 have errors reported as 400,500,300,XXX.

The requirement is to get an email alert when 500 errors are more than 1 for BT1.

Any pointers will be helpful.

Regards,

Sahil 

Labels (3)
Tags (1)
0 Karma

Mark_Byrne
Path Finder

Hi Sahil,

If you have Analytics, then you could define an Analytics metric with a query similar to this:

SELECT count(*) FROM transactions WHERE transactionName = "BT1" and userExperience = "ERROR" and segments.errorList.errorCode = "500"

And then define your Health Rule based on this metric.

Mark

Sahil_Gupta
Explorer

Hi @Mark.Byrne 

Thanks for your suggestion, I missed mentioning that we do NOT have an analytics license.

Regards,

Sahil Gupta

0 Karma

Mark_Byrne
Path Finder

Hi Sahil,

I wondered if that was the case.

The only other thing I can think of, which might not be appropriate in your case, is to use the Error Detection configuration to ignore all HTTP errors apart from the 500.

This of course would mean you would lose visibility of the other errors codes, so probably isn't a good option.

Mark

0 Karma

Sahil_Gupta
Explorer

Hi Mark,

As you pointed right, we can ignore all HTTP errors apart from the 500 but it is not a good solution. At least if we have an option to ignore errors for specific business transaction(Instead of whole Application), that would have helped. 

Thanks Mark for your suggestions. Lets keep this discussion open to see if anyone else can contribute.

Regards,

Sahil Gupta

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...

After a whole week of being on call, you fell asleep on your keyboard, and you hit a sequence of buttons that ...