Splunk AppDynamics

Applications within AppD went missing

CommunityUser
Splunk Employee
Splunk Employee

Hi Team,

Apologies if this questions is asked on the wrong section of the community. 

The scenario is that, we have onboarded an application few months ago into AppD, but currently when we search for the same app, it is no longer present in AppD. (In the applications tab) 

We use a SaaS controller and hence would like to know if there is any audit trail that we can check in order to determine Why/Who/How/When the application was removed from AppD. 

We would like to determine if it was something the AppD removed on its own owing to lack of data from the Machine/App agents or if someone had removed the application by mistake. 

Can someone kindly guide us on how to approach this ? 

Thanks & Regards,

Girish Gandrakota

Labels (3)

CommunityUser
Splunk Employee
Splunk Employee

Hi @Anonymous

To audit activities on the Controller, you can run a one-time scheduled report requesting audit data, and that will show if someone has deleted the application or not.

To do so, 

  1. Log in to the Controller.
  2. Navigate to Dashboards&Reports.
  3. Click Create Reports.
  4. In the Create Scheduled Report window, choose Controller Audit as the Report Type.
  5. Complete the rest of the steps as given in the Reports documentation.

Hope it helps. Let us know how it goes. Don't hesitate to update the thread if you are still unable to track the audit trail.

0 Karma
Get Updates on the Splunk Community!

Best Strategies to Optimize Observability Costs

 Join us on Tuesday, May 6, 2025, at 11 AM PDT / 2 PM EDT for an insightful session on optimizing ...

Fueling your curiosity with new Splunk ILT and eLearning courses

At Splunk Education, we’re driven by curiosity—both ours and yours! That’s why we’re committed to delivering ...

Splunk AI Assistant for SPL 1.1.0 | Now Personalized to Your Environment for Greater ...

Splunk AI Assistant for SPL has transformed how users interact with Splunk, making it easier than ever to ...