Splunk AppDynamics

Applications within AppD went missing

CommunityUser
Splunk Employee
Splunk Employee

Hi Team,

Apologies if this questions is asked on the wrong section of the community. 

The scenario is that, we have onboarded an application few months ago into AppD, but currently when we search for the same app, it is no longer present in AppD. (In the applications tab) 

We use a SaaS controller and hence would like to know if there is any audit trail that we can check in order to determine Why/Who/How/When the application was removed from AppD. 

We would like to determine if it was something the AppD removed on its own owing to lack of data from the Machine/App agents or if someone had removed the application by mistake. 

Can someone kindly guide us on how to approach this ? 

Thanks & Regards,

Girish Gandrakota

Labels (3)

CommunityUser
Splunk Employee
Splunk Employee

Hi @Anonymous

To audit activities on the Controller, you can run a one-time scheduled report requesting audit data, and that will show if someone has deleted the application or not.

To do so, 

  1. Log in to the Controller.
  2. Navigate to Dashboards&Reports.
  3. Click Create Reports.
  4. In the Create Scheduled Report window, choose Controller Audit as the Report Type.
  5. Complete the rest of the steps as given in the Reports documentation.

Hope it helps. Let us know how it goes. Don't hesitate to update the thread if you are still unable to track the audit trail.

0 Karma
Get Updates on the Splunk Community!

Splunk AI Assistant for SPL | Key Use Cases to Unlock the Power of SPL

Splunk AI Assistant for SPL | Key Use Cases to Unlock the Power of SPL  The Splunk AI Assistant for SPL ...

Buttercup Games: Further Dashboarding Techniques (Part 5)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...

Customers Increasingly Choose Splunk for Observability

For the second year in a row, Splunk was recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for ...