Splunk AppDynamics

Applications within AppD went missing

CommunityUser
Splunk Employee
Splunk Employee

Hi Team,

Apologies if this questions is asked on the wrong section of the community. 

The scenario is that, we have onboarded an application few months ago into AppD, but currently when we search for the same app, it is no longer present in AppD. (In the applications tab) 

We use a SaaS controller and hence would like to know if there is any audit trail that we can check in order to determine Why/Who/How/When the application was removed from AppD. 

We would like to determine if it was something the AppD removed on its own owing to lack of data from the Machine/App agents or if someone had removed the application by mistake. 

Can someone kindly guide us on how to approach this ? 

Thanks & Regards,

Girish Gandrakota

Labels (3)

CommunityUser
Splunk Employee
Splunk Employee

Hi @Anonymous

To audit activities on the Controller, you can run a one-time scheduled report requesting audit data, and that will show if someone has deleted the application or not.

To do so, 

  1. Log in to the Controller.
  2. Navigate to Dashboards&Reports.
  3. Click Create Reports.
  4. In the Create Scheduled Report window, choose Controller Audit as the Report Type.
  5. Complete the rest of the steps as given in the Reports documentation.

Hope it helps. Let us know how it goes. Don't hesitate to update the thread if you are still unable to track the audit trail.

0 Karma
Get Updates on the Splunk Community!

Celebrating Fast Lane: 2025 Authorized Learning Partner of the Year

At .conf25, Splunk proudly recognized Fast Lane as the 2025 Authorized Learning Partner of the Year. This ...

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...