Splunk AppDynamics

Applications within AppD went missing

CommunityUser
Splunk Employee
Splunk Employee

Hi Team,

Apologies if this questions is asked on the wrong section of the community. 

The scenario is that, we have onboarded an application few months ago into AppD, but currently when we search for the same app, it is no longer present in AppD. (In the applications tab) 

We use a SaaS controller and hence would like to know if there is any audit trail that we can check in order to determine Why/Who/How/When the application was removed from AppD. 

We would like to determine if it was something the AppD removed on its own owing to lack of data from the Machine/App agents or if someone had removed the application by mistake. 

Can someone kindly guide us on how to approach this ? 

Thanks & Regards,

Girish Gandrakota

Labels (3)

CommunityUser
Splunk Employee
Splunk Employee

Hi @Anonymous

To audit activities on the Controller, you can run a one-time scheduled report requesting audit data, and that will show if someone has deleted the application or not.

To do so, 

  1. Log in to the Controller.
  2. Navigate to Dashboards&Reports.
  3. Click Create Reports.
  4. In the Create Scheduled Report window, choose Controller Audit as the Report Type.
  5. Complete the rest of the steps as given in the Reports documentation.

Hope it helps. Let us know how it goes. Don't hesitate to update the thread if you are still unable to track the audit trail.

0 Karma
Get Updates on the Splunk Community!

Developer Spotlight with Brett Adams

In our third Spotlight feature, we're excited to shine a light on Brett—a Splunk consultant, innovative ...

Index This | What can you do to make 55,555 equal 500?

April 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

Say goodbye to manually analyzing phishing and malware threats with Splunk Attack ...

In today’s evolving threat landscape, we understand you’re constantly bombarded with phishing and malware ...