Splunk AppDynamics

Applications within AppD went missing

CommunityUser
Splunk Employee
Splunk Employee

Hi Team,

Apologies if this questions is asked on the wrong section of the community. 

The scenario is that, we have onboarded an application few months ago into AppD, but currently when we search for the same app, it is no longer present in AppD. (In the applications tab) 

We use a SaaS controller and hence would like to know if there is any audit trail that we can check in order to determine Why/Who/How/When the application was removed from AppD. 

We would like to determine if it was something the AppD removed on its own owing to lack of data from the Machine/App agents or if someone had removed the application by mistake. 

Can someone kindly guide us on how to approach this ? 

Thanks & Regards,

Girish Gandrakota

Labels (3)

CommunityUser
Splunk Employee
Splunk Employee

Hi @Anonymous

To audit activities on the Controller, you can run a one-time scheduled report requesting audit data, and that will show if someone has deleted the application or not.

To do so, 

  1. Log in to the Controller.
  2. Navigate to Dashboards&Reports.
  3. Click Create Reports.
  4. In the Create Scheduled Report window, choose Controller Audit as the Report Type.
  5. Complete the rest of the steps as given in the Reports documentation.

Hope it helps. Let us know how it goes. Don't hesitate to update the thread if you are still unable to track the audit trail.

0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk on November 6 at 11AM PT, and empower your SOC to reach new heights! Duration: ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...