Cannot create ignore logged Error - Splunk Community

Splunk AppDynamics

Hi,

The application is logging the below as error but this is the known bug from the development. So to keep the BT health as good, suggested to ignore this error message.

com.xx.xx.xx.xxxx : Unable to sync user with IdentifyingName="admin": Username "admin" is reserved for built-in users

I am getting error when I add this error to ignore configuration such as, "Fields cannot contain HTML or special characters."

How can I add the complete message in it?

Hi Viji

Can you not use a subsection of that full error, example

is reserved for built-in users

or

Unable to sync user with IdentifyingName

Otherwise check with AppDynamics Support if there is a way to escape them or manage this

Ciao

Get Updates on the Splunk Community!

Prove Your Splunk Prowess at .conf25—No Prereqs Required!

Your Next Big Security Credential: No Prerequisites Needed We know you’ve got the skills, and now, earning the ...

Splunk Observability Cloud's AI Assistant in Action Series: Observability as Code

This is the sixth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Splunk Answers Content Calendar, July Edition I

Hello Community! Welcome to another month of Community Content Calendar series! For the month of July, we will ...