Splunk AppDynamics

Create Event Schema 500 Error

CommunityUser
Splunk Employee
Splunk Employee

Can you please explain why I cannot create an event schema? I get 500 Error (Exception Message chain)

Thanks

Atul

Create Event Schema Error

{

   "statusCode": 500,

   "code": "Unknown",

   "message": "Unknown server error: [null]",

   "developerMessage": "Exception Message Chain : \n"

}

Create Event Schema request

POST /events/schema/aa_paid_seats_v1 HTTP/1.1

Host: analytics.api.appdynamics.com

X-Events-API-AccountName: xxxxba6a

X-Events-API-Key: xxxx80d9

Content-type: application/vnd.appd.events+json;v=2

Cache-Control: no-cache

Postman-Token: 31dcec42-88ef-4650-5f16-3baf43a239ad

{ "schema" :

       {

       "id": "string",

       "sessionID": "string",

       "transaction_flow": "string",

       "transactionid": "string",

       "transactiontype": "string",

       "requestorid": "string",

       "recordlocator": "string",

       "pseudocity": "string",

       "applicationerror": {

               "errortype": "string",

               "errorcode": "integer",

               "errortext": "string"

               },

       "soapfault": {

               "faultcode":"integer",

               "faultstring":"string"

              },

       "timeout": {

               "timeouttype": "string"

               },

       "responsetime":"integer"

       }

}

Labels (1)
0 Karma

Gaurav_Soni
Contributor

Hi Atul,

If you are using an on-premise events service, can you reproduce the issue and attach the events service log?

Regards,

Gaurav Soni

0 Karma

Gaurav_Soni
Contributor

Nevermind, this looks to be communication with SAAS analytics.

let me reproduce this locally and get back.

Regards,

Gaurav Soni

0 Karma

Gaurav_Soni
Contributor

I don't think analytics supports to create nested structured schema yet. I tried the flat json which seems to work.

curl -X POST \
  https://analytics.api.appdynamics.com/events/schema/games1 \
  -H 'accept: application/vnd.appd.events+json;v=2' \
  -H 'cache-control: no-cache' \
  -H 'content-type: application/vnd.appd.events+json;v=2' \
  -H 'postman-token: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx' \
  -H 'x-events-api-accountname: eumanalytics_xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx' \
  -H 'x-events-api-key: ed22e5da-xxxx-xxxx-xxxx-xxxxxxxxxxxx' \
  -d '{ 
    "schema": {
       "id": "string",
       "sessionID": "string",
       "transaction_flow": "string",
       "transactionid": "string",
       "transactiontype": "string",
       "requestorid": "string",
       "recordlocator": "string",
       "pseudocity": "string"
       "responsetime":"integer"
    }
}'

CommunityUser
Splunk Employee
Splunk Employee

OK Thanks for confirming that only currently AppD supports only a flat schema; not a nested one.

0 Karma

Gaurav_Soni
Contributor

I will check with engg. team and get back.

0 Karma
Get Updates on the Splunk Community!

The OpenTelemetry Certified Associate (OTCA) Exam

What’s this OTCA exam? The Linux Foundation offers the OpenTelemetry Certified Associate (OTCA) credential to ...

From Manual to Agentic: Level Up Your SOC at Cisco Live

Welcome to the Era of the Agentic SOC   Are you tired of being a manual alert responder? The security ...

Splunk Classroom Chronicles: Training Tales and Testimonials (Episode 4)

Welcome back to Splunk Classroom Chronicles, our ongoing series where we shine a light on what really happens ...