Splunk AppDynamics

Custom Events Policy and Actions

Dean_Moses1
Engager

Good day,

I am having a problem with generating a custom event via a POST request that I am doing.

I suspect that the elements that I am using are not entirely correct though and just need some pointers on what to tweak so that I can get it to work.

POST URL:

https://appd.controller.urlXXX/controller/rest/applications/XXX/events?severity=ERROR&summary= Application Stopped_Test&eventtype=CUSTOM&customeventtype=D_Test&comment=Please_start_application”

The response indicates that the event was successfully created: “Successfully created the event id:6665520987”, but when I check in AppD under the events dashboard, I see zero events. However, when I do not specify the event type and custom event, I am able to view the custom event in AppD.

It seems that the “eventtype” and customeventtype properties are the problem, any Ideas?

Regards,

Dean

Labels (3)
0 Karma
1 Solution

Dean_Moses1
Engager

A good colleague of mine, @Mario.Morelli  reminded me that the Custom filter needs to be enabled. This will display all of the custom events, thanks to Mario:-)

So the POST request is indeed correct!

" https://vodacomsa-dev.saas.appdynamics.com/controller/rest/applications/D_testapp/events?severity=WA... Application Stopped_Test&eventtype=CUSTOM&customeventtype=D_testapp&comment=Please_start_application"

View solution in original post

Dean_Moses1
Engager

A good colleague of mine, @Mario.Morelli  reminded me that the Custom filter needs to be enabled. This will display all of the custom events, thanks to Mario:-)

So the POST request is indeed correct!

" https://vodacomsa-dev.saas.appdynamics.com/controller/rest/applications/D_testapp/events?severity=WA... Application Stopped_Test&eventtype=CUSTOM&customeventtype=D_testapp&comment=Please_start_application"

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Automated Threat Analysis: Available in ES Premier

Automated Threat Analysis: Centralize and Accelerate Phishing Investigations in Splunk Enterprise ...

What’s New in Splunk AI: Volume 02

Welcome to the second edition of “What’s New in Splunk AI” where we look at the latest and greatest updates, ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...