Splunk AppDynamics

Custom Match Rule - BTs not availble

antonyahappa_Sa
Explorer

Hi,

I have written a custom match rule using regex and ran a live preview. It is picking the load and not masked by any transaction. But still it is not available under Business transaction list.

Any suggesstions pls.

Labels (1)
0 Karma
1 Solution

antonyahappa_Sa
Explorer

Yes. These are few possibilities.

Check in All other Traffic. If the transaction is masked then unmask it.

Other option is to run a live trail to identify the masked transaction.

If both doesn''t helps check whether the transaction lock down is enabled. If yes, you need to disable and see the traffic. But the problem here is all the new BTs will be loaded . You need to exclude the unwanted BTs and then lock the BT once the expected BTs are visible.

It takes time to remove the unwanted BT and sometimes hundreds of new BTs will be loaded if your application is big. So be careful when you try this.

View solution in original post

Lalitha_Mantha
New Member

Hi @antonyahappa.Santhanamarian,


I'm also having the same issue. Did you get any update or find a solution to the issue?

Thanks

Lalitha

0 Karma

antonyahappa_Sa
Explorer

Yes. These are few possibilities.

Check in All other Traffic. If the transaction is masked then unmask it.

Other option is to run a live trail to identify the masked transaction.

If both doesn''t helps check whether the transaction lock down is enabled. If yes, you need to disable and see the traffic. But the problem here is all the new BTs will be loaded . You need to exclude the unwanted BTs and then lock the BT once the expected BTs are visible.

It takes time to remove the unwanted BT and sometimes hundreds of new BTs will be loaded if your application is big. So be careful when you try this.

Get Updates on the Splunk Community!

Simplifying the Analyst Experience with Finding-based Detections

    Splunk invites you to an engaging Tech Talk focused on streamlining security operations with ...

[Puzzles] Solve, Learn, Repeat: Word Search

This challenge was first posted on Slack #puzzles channelThis puzzle is based on a letter grid containing ...

[Puzzles] Solve, Learn, Repeat: Advent of Code - Day 4

Advent of CodeIn order to participate in these challenges, you will need to register with the Advent of Code ...