Data collection and getter chain query - Splunk Community

Splunk AppDynamics

Scenario :123 [abc xyz 11111 ]

I want to create a getter chain to collect the data in the middle of an array (xyz) where abc and xyz are dynamic . Could anyone help me to get the right getter chain to capture data in analytics.

toString().split(123\\\ [).[1].xxx

Hi Sonu

1. Can you advise if the value after xyz is always the same? In your example 11111

2. Can you advise if abc and xyz are always certain length long, e.g 3 characters, integers or does it vary?

Ciao

Hi, @Mario.Morelli

All data is dynamic and length also will vary.

Hi Sonu

Is it possible to share a sample of a payload? Just replace sensitive information

Ciao

Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...