Splunk AppDynamics

Data collection and getter chain query

Sonu_Sunny
New Member

Scenario :123 [abc xyz  11111 ]

I want to create a getter chain to collect the data in the middle of an array (xyz) where abc and xyz are dynamic . Could anyone help me to get the right getter chain to capture data in analytics.

toString().split(123\\\ [).[1].xxx

Labels (3)
0 Karma

Morelz
Motivator

Hi Sonu

1. Can you advise if the value after xyz is always the same? In your example 11111

2. Can you advise if abc and xyz are always certain length long, e.g 3 characters, integers or does it vary?

Ciao

0 Karma

Sonu_Sunny
New Member

Hi, @Mario.Morelli 

All data is dynamic and length also will vary.

0 Karma

Morelz
Motivator

Hi Sonu

Is it possible to share a sample of a payload? Just replace sensitive information

Ciao

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Index This | What travels the world but is also stuck in place?

April 2026 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Discover New Use Cases: Unlock Greater Value from Your Existing Splunk Data

Realizing the full potential of your Splunk investment requires more than just understanding current usage; it ...

Continue Your Journey: Join Session 2 of the Data Management and Federation Bootcamp ...

As data volumes continue to grow and environments become more distributed, managing and optimizing data ...