Splunk AppDynamics

Data collection and getter chain query

Sonu_Sunny
New Member

Scenario :123 [abc xyz  11111 ]

I want to create a getter chain to collect the data in the middle of an array (xyz) where abc and xyz are dynamic . Could anyone help me to get the right getter chain to capture data in analytics.

toString().split(123\\\ [).[1].xxx

Labels (3)
0 Karma

Morelz
Motivator

Hi Sonu

1. Can you advise if the value after xyz is always the same? In your example 11111

2. Can you advise if abc and xyz are always certain length long, e.g 3 characters, integers or does it vary?

Ciao

0 Karma

Sonu_Sunny
New Member

Hi, @Mario.Morelli 

All data is dynamic and length also will vary.

0 Karma

Morelz
Motivator

Hi Sonu

Is it possible to share a sample of a payload? Just replace sensitive information

Ciao

Get Updates on the Splunk Community!

Simplifying the Analyst Experience with Finding-based Detections

    Splunk invites you to an engaging Tech Talk focused on streamlining security operations with ...

[Puzzles] Solve, Learn, Repeat: Word Search

This challenge was first posted on Slack #puzzles channelThis puzzle is based on a letter grid containing ...

[Puzzles] Solve, Learn, Repeat: Advent of Code - Day 4

Advent of CodeIn order to participate in these challenges, you will need to register with the Advent of Code ...