Splunk AppDynamics

Data collection and getter chain query

Sonu_Sunny
New Member

Scenario :123 [abc xyz  11111 ]

I want to create a getter chain to collect the data in the middle of an array (xyz) where abc and xyz are dynamic . Could anyone help me to get the right getter chain to capture data in analytics.

toString().split(123\\\ [).[1].xxx

Labels (3)
0 Karma

Morelz
Motivator

Hi Sonu

1. Can you advise if the value after xyz is always the same? In your example 11111

2. Can you advise if abc and xyz are always certain length long, e.g 3 characters, integers or does it vary?

Ciao

0 Karma

Sonu_Sunny
New Member

Hi, @Mario.Morelli 

All data is dynamic and length also will vary.

0 Karma

Morelz
Motivator

Hi Sonu

Is it possible to share a sample of a payload? Just replace sensitive information

Ciao

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...

Design, Compete, Win: Submit Your Best Splunk Dashboards for a .conf26 Pass

Hello Splunkers,  We’re excited to kick off a Splunk Dashboard contest! We know that dashboards are a primary ...

May 2026 Splunk Expert Sessions: Security & Observability

Level Up Your Operations: May 2026 Splunk Expert Sessions Whether you are refining your security posture or ...