Splunk AppDynamics

Health Rule - Affected Entities

Daniel_Nash
Engager

When setting Affected Entities for Health Rules there is an option to state:

"Business Transactions matching the following criteria"

I have used this to exclude certain business transactions and set it to "Business Transactions matching the following criteria" NOT contains "_CatchAll"

I would like to exclude business transactions that have _CatchAll or GetCSS.aspx in the BT name - is this possible?

Can I simply set it to "Business Transactions matching the following criteria" NOT contains "_CatchAll,GetCSS.aspx"?

Labels (3)
0 Karma
1 Solution

Morelz
Motivator

Hi

As the health rule does not have the option to use the "in list" condition, you will have to revert to regex

Just a simple test would look like this, that would match any BT name that does not have the following 2 words in the name

^(?!.*(_CatchAll|GetCSS.aspx)).*$

Not exactly sure how AppD would want the syntax and if it will work as above, however this piece works in normal regex

Ciao

View solution in original post

Morelz
Motivator

Hi

As the health rule does not have the option to use the "in list" condition, you will have to revert to regex

Just a simple test would look like this, that would match any BT name that does not have the following 2 words in the name

^(?!.*(_CatchAll|GetCSS.aspx)).*$

Not exactly sure how AppD would want the syntax and if it will work as above, however this piece works in normal regex

Ciao

Daniel_Nash
Engager

Thanks - this is helpful

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Vibe-coding, AI, and Splunkcraft: Highlights from the .conf26 Builder Bar

If you stopped by the Builder Bar at .conf26, thank you! This year, we brought ...

Thanks for the Memories: .conf26 Took Learning to New Heights

Thank you, Splunk Community, for making .conf26 in Denver one for the books. From packed Splunk University ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...