Splunk AppDynamics

How do I integrate SaaS AppD with IBM NetCool

CommunityUser
Splunk Employee
Splunk Employee

Hi,

How do I integrate SaaS AppD with IBM NetCool. I have currently setup Alert notification to NetCool. However, I want ot remove this method and trying to send the Alert to NetCool over HTTPS.

Please guide me to acheive this.

TIA!

Best Regards

Thuhin

Labels (3)
0 Karma

Marcus_Jones
Engager

Hello -

To integrate our SaaS AppD with Netcool, we created an Impact Policy that get alerts from the REST API. Use the Impact built-in functions GetHTTP, ConvertXMLToImpactObjects, and .NewEvent.

You will also need to make sure your Impact instance has access to the AppD Controller (DigiCert Certificate imported to your truststore for Impact Server and Proxy configured).

High-level, here are your steps:

//Get a cookie/login
Path = "/controller/auth?action=login";  
login = GetHTTP(HttpHost, HttpPort, Protocol, Path, ChannelKey, Method, AuthHandlerActionTreeName, FormParameters, FilesToSend, HeadersToSend, HttpProperties); 

//Get the list of applications

Path = "/controller/rest/applications/";  
xml = GetHTTP(HttpHost, HttpPort, Protocol, Path, ChannelKey, Method, AuthHandlerActionTreeName, FormParameters, FilesToSend, HeadersToSend, HttpProperties);

//Convert XML to Impact Objects
applicationList = ConvertXMLToImpactObjects(xml);

//Cycle through the applications for each alert

numOfApps = length(applicationList['applications'][0]['application']); 

//Get alerts from all applications

Path = "/controller/rest/applications/{apps from app list}/problems/healthrule-violations?time-range-type=BEFORE_NOW&duration-in-mins=10;

//Get XML to parse
xml GetHTTP(HttpHost, HttpPort, Protocol, Path, ChannelKey, Method, AuthHandlerActionTreeName, FormParameters, FilesToSend, HeadersToSend, HttpProperties);

//Convert XML to Impact Objects
convertedXml = ConvertXMLToImpactObjects(xml);

//Set new OMNIbus Event Reader 
Event = NewEvent("OMNIbusEventReader");
Event.EventReaderName = "OMNIbusEventReader";

//Pass XML to Event Objects

affectedEntityName = convertedXml['policy-violations'][0]['policy-violation'][y]['affectedEntityDefinition'][0]['name']; 
Event.Node = affectedEntityName;

  //Return event object to OMNIbus
ReturnEvent(Event);

CommunityUser
Splunk Employee
Splunk Employee

Mind you, mine is a SaaS AppDynamics setup.

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...