Splunk AppDynamics

How do I integrate SaaS AppD with IBM NetCool

CommunityUser
Splunk Employee
Splunk Employee

Hi,

How do I integrate SaaS AppD with IBM NetCool. I have currently setup Alert notification to NetCool. However, I want ot remove this method and trying to send the Alert to NetCool over HTTPS.

Please guide me to acheive this.

TIA!

Best Regards

Thuhin

Labels (3)
0 Karma

Marcus_Jones
Engager

Hello -

To integrate our SaaS AppD with Netcool, we created an Impact Policy that get alerts from the REST API. Use the Impact built-in functions GetHTTP, ConvertXMLToImpactObjects, and .NewEvent.

You will also need to make sure your Impact instance has access to the AppD Controller (DigiCert Certificate imported to your truststore for Impact Server and Proxy configured).

High-level, here are your steps:

//Get a cookie/login
Path = "/controller/auth?action=login";  
login = GetHTTP(HttpHost, HttpPort, Protocol, Path, ChannelKey, Method, AuthHandlerActionTreeName, FormParameters, FilesToSend, HeadersToSend, HttpProperties); 

//Get the list of applications

Path = "/controller/rest/applications/";  
xml = GetHTTP(HttpHost, HttpPort, Protocol, Path, ChannelKey, Method, AuthHandlerActionTreeName, FormParameters, FilesToSend, HeadersToSend, HttpProperties);

//Convert XML to Impact Objects
applicationList = ConvertXMLToImpactObjects(xml);

//Cycle through the applications for each alert

numOfApps = length(applicationList['applications'][0]['application']); 

//Get alerts from all applications

Path = "/controller/rest/applications/{apps from app list}/problems/healthrule-violations?time-range-type=BEFORE_NOW&duration-in-mins=10;

//Get XML to parse
xml GetHTTP(HttpHost, HttpPort, Protocol, Path, ChannelKey, Method, AuthHandlerActionTreeName, FormParameters, FilesToSend, HeadersToSend, HttpProperties);

//Convert XML to Impact Objects
convertedXml = ConvertXMLToImpactObjects(xml);

//Set new OMNIbus Event Reader 
Event = NewEvent("OMNIbusEventReader");
Event.EventReaderName = "OMNIbusEventReader";

//Pass XML to Event Objects

affectedEntityName = convertedXml['policy-violations'][0]['policy-violation'][y]['affectedEntityDefinition'][0]['name']; 
Event.Node = affectedEntityName;

  //Return event object to OMNIbus
ReturnEvent(Event);

CommunityUser
Splunk Employee
Splunk Employee

Mind you, mine is a SaaS AppDynamics setup.

0 Karma
Get Updates on the Splunk Community!

Developer Spotlight with Brett Adams

In our third Spotlight feature, we're excited to shine a light on Brett—a Splunk consultant, innovative ...

Index This | What can you do to make 55,555 equal 500?

April 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

Say goodbye to manually analyzing phishing and malware threats with Splunk Attack ...

In today’s evolving threat landscape, we understand you’re constantly bombarded with phishing and malware ...