How to determine App and Machine Agent up or down from (agent side logs) and alert through splunk
You can try the following from agent logs.
For Java Agents:(agent.*.log)
"INFO JavaAgent - Started AppDynamics Java Agent Successfully."
I was not able to find a stop message in agent logs for you, may be you should try to check your jvm sys out logs.
For Machine Agent: (machine-agent.log)
"INFO SystemAgent - Started AppDynamics Machine Agent Successfully."
"INFO SystemAgent - Machine Agent Stopped!"
You can try the following from agent logs.
For Java Agents:(agent.*.log)
"INFO JavaAgent - Started AppDynamics Java Agent Successfully."
I was not able to find a stop message in agent logs for you, may be you should try to check your jvm sys out logs.
For Machine Agent: (machine-agent.log)
"INFO SystemAgent - Started AppDynamics Machine Agent Successfully."
"INFO SystemAgent - Machine Agent Stopped!"