Splunk AppDynamics

How to display WCF operation name which is hidden by a custom detection rule

CommunityUser
Splunk Employee
Splunk Employee

Anybody knows how to find out what is the actual WCF operation name, when we have a custom detection rule which groups a bunch of operations together if they are a part of the same service?

For instance, let's say we have WCF service called appd. It has a bunch of operations called op1, op2... Automatic rule will create a single BT for each of the operations and name them like "appd.op1", "appd.op2" etc.

If we create a custom detection rule to include all of them in a single BT, we will end up with a single BT that will, say, have a name "appd operations".

Here comes the issue now. After this new, single BT is created, I am not able to again see the operation names. Cannot find that possibility. I would like to somehow display these op1, op2... and so on... names so I can check few things. Tried in snapshots, look everywhere, it looks like the only way to again fetch these operation names is to delete the custom rule and revert back to auto detection rule.

Any ideas?

Labels (1)
0 Karma
1 Solution

Morelz
Builder

Hi Bojan

Would it not be better to leave the Business Transaction as a single transaction, and then split out each operation under Service Endpoints?

That way if you are looking for specific operations, you can use Service Endpoints view, which will give you snapshots from within Business Truncations?

Otherwise you would just need to identify where in the Dotnet Code you can extract the operation name for a Data Collector

View solution in original post

Morelz
Builder

Hi Bojan

Would it not be better to leave the Business Transaction as a single transaction, and then split out each operation under Service Endpoints?

That way if you are looking for specific operations, you can use Service Endpoints view, which will give you snapshots from within Business Truncations?

Otherwise you would just need to identify where in the Dotnet Code you can extract the operation name for a Data Collector

CommunityUser
Splunk Employee
Splunk Employee

Yeah that makes sense indeed. If I don't have too many WCF operations (and I don't in my case) this would really work. Thanks a lot.

0 Karma
Get Updates on the Splunk Community!

Fueling your curiosity with new Splunk ILT and eLearning courses

At Splunk Education, we’re driven by curiosity—both ours and yours! That’s why we’re committed to delivering ...

Splunk AI Assistant for SPL 1.1.0 | Now Personalized to Your Environment for Greater ...

Splunk AI Assistant for SPL has transformed how users interact with Splunk, making it easier than ever to ...

Unleash Unified Security and Observability with Splunk Cloud Platform

     Now Available on Microsoft AzureOn Demand Now Step boldly into the AI revolution with enhanced security ...