IIB Data integration between AppD and Splunk

[CommunityUser]

Hi Team,

I have been looking at documenation or references regarding AppD-Splunk integration.

Situation: AppD is deployed across all tiers of an application except IIB. We are trying to get visibility

into IIB(without an agent onbard). We do have Splunk logs across IIB. Also we do have AppD API that splunk pulls for anaysis.

Challenge:

We are wanting to integrate AppD and Splunk in to a one dashboard and able to capture enough info present performance of IIB in context.

1. Like to know whether AppD can import Splunk log files into AppD monitoring session and link in to Dashboard its dashboard plus able to create metrics. Thinking data resolution from 10min to 4 hours

2. We are finding it difficult to use AppD API with regards to interfacing raw data into splunk. 

Any Help assistence will be greatly appreciated.

Our Goal is to use a unified dashboard that contains IIB information.

[Peter_Holditch]

In addition to what Jonah mentioned, you can also write the AppDynamics BT GUID into log messages and then search for it in Splunk.  We even have a UI level integration to facilitate that.

Out of interest, what platform are you running IIB on?

[CommunityUser]

Hello, Adrian. We actually do have an agent for IIB on Linux, but if you are running another platform we do not have an agent. There are two things you can do with AppD, one is to configure IIB to allow the messages to pass through with our headers and we will correlate. We also have an IIB extension (https://www.appdynamics.com/community/exchange/extension/ibm-websphere-message-broker-monitoring-ext...) which uses APIs to collect the metrics from IIB and bring them into AppD. You can do things such as monitoring queue lengths and such, which are more operationally useful than logs. 

Unfortunately, there is no way to import data from Splunk into AppDynamics, we only send data the other way. AppDynamics also has log analytics capabilities where you can ingest the logs into AppD as well, but logs don't provide a lot of value for monitoring, they are much more useful for debugging purposes. 

Splunk has built an app to bring data in from AppDynamics, that should work fine using standard APIs. You can find it in Splunk Base.