Splunk AppDynamics

List of Applications that were recently added

nvnbsibm
New Member

Hi We are looking to pull the list of Applications that got added today which are not part of APPD yesterday.

Is there any way we can pull it apart from controller Audit logs.

Labels (3)
Tags (3)
0 Karma

Hiroki_Ito
Contributor

Thank you for posting to the community.
If you are using an on-prem controller, you can query the application table in the controller database.
You can access the database by the following command:
"<controller_home>/bin/controller.sh login-db"

A query like below would give results with applications which were created after a specified time.
"select id, name, from_unixtime(created_on/1000) from application where created_on >= {Unix timestamp in milliseconds};"

If you are using SaaS, you may use the "Retrieve All Business Applications" API.

You can get the list of applications that are alive on a specified date.
By getting the list for yesterday and today and comparing them, you can get applications which were added today.
*Time-range-type may not be effective for certain environments depending on the setting. In that case, you may request the API daily and compare the results on daily basis to get new applications added on a certain day.

In addition, although it's not a list, you can see each application's created date from UI.
Application -> Actions -> Edit Application Properties
Attaching snippet for reference.

Best Regards,
Hiroki

image.png

Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk on November 6 at 11AM PT, and empower your SOC to reach new heights! Duration: ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...