Splunk AppDynamics

Regex for URL in Business Transaction

Kjell-Einar_Ofs
Engager

I want to define two separate BTs:

* BT-1:  URI Ends with:  hendelser/feed 

* BT-2:  URI matches Regex: hendelser\/[a-f0-9]+   (match for hexadecimal GUID)

My problem is that the Regex for BT-2 also consumes the URI for BT-1 which I definitely do not want, meaning that I cannot find a way to define a Regex that excludes the string "feed" when searching for a hexadecimal GUID.

I know some engines has support for Regex Conditionals which Appdynamics apparently don't support.  After spending too much time on this I wonder if some of you are more experienced than I am and could guide me on this matter?

Labels (1)
0 Karma

Peter_Holditch
Builder

The issue here is that "feed" is a valid hexadecimal number...

If you're sure that your application never needs to interpret 'feed' as anything other than the word feed, you should be able to manage this situation with rule priorities.

The higher priority rule should match "ends with hendelser/feed" and the lower priority one should be your regex match.

That way, exact feed matches will never hit the second rule.

The documentation shows you how to set rule priorites.

Warm regards,

Peter

Kjell-Einar_Ofs
Engager

Ok, thanks Peter. I'll try it out and will see in a couple of days if it gives the wanted effect.

Best regards,

Kjell-Einar

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...