Splunk AppDynamics

Unable to query Events Api.

Justin_Pienaar
Engager

Hi there everyone.

I am struggling to get the Events Api to accept a query for some metrics I want to query.
I followed the instructions on https://docs.appdynamics.com/appd/21.x/21.6/en/extend-appdynamics/appdynamics-apis/analytics-events-... and have setup the postman request with the required fields.
I have made sure to give the api_key the correct permissions but I when querying the fra-ana controller I am hit with a 403. 

I cannot see why I am being hit with his error or find any documentation to help me debug it.

`My query looks like the following:
curl -X POST "http://fra-ana-api.saas.appdynamics.com/events/query"
-header "X-Events-API-AccountName: <global_account_name>" 
-header "X-Events-API-Key: <api_key>" 
-header "Content-Type: application/vnd.appd.events+text;v=2" 
-header "Accept: application/vnd.appd.events+json;v=2" 
-data "SELECT * FROM logs"


I have tried this command in postman and in Powershell both returning the same 403.

Labels (1)
Tags (2)
0 Karma
1 Solution

Justin_Pienaar
Engager

Figured out the issue.

It had to do with the permissions of the API keys.
I was so focused on the event service permissions, I never stop to realise that the query needed the permissions to access the logs.


View solution in original post

0 Karma

iamryan
Community Manager
Community Manager

Hi @Justin.Pienaar,

Thanks for following up and sharing the solution! I love to see it! 

0 Karma

Justin_Pienaar
Engager

Figured out the issue.

It had to do with the permissions of the API keys.
I was so focused on the event service permissions, I never stop to realise that the query needed the permissions to access the logs.


0 Karma
Get Updates on the Splunk Community!

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...