Splunk AppDynamics

iOS crash reports are not symbolicated fully

CommunityUser
Splunk Employee
Splunk Employee

We upload dSYM zip and are able to verify that UUIDs of our dSYMs are accepted.

E.g. for crash-symbol-file-query/dsym I see something like this:

... {"uploadTime":"12/22/2017 13:50:34","UUID":"CB337DD0-E73F-3FC2-9C4E-91A3C880B573"} ...

 

In a crash log I'd see this UUID for the binary image of our app:

 

... <cb337dd0e73f3fc29c4e91a3c880b573> ...

So they are matching.

dwarfdump of the dSYM also shows:

UUID: CB337DD0-E73F-3FC2-9C4E-91A3C880B573 (arm64) ...

However I can observe the following in the crash log.

1. Symbolicated field in Crash Snapshots screen shows "false" for all crash logs.

2. In the actual crash logs, OS symbols are symbolicated. E.g.

7   UIKit                          0x000000018a7e6a7c -[UIControl touchesEnded:withEvent:] + 572

2. Symbols of our own app are not symbolicated (binary image with UUID: CB337DD0-E73F-3FC2-9C4E-91A3C880B573)

3. Some symbols are symbolicated incorrectly. E.g. for one of our frameworks, base address + offset that have different offset values are always resolved to the same symbol, and that symbol does not make sense.

When I download the raw crash log from the controller and the dSYM zip from the build server - I am able to symbolicate the crash log locally on my mac, using Xcode's symbolicatecrash script.

Note that we include several frameworks so all dSYMs are zipped up together into a single zip file.

Please advise why AppDynamics controller is not able to symbolicate when it works fine locally.

Labels (1)
Tags (1)
0 Karma

Mohammed_Rayan
Contributor

Denis,

Can you let us know what's the exact version of your controller and the Mobile IOS Agent being used 

Regards,

Mohammed Rayan

0 Karma

CommunityUser
Splunk Employee
Splunk Employee

Hi Mohammed,

Our controller is Version 4.2.9.2, build 48.

Our agent is 4.3.3.0.

I also tried 4.4.0.675.

Thanks

Denis

0 Karma

CommunityUser
Splunk Employee
Splunk Employee

I have now also tried iOS Agent 4.2.15.0 - same results.

This is an example of symbols not making much sense. In the same stack trace (as viewed in the controller) we'd have something like:

...
0x0000000104a1d790 ADEumSetFullLogging + 15000
...
0x0000000104a1db10 ADEumSetFullLogging + 15896
...

When I download the crash log, replace the symbol back with a base address and symbolicate using Xcode's script I'd see something like:

...
0x0000000100bff1ec -[UIApplication+ 18088 (instrumentation) ADEumSendAction:to:from:forEvent:] + 316
...
0x0000000100bff5ac -[UIApplication+ 19048 (instrumentation) ADEumSendEvent:] + 896
...
0 Karma

Mohammed_Rayan
Contributor

Denis,

Can you attach the crash report from your controller and dsym list api output to check this further

Regards,

Mohammed Rayan

0 Karma

CommunityUser
Splunk Employee
Splunk Employee

Hi Mohammed,

Do you have an email I can send the details to?

Thanks

Denis

0 Karma
Get Updates on the Splunk Community!

Dashboards: Hiding charts while search is being executed and other uses for tokens

There are a couple of features of SimpleXML / Classic dashboards that can be used to enhance the user ...

Splunk Observability Cloud's AI Assistant in Action Series: Explaining Metrics and ...

This is the fourth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how ...

Brains, Bytes, and Boston: Learn from the Best at .conf25

When you think of Boston, you might picture colonial charm, world-class universities, or even the crack of a ...