The JDS AppDynamics Ingester Technology Add-on (TA) for was created to support use with Splunk Cloud as well as Splunk Enterprise and to provide the following features:
The add-on is currently only available from JDS Australia and is not generally available to Splunk users publicly. Contact JDS for more information.
The AppDynamics Ingestor TA is designed to take advantage of the Splunk Metric Store which is optimised for ingestion and retrieval of metrics. This provides for greater storage efficiency, significantly faster query times and allows you to take advantage of the Metrics Workspace. The Splunk Metrics Workspace provides a user interface that enables you to monitor and analyze metrics and other time series data without using SPL.
The TA provides a simple configuration page to configure applications and metric types without needing to understand the AppDynamics API or provide low level configuration.
The AppDynamics TA supports the following AppDynamics Metric types:
Metrics gathered from AppDynamics Application agents, such as:
Infrastructure Visibility (Server/Database) metrics
End-User Experience metrics
Business iQ
The JDS AppDynamics Ingestor TA can be deployed on a Splunk Heavy Forwarder for Splunk Enterprise users or Inputs Data Manager (IDM) for Splunk Cloud.
Only key Service Level Indicators (SLI) or Golden Signals are ingested into Splunk by this add-on to allow blending with other data sources for summary dashboards or to include KPIs or leading indicators in health calculations in Splunk IT Service Intelligence (ITSI). It is not intended to replicate all AppDynamics data into Splunk. Detailed troubleshooting, analysis and dashboarding should continue to be performed in AppDynamics.
The TA retrieves data from your AppDynamics Controller via the metric APIs. This may be an AppDynamics SaaS Controller or on-premise Controller.
There are 3 modular inputs that do this job on a schedule: * AppDynamics Application List * Periodically retrieves the list of applications available on enabled AppDynamics Controllers and stores their metadata in the Splunk KV store.
AppDynamics Metric List: Periodically retrieves metric metadata for each enabled application, targeting metrics specified in the metric filter config.
AppDynamics Metric Ingest: Periodically retrieves metric data for each metric that matches the enabled metric filters, pulling 1 minute data for the time period since the previous retrieval (up to max 2 hours)
This TA has been tested with Splunk Enterprise v8.1 and 8.2. It may work on 8.0 but is untested.
Requires Python 3.7 (part of Splunk 8.x)
Requires the Splunk KV Store to be enabled on the Heavy Forwarder, Splunk Cloud Inputs Data Manager (IDM) or Search Head that it is installed on, with REST API enabled
Requires one or more metric indexes to be available.
Requires a HTTP Event Collector (HEC) to be provisioned, and access from the TA to that HEC address/port open. If a default metric index isn't set for the HEC, then the desired index must be set in the TA configuration page.
Requires an Event Index to be available for internal diagnostic events (e.g. ingest rates, errors etc)
The TA must have network connectivity to your AppDynamics API(s) address/port. If you have ACLs or firewalls between your Splunk installation and your AppDynamics installation, these must be opened. Forward proxies are not currently supported.
Administrator privileges are required for a user to configure the TA on the instance (eg HF/IDM) the TA is deployed to.
Requires a user account or API Client account (preferred) to be created in AppDynamics, with read privileges for all applications and data types that are to be ingested. A user account must be local or LDAP. SAML accounts are not usable with AppDynamics APIs.
Has been tested with AppDynamics Controllers 21.x. Should work with Controllers 4.5.10 and above, but 4.5.x and 20.x are untested and some data types may not work as expected.
Currently does not explicitly support privately signed SSL certificates. You will need to ensure your AppDynamics API URL uses a publicly signed SSL certificate, or you will need to manually add the certificate to be trusted by Splunk (not possible for Splunk Cloud).
The following open source libraries are used in this TA in addition to libraries packaged with Splunk: * https://pypi.org/project/six/ * https://pypi.org/project/python-dateutil/1.4/ (includes a tar.gz package of timezone information)
This TA is produced by JDS Australia.
Website: https://www.jds.net.au
Contact: https://www.jds.net.au/contact-us/ or apmsales@jds.net.au
Ongoing support is available as part of a licensing agreement to use this add-on.
Initial private release. Includes these metric types:
- Metrics gathered from AppDynamics Application agents, such as:
- Overall App / Tier / Node performance metrics
- Business Transaction metrics
- Service Endpoints metrics
- Information Points metrics
- Remote Service metrics
- Database metrics (application-side)
- Infrastructure Visibility (Server/Database) metrics
- OS-level metrics such as CPU, Memory, Disk I/O, Network I/O
- Database Monitoring KPI metrics (database-side)
- Container metrics
- End-User Experience metrics
- Browser metrics
- Mobile metrics
- Synthetics monitoring metrics
- Business iQ
- Analytics Custom Metrics
As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.