Splunk AppDynamics

How to display WCF operation name which is hidden by a custom detection rule

CommunityUser
Splunk Employee
Splunk Employee

Anybody knows how to find out what is the actual WCF operation name, when we have a custom detection rule which groups a bunch of operations together if they are a part of the same service?

For instance, let's say we have WCF service called appd. It has a bunch of operations called op1, op2... Automatic rule will create a single BT for each of the operations and name them like "appd.op1", "appd.op2" etc.

If we create a custom detection rule to include all of them in a single BT, we will end up with a single BT that will, say, have a name "appd operations".

Here comes the issue now. After this new, single BT is created, I am not able to again see the operation names. Cannot find that possibility. I would like to somehow display these op1, op2... and so on... names so I can check few things. Tried in snapshots, look everywhere, it looks like the only way to again fetch these operation names is to delete the custom rule and revert back to auto detection rule.

Any ideas?

Labels (1)
0 Karma
1 Solution

Morelz
Motivator

Hi Bojan

Would it not be better to leave the Business Transaction as a single transaction, and then split out each operation under Service Endpoints?

That way if you are looking for specific operations, you can use Service Endpoints view, which will give you snapshots from within Business Truncations?

Otherwise you would just need to identify where in the Dotnet Code you can extract the operation name for a Data Collector

View solution in original post

Morelz
Motivator

Hi Bojan

Would it not be better to leave the Business Transaction as a single transaction, and then split out each operation under Service Endpoints?

That way if you are looking for specific operations, you can use Service Endpoints view, which will give you snapshots from within Business Truncations?

Otherwise you would just need to identify where in the Dotnet Code you can extract the operation name for a Data Collector

CommunityUser
Splunk Employee
Splunk Employee

Yeah that makes sense indeed. If I don't have too many WCF operations (and I don't in my case) this would really work. Thanks a lot.

0 Karma
Get Updates on the Splunk Community!

Splunk at Cisco Live 2025: Learning, Innovation, and a Little Bit of Mr. Brightside

Pack your bags (and maybe your dancing shoes)—Cisco Live is heading to San Diego, June 8–12, 2025, and Splunk ...

Splunk App Dev Community Updates – What’s New and What’s Next

Welcome to your go-to roundup of everything happening in the Splunk App Dev Community! Whether you're building ...

The Latest Cisco Integrations With Splunk Platform!

Join us for an exciting tech talk where we’ll explore the latest integrations in Cisco + Splunk! We’ve ...
OSZAR »