All Apps and Add-ons

How to get APM Active Access Sessions?

rickehorne
New Member

I installed the app and was able to add servers and retrieve data. I found what looks to be a value for all of the connections to the F5, but I need to report on just the APM connections. Anyone have any idea where that can be found? Or perhaps some other way of retrieving? Our F5's are at version 14. The app only says it supports up to v12, but it seems to be working.
index=f5 STATISTIC_CLIENT_SIDE_CURRENT_CONNECTIONS statistics_types=STATISTIC_CLIENT_SIDE_CURRENT_CONNECTIONS "get_all_statistics.virtual_server.name"="/Common/myservername"
Returns what appears to be all connections for the server, the APM connections are about 1/2 of that.
{ [-]
time_stamp: 0
type: STATISTIC_CLIENT_SIDE_CURRENT_CONNECTIONS
value: { [-]
high: 0
low: 138
}
}

Thanks

0 Karma

walterk82
Path Finder

I don't think the iControl collection interface has been updated to support this data.

According to https://docs.splunk.com/Documentation/AddOns/released/F5BIGIP/Sourcetypes there is no f5:bigip:apm: definitions

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...

Detecting Remote Code Executions With the Splunk Threat Research Team

REGISTER NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If ...

Observability | Use Synthetic Monitoring for Website Metadata Verification

If you are on Splunk Observability Cloud, you may already have Synthetic Monitoringin your observability ...