We'll. I would create a custom action. And parse all the arguments that get passed to the custom action. And then create the same kind of json struct/element as for the performance metrics. This might need to go into another index in Elastsic since the json is going to differ.
This bash snippet will get all the arguments into variables. Then you need to create your own json element and post it to Elastic.
#!/bin/sh
DATE=`date +%Y/%m/%d-%H:%M:%S`
HOME=/opt/app/appdynamics-controller/custom/actions/YOURACTION/
APP_NAME=`echo $1 | sed 's/"//g'`
APP_ID=`echo $2 | sed 's/"//g'`
PVN_ALERT_TIME=`echo $3 | sed 's/"//g'`
PRIORITY=`echo $4 | sed 's/"//g'`
SEVERITY=`echo $5 | sed 's/"//g'`
ACTION_NAME=`echo $6 | sed 's/"//g'`
HEALTH_RULE_NAME=`echo $7 | sed 's/"//g'`
POLICY_ID=`echo $8 | sed 's/"//g'`
PVN_TIME_PERIOD_IN_MINUTES=`echo $9 | sed 's/"//g'`
shift 9
AFFECTED_ENTITY_TYPE=`echo $1 | sed 's/"//g'`
AFFECTED_ENTITY_NAME=`echo $2 | sed 's/"//g'`
AFFECTED_ENTITY_ID=`echo $3 | sed 's/"//g'`
NUMBER_OF_EVALUATION_ENTITIES=`echo $4 | sed 's/"//g'`
shift 4
# LOOP ON 'NUMBER_OF_EVALUATION_ENTITIES'
if [ "$NUMBER_OF_EVALUATION_ENTITIES" -gt "0" ] ; then
i=1
while [ $i -le $NUMBER_OF_EVALUATION_ENTITIES ]
do
EVALUATION_ENTITY_TYPE[$i]=`echo $1 | sed 's/"//g'`
EVALUATION_ENTITY_NAME[$i]=`echo $2 | sed 's/"//g'`
EVALUATION_ENTITY_ID[$i]=`echo $3 | sed 's/"//g'`
NUMBER_OF_TRIGGERED_CONDITIONS_PER_EVALUATION_ENTITY[$i]=`echo $4 | sed 's/"//g'`
shift 4
# LOOP ON 'NUMBER_OF_TRIGGERED_CONDITIONS_PER_EVALUATION_ENTITY[$i]'
if [ "${NUMBER_OF_TRIGGERED_CONDITIONS_PER_EVALUATION_ENTITY[$i]}" -gt "0" ] ; then
n=1
while [ $n -le ${NUMBER_OF_TRIGGERED_CONDITIONS_PER_EVALUATION_ENTITY[$i]} ]
do
SCOPE_TYPE[$i,$n]=`echo $1 | sed 's/"//g'`
SCOPE_NAME[$i,$n]=`echo $2 | sed 's/"//g'`
SCOPE_ID[$i,$n]=`echo $3 | sed 's/"//g'`
CONDITION_NAME[$i,$n]=`echo $4 | sed 's/"//g'`
CONDITION_ID[$i,$n]=`echo $5 | sed 's/"//g'`
OPERATOR[$i,$n]=`echo $6 | sed 's/"//g'`
CONDITION_UNIT_TYPE[$i,$n]=`echo $7 | sed 's/"//g'`
CONDITION_UNIT_TYPE_CHK=`echo ${CONDITION_UNIT_TYPE[$i,$n]} | grep BASELINE`
if [ "$CONDITION_UNIT_TYPE_CHK" ] ; then
USE_DEFAULT_BASELINE[$i,$n]=`echo $8 | sed 's/"//g'`
BASELINE_NAME[$i,$n]=`echo $9 | sed 's/"//g'`
shift 9
BASELINE_ID[$i,$n]=`echo $1 | sed 's/"//g'`
THRESHOLD_VALUE[$i,$n]=`echo $2 | sed 's/"//g'`
OBSERVED_VALUE[$i,$n]=`echo $3 | sed 's/"//g'`
shift 3
else
THRESHOLD_VALUE[$i,$n]=`echo $8 | sed 's/"//g'`
OBSERVED_VALUE[$i,$n]=`echo $9 | sed 's/"//g'`
shift 9
fi
let n+=1
done
fi
let i+=1
done
fi
SUMMARY_MESSAGE=`echo $1 | sed 's/"//g'`
INCIDENT_ID=`echo $2 | sed 's/"//g'`
DEEP_LINK_URL=`echo $3 | sed 's/"//g'`
EVENT_TYPE=`echo 4 | sed 's/"//g'`
#Concatenate real DEEP_LINK_URL
DEEP_LINK_URL=$DEEP_LINK_URL$INCIDENT_ID
exit 0
