About the default business transaction rule

Learn about the default rule, when to use it, and how to edit it or turn it off.

Splunk APM includes a default system-generated business transaction rule: all traces will be associated with business transactions that are identified by the initiating endpoints of those traces. The default rule creates a business transaction for every endpoint in your environment.

You can edit the default rule to only create business transactions based on specific URI segments in endpoint names or turn off the default rule.

When to use the default business transaction rule

If the initiating endpoint of a trace is granular enough to capture meaningful business transactions, for example with API calls, then the default rule is useful because it groups related traces by their initiating endpoint, which is different from other initiating endpoints. To influence which business transactions are discovered by the default rule, you can create endpoint rules to group related requests.

In systems where many traces have the same initiating endpoints, for example because there is a gateway in place, then you may want to extract the business transaction name from a service other than the initiating endpoint. In this case, you can create a business transaction rule that names the business transaction based on the service:endpoint or a specified tag value.

Edit the default business transaction rule

Complete the following steps to edit the default rule.

  1. From the Splunk Observability Cloud main menu, select Settings > APM business transactions.
  2. In the Business Transaction Rules table, locate the Default rule.
  3. Select the edit icon. The Configure rule tab displays. By default, Use full URI segments is enabled. This option creates a business transaction for every URI segment in your endpoint names.
  4. To edit the default rule to create business transactions for specific URI segments in endpoint names, select Use part of the URI and specify the URI segments.
  5. Select Update.

Turn off the default business transaction rule

How to turn off the default business transaction rule.

Complete the following steps to turn off the default rule.
  1. From the Splunk Observability Cloud main menu, select Settings > APM business transactions.
  2. In the Business Transaction Rules table, locate the Default rule. Select the toggle to turn off the rule.
  3. Select Save Changes.