Prerequisites
- An AppDynamics Controller (SaaS or on-premises) with the applications you want to monitor.
- An API Client created under your account, with its Client Name and Client Secret.
- Your Controller URL and account name.
Grant the API client a read-only role. CloudThinker only reads application health, metrics, violations, and events — it never modifies AppDynamics configuration.
Setup
Open the AppDynamics Controller
Sign in to your AppDynamics Controller as an administrator. Your Controller URL follows the format
https://<account>.saas.appdynamics.com for SaaS, or your on-premises host.Create an API Client
Go to Settings → Administration → API Clients and click Create:
- Client Name:
cloudthinker - Description:
Read-only access for CloudThinker agents - Roles: assign a read-only role with access to the applications you want CloudThinker to monitor
Find Your Account Name
Your account name appears under Settings → License or as the subdomain of your Controller URL (e.g.
myaccount in https://myaccount.saas.appdynamics.com).Add Connection in CloudThinker
Navigate to Connections → AppDynamics and enter:
- Controller URL: your Controller base URL
- Account Name: your AppDynamics account name
- Client Name: the API client name (e.g.
cloudthinker@myaccount) - Client Secret: the secret you copied
Connection Details
| Field | Description | Example |
|---|---|---|
| APPD_CONTROLLER_URL | Your AppDynamics Controller base URL | https://myaccount.saas.appdynamics.com |
| APPD_ACCOUNT_NAME | Your AppDynamics account name | myaccount |
| APPD_CLIENT_NAME | The API client name | cloudthinker@myaccount |
| APPD_CLIENT_SECRET | The API client secret | — |
All four fields are required together — AppDynamics OAuth2 client-credentials authentication needs the Controller URL, account, client name, and secret to obtain an access token.
Required Permissions
Assign the API client a read-only role with access to the applications CloudThinker should monitor. Read access covers applications, tiers, nodes, business transactions, metrics, health-rule violations, and events.Agent Capabilities
Once connected, agents have read access to your AppDynamics APM data.| Capability | Description |
|---|---|
| Discovery | Summarize the environment — applications, tiers, nodes, and recent health signals |
| Application Health | List applications and flag health-rule violations or degraded business transactions |
| Violation Triage | List and inspect active health-rule violations, ordered by severity |
| Metric Review | Pull response time, calls per minute, and error rate for applications and business transactions |
| Event Analysis | Retrieve recent error events and summarize top error types by affected tier |
Example Prompts
For large environments, scope requests to a named application and a short time window so the agent returns focused results.
Troubleshooting
401 or 403 Unauthorized
401 or 403 Unauthorized
Connection refused or timeout
Connection refused or timeout
The Controller URL is unreachable from CloudThinker. Verify the Controller URL is correct and accessible, and that on-premises Controllers allow inbound connections.
Account not found
Account not found
The account name doesn’t match the Controller. Check Settings → License or your Controller subdomain and update APPD_ACCOUNT_NAME.
No applications or metrics found
No applications or metrics found
The API client’s role has no access to the applications, or the account has no matching data. Confirm the role grants read access to the target applications, then retry with a known application name.
Large or noisy output
Large or noisy output
Unbounded application or metric queries return too much data. Scope requests to a named application and a short time window so results stay focused.
Security Best Practices
- Dedicated API client - Create a dedicated API client for CloudThinker rather than reusing an existing one
- Read-only role - Assign only a read-only role; keep configuration and admin permissions off the client
- Least privilege - Grant access only to the applications CloudThinker needs to monitor
- HTTPS only - Always use an HTTPS Controller URL
- Secret rotation - Rotate the client secret regularly
- Revoke when unused - Delete the API client in AppDynamics if you stop using the connection
Related
Datadog Connection
APM, metrics, and monitoring
SigNoz Connection
Traces, metrics, and logs in one place