# Logs **URL:** https://community.dynatrace.com/c/platform/logs/90.md [Latest](https://community.dynatrace.com/latest.md) · [Categories](https://community.dynatrace.com/categories.md) · [Tags](https://community.dynatrace.com/tags.md) --- ## [📚🎥 Explore our self-service use case of problems detection with logs](https://community.dynatrace.com/t/explore-our-self-service-use-case-of-problems-detection-with-logs/48647)
**Author:** [@Gosia\_Murawska](https://community.dynatrace.com/u/Gosia_Murawska)\ **Replies:** 1\ **Last updated:** [September 30, 2025, 7:13pm UTC](https://community.dynatrace.com/t/explore-our-self-service-use-case-of-problems-detection-with-logs/48647 "2025-09-30T19:13:05Z")
Minimize the chance of human mistakes by automating the correlation of problem details. Is your website malfunctioning, leaving users frustrated and unable to complete their tasks due to persistent errors? Such an o… --- ## [➡️ Welcome to the Log Analytics forum!](https://community.dynatrace.com/t/welcome-to-the-log-analytics-forum/48599)
**Author:** [@MichalGebacki](https://community.dynatrace.com/u/MichalGebacki)\ **Replies:** 1\ **Last updated:** [September 30, 2025, 7:09pm UTC](https://community.dynatrace.com/t/welcome-to-the-log-analytics-forum/48599 "2025-09-30T19:09:13Z")
Hello, Dynatrace Community! We’re thrilled to launch the brand new forum wholly dedicated to the Log Analytics. It’s a space to ask questions, share valuable tips, and seek for the knowledge shared by the Dynatrace Log … --- ## [Sending logs from Vector to Dynatrace via Log Ingestion API](https://community.dynatrace.com/t/sending-logs-from-vector-to-dynatrace-via-log-ingestion-api/57116)
**Author:** [@ntanaka](https://community.dynatrace.com/u/ntanaka)\ **Replies:** 1\ **Last updated:** [October 9, 2026, 4:25am UTC](https://community.dynatrace.com/t/sending-logs-from-vector-to-dynatrace-via-log-ingestion-api/57116 "2026-10-09T04:25:04Z")
Hello Dynatrace Community, We are currently considering a migration from Fluentd to Vector for log collection on OpenShift. According to Red Hat, Fluentd is deprecated starting with Red Hat OpenShift Logging 5.5, and V… --- ## [Drop records after metric and Davis event creation in pipeline](https://community.dynatrace.com/t/drop-records-after-metric-and-davis-event-creation-in-pipeline/56909)
**Author:** [@suraj\_gupta3](https://community.dynatrace.com/u/suraj_gupta3)\ **Replies:** 2\ **Last updated:** [September 10, 2026, 8:39am UTC](https://community.dynatrace.com/t/drop-records-after-metric-and-davis-event-creation-in-pipeline/56909 "2026-09-10T08:39:36Z")
Hello, I am evaluating a log-processing approach in Dynatrace OpenPipeline to reduce log storage and licensing costs while preserving operational visibility. The idea is to first analyze incoming logs and generate the … --- ## [Logs app - Pinned filters disappear after some time](https://community.dynatrace.com/t/logs-app-pinned-filters-disappear-after-some-time/56858)
**Author:** [@kmahali](https://community.dynatrace.com/u/kmahali)\ **Replies:** 2\ **Last updated:** [September 8, 2026, 12:36pm UTC](https://community.dynatrace.com/t/logs-app-pinned-filters-disappear-after-some-time/56858 "2026-09-08T12:36:16Z")
Does the Pinned Filter on the search text have expiry period? Is there a way to configure that? My pinned filters keep disappearing. Thanks in advance. --- ## [How do we view and confirm our current Data Retention Period values?](https://community.dynatrace.com/t/how-do-we-view-and-confirm-our-current-data-retention-period-values/46623)
**Author:** [@ASE](https://community.dynatrace.com/u/ASE)\ **Replies:** 4\ **Last updated:** [September 7, 2026, 9:53am UTC](https://community.dynatrace.com/t/how-do-we-view-and-confirm-our-current-data-retention-period-values/46623 "2026-09-07T09:53:38Z")
I need a little clarification on this. Are any of these retention values configurable? The way this chart reads, only Log Management and Analytics is configurable. Is this correct? Are these retention values visible… --- ## [Log file size increased significantly due to the OneAgent Log Enrichment / Log Injection](https://community.dynatrace.com/t/log-file-size-increased-significantly-due-to-the-oneagent-log-enrichment-log-injection/56817)
**Author:** [@juanvelezH](https://community.dynatrace.com/u/juanvelezH)\ **Replies:** 1\ **Last updated:** [August 28, 2026, 8:29am UTC](https://community.dynatrace.com/t/log-file-size-increased-significantly-due-to-the-oneagent-log-enrichment-log-injection/56817 "2026-08-28T08:29:56Z")
Hi Everyone, We recently installed OneAgent in a Java application (Pharos) and noticed that the log file size increased significantly (a nohup.out file grew from 1GB to 2.5GB) due to the OneAgent Log Enrichment / Log In… --- ## [Log events equivalent in OpenPipeline](https://community.dynatrace.com/t/log-events-equivalent-in-openpipeline/54362)
**Author:** [@reshef](https://community.dynatrace.com/u/reshef)\ **Replies:** 5\ **Last updated:** [August 25, 2026, 6:55am UTC](https://community.dynatrace.com/t/log-events-equivalent-in-openpipeline/54362 "2026-08-25T06:55:35Z")
Hi, I’m in the process of migrating all logs configurations from the classic settings to OpenPipeline, and I noticed that the one thing that seems to be missing in OpenPieline is “Log Events”. As far as I understand, … --- ## [Log ingestion windows event viewer](https://community.dynatrace.com/t/log-ingestion-windows-event-viewer/56738)
**Author:** [@Berry](https://community.dynatrace.com/u/Berry)\ **Replies:** 4\ **Last updated:** [August 18, 2026, 9:37pm UTC](https://community.dynatrace.com/t/log-ingestion-windows-event-viewer/56738 "2026-08-18T21:37:42Z")
hi guys, just wondering if we could ingest everything under windows viewer that includes all the subfolder? i understand we need to specify the path, but there’s too many. can we have a wildcard that it will ingest eve… --- ## [Best practices for Log Management in Grail: What is your bucket and retention strategy?](https://community.dynatrace.com/t/best-practices-for-log-management-in-grail-what-is-your-bucket-and-retention-strategy/56736)
**Author:** [@Mateusbmo1](https://community.dynatrace.com/u/Mateusbmo1)\ **Replies:** 1\ **Last updated:** [August 18, 2026, 7:48am UTC](https://community.dynatrace.com/t/best-practices-for-log-management-in-grail-what-is-your-bucket-and-retention-strategy/56736 "2026-08-18T07:48:21Z")
Hi everyone, We are currently redesigning our Log Management architecture in Grail to optimize both query performance and storage costs. Historically, we kept raw logs for long periods, but we are now moving to a stric… --- ## [Unique dashboard for feedback](https://community.dynatrace.com/t/unique-dashboard-for-feedback/56611)
**Author:** [@NIKH](https://community.dynatrace.com/u/NIKH)\ **Replies:** 0\ **Last updated:** [July 31, 2026, 4:24pm UTC](https://community.dynatrace.com/t/unique-dashboard-for-feedback/56611 "2026-07-31T16:24:56Z")
@rum This is dashboard for feedback of rum { “metadata”: { “configurationVersions”: \[ 7 \], “clusterVersion”: “1.343.101.20260730-151834” }, “id”: “5ed0aefb-fd9c-4bfa-a97a-8cdee868620f”, “dashboardMetad… --- ## [Log ingestion using AWS Firelense sidecar with ECS Farget](https://community.dynatrace.com/t/log-ingestion-using-aws-firelense-sidecar-with-ecs-farget/51645)
**Author:** [@andrei-morozov](https://community.dynatrace.com/u/andrei-morozov)\ **Replies:** 3\ **Last updated:** [July 31, 2026, 1:41pm UTC](https://community.dynatrace.com/t/log-ingestion-using-aws-firelense-sidecar-with-ecs-farget/51645 "2026-07-31T13:41:12Z")
Hello, I’ve followed the guide AWS Fargate monitoring — Dynatrace Docs. I have an ECS service with two tasks, one the web server (node.js) the other is running fluentbit. The AWS Log driver is setup as firelens. This ens… --- ## [SNMP trap processing](https://community.dynatrace.com/t/snmp-trap-processing/55536)
**Author:** [@MichalSzekely](https://community.dynatrace.com/u/MichalSzekely)\ **Replies:** 3\ **Last updated:** [July 16, 2026, 8:53pm UTC](https://community.dynatrace.com/t/snmp-trap-processing/55536 "2026-07-16T20:53:06Z")
hello, I received a trap like this: { “event.type”: “LOG”, “content”: “SNMP trap (SNMPv2-SMI::experimental.94.0.4) reported from src:10.10.10.12\\n agent:10.10.10.12”, “status”: “NONE”, “timestamp”: “1775468179963”, … --- ## [How to direct logs to right bucket via openpipeline](https://community.dynatrace.com/t/how-to-direct-logs-to-right-bucket-via-openpipeline/56389)
**Author:** [@JannickDT\_CM](https://community.dynatrace.com/u/JannickDT_CM)\ **Replies:** 1\ **Last updated:** [July 9, 2026, 7:11am UTC](https://community.dynatrace.com/t/how-to-direct-logs-to-right-bucket-via-openpipeline/56389 "2026-07-09T07:11:17Z")
What is the best approach to direct my logs to the right bucket, making use of a openpipeline? Can anybody provide me more info/details how to do this? Thanks a lot --- ## [Gen3 Log Management – How to Filter Logs by Actual Hostname or Server IP?](https://community.dynatrace.com/t/gen3-log-management-how-to-filter-logs-by-actual-hostname-or-server-ip/56383)
**Author:** [@sagarhb](https://community.dynatrace.com/u/sagarhb)\ **Replies:** 0\ **Last updated:** [July 8, 2026, 7:36am UTC](https://community.dynatrace.com/t/gen3-log-management-how-to-filter-logs-by-actual-hostname-or-server-ip/56383 "2026-07-08T07:36:29Z")
Hi Team, We are currently using the Gen3 Log Management UI and have observed a difference compared to the Gen2 (Classic) experience. In the Gen2 UI, we were able to filter logs using the dt.entity.host field, which map… --- ## [Ease of log procurement in Dynatrace](https://community.dynatrace.com/t/ease-of-log-procurement-in-dynatrace/56092)
**Author:** [@VivekMalapaka](https://community.dynatrace.com/u/VivekMalapaka)\ **Replies:** 3\ **Last updated:** [June 25, 2026, 11:35pm UTC](https://community.dynatrace.com/t/ease-of-log-procurement-in-dynatrace/56092 "2026-06-25T23:35:16Z")
Hi Team, There should be a convenient feature for the user to search logs by adding filter pills. As of now the users should write queries in your language to procure the logs they desire. Can you provide a GUI for the… --- ## [Tuning Retention Period of Extension Logs](https://community.dynatrace.com/t/tuning-retention-period-of-extension-logs/56172)
**Author:** [@siavash1996](https://community.dynatrace.com/u/siavash1996)\ **Replies:** 5\ **Last updated:** [June 15, 2026, 2:31pm UTC](https://community.dynatrace.com/t/tuning-retention-period-of-extension-logs/56172 "2026-06-15T14:31:25Z")
With the introduction of Pipeline Groups and Ready-Made OpenPipeline pipelines for extensions, such as SQL Server, am I correct in understanding that we can no longer move logs to a separate bucket with a custom retentio… --- ## [Custom solution for default fields](https://community.dynatrace.com/t/custom-solution-for-default-fields/56177)
**Author:** [@anuj08\_jain](https://community.dynatrace.com/u/anuj08_jain)\ **Replies:** 1\ **Last updated:** [June 15, 2026, 6:03am UTC](https://community.dynatrace.com/t/custom-solution-for-default-fields/56177 "2026-06-15T06:03:26Z")
Hello Team, I am trying to setup new Dynatrace Env. and I would like to use my custom fields payload instead of content. So, whenever I ingest the data my logs should be shown in payload and I dont want to use content … --- ## [Chart and easy-search options in notebook app](https://community.dynatrace.com/t/chart-and-easy-search-options-in-notebook-app/56091)
**Author:** [@VivekMalapaka](https://community.dynatrace.com/u/VivekMalapaka)\ **Replies:** 3\ **Last updated:** [June 4, 2026, 12:03pm UTC](https://community.dynatrace.com/t/chart-and-easy-search-options-in-notebook-app/56091 "2026-06-04T12:03:37Z")
Hi Team, We have a timeseries chart option in “Logs” application as shown below: Why is such an option not provided in “Notebook”? I guess notebook has lots of features, but including this feature as well will prov… --- ## [Question regarding log entry levels](https://community.dynatrace.com/t/question-regarding-log-entry-levels/56087)
**Author:** [@Peter\_Lepsis](https://community.dynatrace.com/u/Peter_Lepsis)\ **Replies:** 1\ **Last updated:** [June 3, 2026, 12:25pm UTC](https://community.dynatrace.com/t/question-regarding-log-entry-levels/56087 "2026-06-03T12:25:19Z")
Dear all, I don’t know where or whom do I need to ask about this issue so I’m asking it here. Quite a few times I ran into the situation where the log entries which should be “WARN” or “error” appears only as info. An e… --- ## [How to turn on log enrichment while maintaining json format in .NET?](https://community.dynatrace.com/t/how-to-turn-on-log-enrichment-while-maintaining-json-format-in-net/55938)
**Author:** [@ShaoHungYu](https://community.dynatrace.com/u/ShaoHungYu)\ **Replies:** 0\ **Last updated:** [May 18, 2026, 11:21pm UTC](https://community.dynatrace.com/t/how-to-turn-on-log-enrichment-while-maintaining-json-format-in-net/55938 "2026-05-18T23:21:48Z")
We have one agent installed in our Azure .NET web app, in the app service console log, the result description is in perfect json format. I went to One Agent settings and turned these on .NET - Trace/span context enrich… --- ## [matchesPhrase not working as expected](https://community.dynatrace.com/t/matchesphrase-not-working-as-expected/55633)
**Author:** [@susmita\_k](https://community.dynatrace.com/u/susmita_k)\ **Replies:** 1\ **Last updated:** [April 20, 2026, 11:35pm UTC](https://community.dynatrace.com/t/matchesphrase-not-working-as-expected/55633 "2026-04-20T23:35:55Z")
I have a routing rule as matchesPhrase(aws.log\_group, “123456”) It picks up the log group with name /aws/lambda/test-123456-cit1-test1 but it does not pick up this one batch-job-123456-cit1-jd Any pointer why this is … --- ## [Early Access: Try Log Module Self-Monitoring Events and Share Your Feedback 🚀](https://community.dynatrace.com/t/early-access-try-log-module-self-monitoring-events-and-share-your-feedback/55598)
**Author:** [@TomekRybczynski](https://community.dynatrace.com/u/TomekRybczynski)\ **Replies:** 3\ **Last updated:** [April 16, 2026, 1:05pm UTC](https://community.dynatrace.com/t/early-access-try-log-module-self-monitoring-events-and-share-your-feedback/55598 "2026-04-16T13:05:56Z")
We’re excited to invite you to try the new Log Module Self-Monitoring Events feature, currently in Early Access! This capability gives you visibility into log collection health across all log modules in your environment—… --- ## [Centralized Security Rule Overrides at Tenant Level](https://community.dynatrace.com/t/centralized-security-rule-overrides-at-tenant-level/55549)
**Author:** [@zufarhanzakaria](https://community.dynatrace.com/u/zufarhanzakaria)\ **Replies:** 3\ **Last updated:** [April 15, 2026, 9:18am UTC](https://community.dynatrace.com/t/centralized-security-rule-overrides-at-tenant-level/55549 "2026-04-15T09:18:36Z")
Dynatrace currently supports overriding security rules through an override configuration file that must be deployed individually on each VM. Refer to Security rules — Dynatrace Docs While this approach works, it introdu… --- ## [Are you using Grail for log consolidation and what benefits do you see?](https://community.dynatrace.com/t/are-you-using-grail-for-log-consolidation-and-what-benefits-do-you-see/49774)
**Author:** [@RohitBisht](https://community.dynatrace.com/u/RohitBisht)\ **Replies:** 4\ **Last updated:** [April 7, 2026, 7:50am UTC](https://community.dynatrace.com/t/are-you-using-grail-for-log-consolidation-and-what-benefits-do-you-see/49774 "2026-04-07T07:50:33Z")
For logs, Grail has many benefits, what benefits have you seen or foresee using this. For example: 1. Cost savings 2. Single place to store logs 3. Use of AI for correlation/alerting 4. Faster UI 4. others --- ## [missing logs in some spans](https://community.dynatrace.com/t/missing-logs-in-some-spans/55399)
**Author:** [@irivas1](https://community.dynatrace.com/u/irivas1)\ **Replies:** 1\ **Last updated:** [March 30, 2026, 7:46am UTC](https://community.dynatrace.com/t/missing-logs-in-some-spans/55399 "2026-03-30T07:46:54Z")
Hi, I have some traces where some spans have logs, but others don’t. This issue occurs primarily in .NET applications. I have the log enrichment options enabled in the OneAgent features: I’ll include an example to … --- ## [Creating metric with multiple matchers](https://community.dynatrace.com/t/creating-metric-with-multiple-matchers/55376)
**Author:** [@Joe\_Kulesza](https://community.dynatrace.com/u/Joe_Kulesza)\ **Replies:** 2\ **Last updated:** [March 26, 2026, 4:24pm UTC](https://community.dynatrace.com/t/creating-metric-with-multiple-matchers/55376 "2026-03-26T16:24:04Z")
Hi Team, I am in the process of cleaning up some of our custom alerts and dashboards by converting things into metrics but wanted to see what the best practices are when there are multiple matchers for the query. An exa… --- ## [Dynamic link to Dynatrace logs](https://community.dynatrace.com/t/dynamic-link-to-dynatrace-logs/55317)
**Author:** [@Maine](https://community.dynatrace.com/u/Maine)\ **Replies:** 1\ **Last updated:** [March 23, 2026, 10:39am UTC](https://community.dynatrace.com/t/dynamic-link-to-dynatrace-logs/55317 "2026-03-23T10:39:56Z")
I would like to include a dynamic link to Dynatrace logs filtered by session\_id in my Davis event notification. How can I do this? --- ## [Enrich Fargate Logs with \`dt.entity.process\_group\`](https://community.dynatrace.com/t/enrich-fargate-logs-with-dt-entity-process-group/40086)
**Author:** [@eprogers](https://community.dynatrace.com/u/eprogers)\ **Replies:** 5\ **Last updated:** [March 22, 2026, 4:30pm UTC](https://community.dynatrace.com/t/enrich-fargate-logs-with-dt-entity-process-group/40086 "2026-03-22T16:30:54Z")
I’m trying to enrich my Fargate logs with the \`dt.entity.process\_group\`. The end goal is that I want my team to be able to view all logs related to a service. Here is a screenshot of the feature I’m trying to use: A… --- ## [Mapping of journald entries](https://community.dynatrace.com/t/mapping-of-journald-entries/52098)
**Author:** [@ronmacdonald](https://community.dynatrace.com/u/ronmacdonald)\ **Replies:** 2\ **Last updated:** [March 18, 2026, 1:11pm UTC](https://community.dynatrace.com/t/mapping-of-journald-entries/52098 "2026-03-18T13:11:34Z")
I enabled journald monitoring for our system logs on EC2 for our k8 cluster. Looking at raw log content, it appears some fields are mapped and others are missing. The support page mentions a few fields that it is mappi… [Next page](https://community.dynatrace.com/c/platform/logs/90.md?page=1)