# Logs

**URL:** https://community.dynatrace.com/c/platform/logs/90.md?page=2

[Latest](https://community.dynatrace.com/latest.md) · [Categories](https://community.dynatrace.com/categories.md) · [Tags](https://community.dynatrace.com/tags.md)

**Page:** 3

---

## [Monitor PeopleSoft logs with OneAgent](https://community.dynatrace.com/t/monitor-peoplesoft-logs-with-oneagent/53292)

<div class="topic-metadata">

**Author:** [@anapaulasalas](https://community.dynatrace.com/u/anapaulasalas)\
**Replies:** 2\
**Last updated:** [September 12, 2025, 2:45am UTC](https://community.dynatrace.com/t/monitor-peoplesoft-logs-with-oneagent/53292 "2025-09-12T02:45:36Z")

</div>

Hello, I want to monitor my PeopleSoft logs but I can’t find documentation for it, I’m not sure if I need the Oracle extension or if a OneAgent can monitor those? Thank you

---

## [Split logs that are ingested via API](https://community.dynatrace.com/t/split-logs-that-are-ingested-via-api/52386)

<div class="topic-metadata">

**Author:** [@reshef](https://community.dynatrace.com/u/reshef)\
**Replies:** 2\
**Last updated:** [September 8, 2025, 10:37am UTC](https://community.dynatrace.com/t/split-logs-that-are-ingested-via-api/52386 "2025-09-08T10:37:15Z")

</div>

We recently set up log forwarding to Dynatrace Api via logstash. In logstash we can see these responses from Dynatrace Api: body=\>"{\\"success\\":{\\"code\\":200,\\"message\\":\\"Some events were limited. Following limits wer…

---

## [Exchange Admin Audit Logs](https://community.dynatrace.com/t/exchange-admin-audit-logs/46076)

<div class="topic-metadata">

**Author:** [@BShiver](https://community.dynatrace.com/u/BShiver)\
**Replies:** 1\
**Last updated:** [September 2, 2025, 12:41pm UTC](https://community.dynatrace.com/t/exchange-admin-audit-logs/46076 "2025-09-02T12:41:09Z")

</div>

I am looking for recommendations on how to ingest our Exchange server 2016 Admin Audit logs into Dynatrace. I have not seen any documentation around this specifically. These logs are stored in a hidden mailbox instead of…

---

## [Ingest CSV data to Dynatrace](https://community.dynatrace.com/t/ingest-csv-data-to-dynatrace/53124)

<div class="topic-metadata">

**Author:** [@anuj08\_jain](https://community.dynatrace.com/u/anuj08_jain)\
**Replies:** 4\
**Last updated:** [August 28, 2025, 1:33pm UTC](https://community.dynatrace.com/t/ingest-csv-data-to-dynatrace/53124 "2025-08-28T13:33:50Z")

</div>

Is their Any way we can ingest the CSV files in Dynatrace? I have CSV file test.csv: timestamp,host,process,pid,loglevel,message 2025-08-26 14:21:05,web01,sshd,32145,INFO,"Accepted password for custuser3 from 10.10.5.4…

---

## [Log volumes ingested by each host](https://community.dynatrace.com/t/log-volumes-ingested-by-each-host/53084)

<div class="topic-metadata">

**Author:** [@sannapa1](https://community.dynatrace.com/u/sannapa1)\
**Replies:** 2\
**Last updated:** [August 26, 2025, 8:30am UTC](https://community.dynatrace.com/t/log-volumes-ingested-by-each-host/53084 "2025-08-26T08:30:52Z")

</div>

I am trying to build a dashboard that has the details of log volumes in bytes per host. I tried looking for the field log.size, but that doesn’t contain any value when I am running the DQL. Can someone please help? I am …

---

## [Parsing JSON containing array list](https://community.dynatrace.com/t/parsing-json-containing-array-list/52993)

<div class="topic-metadata">

**Author:** [@satishpaidisett](https://community.dynatrace.com/u/satishpaidisett)\
**Replies:** 5\
**Last updated:** [August 21, 2025, 4:23pm UTC](https://community.dynatrace.com/t/parsing-json-containing-array-list/52993 "2025-08-21T16:23:39Z")

</div>

Hi Team, I am trying to parse json containing array list but having an issue in extracting fields. I have pasted two records here. Below is the sample content:- { “event”: { “header”: { “mod1”: “xxxx”, “mod2”: “yy…

---

## [NGINX logs enrichment whether Dynatrace is enabled or not](https://community.dynatrace.com/t/nginx-logs-enrichment-whether-dynatrace-is-enabled-or-not/40128)

<div class="topic-metadata">

**Author:** [@ahmad](https://community.dynatrace.com/u/ahmad)\
**Replies:** 7\
**Last updated:** [August 19, 2025, 9:12pm UTC](https://community.dynatrace.com/t/nginx-logs-enrichment-whether-dynatrace-is-enabled-or-not/40128 "2025-08-19T21:12:06Z")

</div>

Hello all, I’ve been following the article to enable Nginx logs enrichment and to include the DT in the Nginx logs however, I have Dynatrace implemented in one environment and it works fine but when I try to run Nginx o…

---

## [DPL (Classic Logs Processing) with "Unrecognized character escape"](https://community.dynatrace.com/t/dpl-classic-logs-processing-with-unrecognized-character-escape/52943)

<div class="topic-metadata">

**Author:** [@AntonioSousa](https://community.dynatrace.com/u/AntonioSousa)\
**Replies:** 6\
**Last updated:** [August 16, 2025, 8:42am UTC](https://community.dynatrace.com/t/dpl-classic-logs-processing-with-unrecognized-character-escape/52943 "2025-08-16T08:42:33Z")

</div>

In Classic Log processing, I’m trying to process content that has what seem to be nonexistent escape characters: I’m trying to extract “asousa” but with no success. I can get partial results, but I can’t even “Save c…

---

## [Log monitoring wildcards](https://community.dynatrace.com/t/log-monitoring-wildcards/52911)

<div class="topic-metadata">

**Author:** [@Agoyals](https://community.dynatrace.com/u/Agoyals)\
**Replies:** 4\
**Last updated:** [August 15, 2025, 6:07am UTC](https://community.dynatrace.com/t/log-monitoring-wildcards/52911 "2025-08-15T06:07:21Z")

</div>

Hi, I am new to Dynatrace. Looking to monitor some logs which present in multiple directory (multi depth). Trying to find a way where can define a single source so it can cover all the matching pattern logs recursively …

---

## [Time difference between Dynatrace and machine](https://community.dynatrace.com/t/time-difference-between-dynatrace-and-machine/51820)

<div class="topic-metadata">

**Author:** [@Hadeel\_Mahmoud](https://community.dynatrace.com/u/Hadeel_Mahmoud)\
**Replies:** 1\
**Last updated:** [August 1, 2025, 5:53pm UTC](https://community.dynatrace.com/t/time-difference-between-dynatrace-and-machine/51820 "2025-08-01T17:53:37Z")

</div>

we’re noticing a time discrepancy between Dynatrace and the machine logs. Dynatrace appears to be one hour behind. This seems to be related to the recent time change in Egypt, as the machine time is correctly set to Riya…

---

## [Log Classic Processing SNMP trap doubt](https://community.dynatrace.com/t/log-classic-processing-snmp-trap-doubt/52678)

<div class="topic-metadata">

**Author:** [@AntonioSousa](https://community.dynatrace.com/u/AntonioSousa)\
**Replies:** 0\
**Last updated:** [July 28, 2025, 7:03pm UTC](https://community.dynatrace.com/t/log-classic-processing-snmp-trap-doubt/52678 "2025-07-28T19:03:54Z")

</div>

When using Log Classic Processing, with SNMP traps, I want to create an attribute with the content of one of the following: CISCO-ENVMON-MIB::ciscoEnvMonSupplyState.1 CISCO-ENVMON-MIB::ciscoEnvMonSupplyState.2 I have …

---

## [Built-in log ingestion at Host Group and Host level](https://community.dynatrace.com/t/built-in-log-ingestion-at-host-group-and-host-level/52509)

<div class="topic-metadata">

**Author:** [@rdobbs](https://community.dynatrace.com/u/rdobbs)\
**Replies:** 4\
**Last updated:** [July 17, 2025, 1:27pm UTC](https://community.dynatrace.com/t/built-in-log-ingestion-at-host-group-and-host-level/52509 "2025-07-17T13:27:39Z")

</div>

Good morning, After doing a work session with our Product Specialist, there is a feature that we feel would be helpful for our platform. We see the Built-in default log ingestion features that are listed at the Environ…

---

## [Clarity needed around OpenPipeline Log Ingest Limits](https://community.dynatrace.com/t/clarity-needed-around-openpipeline-log-ingest-limits/52395)

<div class="topic-metadata">

**Author:** [@36Krazyfists](https://community.dynatrace.com/u/36Krazyfists)\
**Replies:** 1\
**Last updated:** [July 9, 2025, 1:36pm UTC](https://community.dynatrace.com/t/clarity-needed-around-openpipeline-log-ingest-limits/52395 "2025-07-09T13:36:38Z")

</div>

If you check out the Log Management and Analytics Default limits page here, you’ll see this table: What confuses me is, how can the Content size limit be the same as the Request size limit? A single request can have…

---

## [Log Monitoring v2 - Multi Line Log Entries](https://community.dynatrace.com/t/log-monitoring-v2-multi-line-log-entries/33864)

<div class="topic-metadata">

**Author:** [@mathias\_indermu](https://community.dynatrace.com/u/mathias_indermu)\
**Replies:** 7\
**Last updated:** [July 9, 2025, 8:13am UTC](https://community.dynatrace.com/t/log-monitoring-v2-multi-line-log-entries/33864 "2025-07-09T08:13:32Z")

</div>

I just switched environment to log monitoring v2, and I was looking forward to doing it for a long time. Even though log-monitoring might not be the stronghold of an APM, it still is an enormously important part of appli…

---

## [A call for collaboration!  Windows Security Logs Parsing](https://community.dynatrace.com/t/a-call-for-collaboration-windows-security-logs-parsing/52341)

<div class="topic-metadata">

**Author:** [@36Krazyfists](https://community.dynatrace.com/u/36Krazyfists)\
**Replies:** 0\
**Last updated:** [July 3, 2025, 3:19pm UTC](https://community.dynatrace.com/t/a-call-for-collaboration-windows-security-logs-parsing/52341 "2025-07-03T15:19:58Z")

</div>

So, we need to start parsing Windows Security logs and, boy oh boy, are they all over the place… Since Microsoft doesn’t seem to stick with dedicated field names and log formats between the various event types, this is …

---

## [Logs Not Captured After Enabling OneAgent for .NET Trace/Span Context Enrichment and process restart](https://community.dynatrace.com/t/logs-not-captured-after-enabling-oneagent-for-net-trace-span-context-enrichment-and-process-restart/52313)

<div class="topic-metadata">

**Author:** [@prangya](https://community.dynatrace.com/u/prangya)\
**Replies:** 6\
**Last updated:** [July 3, 2025, 12:30pm UTC](https://community.dynatrace.com/t/logs-not-captured-after-enabling-oneagent-for-net-trace-span-context-enrichment-and-process-restart/52313 "2025-07-03T12:30:59Z")

</div>

Hi Teams , one critical condition we are facing after enabling the the logs for .NET application and also taking restart of process also we are not able to capture generated business logs for the application . This iss…

---

## [Log query and usage costs](https://community.dynatrace.com/t/log-query-and-usage-costs/51816)

<div class="topic-metadata">

**Author:** [@MichalBojko](https://community.dynatrace.com/u/MichalBojko)\
**Replies:** 2\
**Last updated:** [June 30, 2025, 8:10am UTC](https://community.dynatrace.com/t/log-query-and-usage-costs/51816 "2025-06-30T08:10:56Z")

</div>

Hi, I am getting familiar with OOTS Log Query and Usage Costs dashboard and when changing the timeframe to 2hours I usually get strange results in the “Top 10 queries by volume”. Some of the entries are “null”. What is …

---

## [Content section is missing in Logs](https://community.dynatrace.com/t/content-section-is-missing-in-logs/52221)

<div class="topic-metadata">

**Author:** [@vijayalakshmik](https://community.dynatrace.com/u/vijayalakshmik)\
**Replies:** 4\
**Last updated:** [June 25, 2025, 5:00pm UTC](https://community.dynatrace.com/t/content-section-is-missing-in-logs/52221 "2025-06-25T17:00:21Z")

</div>

Content section is missing in Logs which was available earlier. Is this related to some settings or permission issues. Any help is much appreciated. Thanks in advance.

---

## [Save and re-run an advanced log query](https://community.dynatrace.com/t/save-and-re-run-an-advanced-log-query/52228)

<div class="topic-metadata">

**Author:** [@blainefredricks](https://community.dynatrace.com/u/blainefredricks)\
**Replies:** 2\
**Last updated:** [June 25, 2025, 2:46pm UTC](https://community.dynatrace.com/t/save-and-re-run-an-advanced-log-query/52228 "2025-06-25T14:46:53Z")

</div>

Is there any way to save and rerun an advanced log query. I tried saving the URL and re-running the next day - says it’s not valid anymore. I have several Splunk and Dynatrace queries that I run daily. I have the Splu…

---

## [Lesser throughput seen on Dynatrace as compared to actual](https://community.dynatrace.com/t/lesser-throughput-seen-on-dynatrace-as-compared-to-actual/52171)

<div class="topic-metadata">

**Author:** [@anayan](https://community.dynatrace.com/u/anayan)\
**Replies:** 2\
**Last updated:** [June 20, 2025, 6:09am UTC](https://community.dynatrace.com/t/lesser-throughput-seen-on-dynatrace-as-compared-to-actual/52171 "2025-06-20T06:09:56Z")

</div>

We have recently on boarded Dynatrace as our Monitoring solution. But we have observed lesser throughput for our SpringBoot service as compared to our existing Grafana metrics. We have an average of about 500 rps on one …

---

## [Load on OneAgent when a large amount of logs are ingested by OneAgent](https://community.dynatrace.com/t/load-on-oneagent-when-a-large-amount-of-logs-are-ingested-by-oneagent/52168)

<div class="topic-metadata">

**Author:** [@Shirai](https://community.dynatrace.com/u/Shirai)\
**Replies:** 4\
**Last updated:** [June 20, 2025, 1:43am UTC](https://community.dynatrace.com/t/load-on-oneagent-when-a-large-amount-of-logs-are-ingested-by-oneagent/52168 "2025-06-20T01:43:32Z")

</div>

I understand that if a large amount of log files are ingested by OneAgent, a DPS license will be consumed. Do I need to consider the load on OneAgent, which ingests logs and sends information to the SaaS tenant? Will th…

---

## [Calculation of distribution percentage in OpenPipeline](https://community.dynatrace.com/t/calculation-of-distribution-percentage-in-openpipeline/52120)

<div class="topic-metadata">

**Author:** [@Akhil-Jayendran](https://community.dynatrace.com/u/Akhil-Jayendran)\
**Replies:** 3\
**Last updated:** [June 17, 2025, 11:24am UTC](https://community.dynatrace.com/t/calculation-of-distribution-percentage-in-openpipeline/52120 "2025-06-17T11:24:20Z")

</div>

Hello Team, How does OpenPipeline calculate the distribution percentage of logs? Is it based on a specific time window, such as the last 2 hours, or is it calculated over all logs shipped?

---

## [ActiveGate SYSLOG - how to search for logs?](https://community.dynatrace.com/t/activegate-syslog-how-to-search-for-logs/52043)

<div class="topic-metadata">

**Author:** [@cbaldi](https://community.dynatrace.com/u/cbaldi)\
**Replies:** 2\
**Last updated:** [June 12, 2025, 4:11pm UTC](https://community.dynatrace.com/t/activegate-syslog-how-to-search-for-logs/52043 "2025-06-12T16:11:06Z")

</div>

We have started to use the built-in Open Telemetry module in the ActiveGate to collect syslogs. We see the logs appearing in the Log Viewer, however there does not appear to be a good way to create a log filter for these…

---

## [Log events vs log metrics combined with metric events](https://community.dynatrace.com/t/log-events-vs-log-metrics-combined-with-metric-events/52063)

<div class="topic-metadata">

**Author:** [@henk\_stobbe](https://community.dynatrace.com/u/henk_stobbe)\
**Replies:** 3\
**Last updated:** [June 12, 2025, 1:41pm UTC](https://community.dynatrace.com/t/log-events-vs-log-metrics-combined-with-metric-events/52063 "2025-06-12T13:41:10Z")

</div>

Hello All, I notice people creating log metrics with metric events, after this they set a threshold of above 0 then please create an event. Should in general this not be done with a log event, with the same options? W…

---

## [Customer needs to define a custom log source that is not been detected](https://community.dynatrace.com/t/customer-needs-to-define-a-custom-log-source-that-is-not-been-detected/51880)

<div class="topic-metadata">

**Author:** [@miguelocem](https://community.dynatrace.com/u/miguelocem)\
**Replies:** 2\
**Last updated:** [June 11, 2025, 5:32pm UTC](https://community.dynatrace.com/t/customer-needs-to-define-a-custom-log-source-that-is-not-been-detected/51880 "2025-06-11T17:32:21Z")

</div>

Hi a Customer and I we’re trying to set up a custom log source in Dynatrace to ingest logs from files with a .iqmsg extension. Here’s what we’ve done so far: Created a custom log source in Dynatrace. Defined a log proc…

---

## [Logs in JSON from OneAgent on K8S vs Logs from Log Ingest API](https://community.dynatrace.com/t/logs-in-json-from-oneagent-on-k8s-vs-logs-from-log-ingest-api/51928)

<div class="topic-metadata">

**Author:** [@Aymeric\_M](https://community.dynatrace.com/u/Aymeric_M)\
**Replies:** 2\
**Last updated:** [June 4, 2025, 8:56am UTC](https://community.dynatrace.com/t/logs-in-json-from-oneagent-on-k8s-vs-logs-from-log-ingest-api/51928 "2025-06-04T08:56:35Z")

</div>

Hi, There is a weird difference in Logs New (and also in Classic) between logs in JSON format received from K8S by OneAgent and logs in JSON format received from the Log Ingest API. The logs from the API seem to be pre…

---

## [Restriction of information in logs for users in the same environment](https://community.dynatrace.com/t/restriction-of-information-in-logs-for-users-in-the-same-environment/51898)

<div class="topic-metadata">

**Author:** [@carlos\_carreno](https://community.dynatrace.com/u/carlos_carreno)\
**Replies:** 1\
**Last updated:** [June 2, 2025, 8:53am UTC](https://community.dynatrace.com/t/restriction-of-information-in-logs-for-users-in-the-same-environment/51898 "2025-06-02T08:53:13Z")

</div>

Good morning community, I need your support. I have the following requirement: I am injecting data via API into Dynatrace, specifically LOGS. In the log content, I have a special field that is different and conditional f…

---

## [ETA on "Integrating Log Monitoring with WMI extensions"](https://community.dynatrace.com/t/eta-on-integrating-log-monitoring-with-wmi-extensions/33836)

<div class="topic-metadata">

**Author:** [@Bert\_VanderHeyd](https://community.dynatrace.com/u/Bert_VanderHeyd)\
**Replies:** 2\
**Last updated:** [May 27, 2025, 6:26pm UTC](https://community.dynatrace.com/t/eta-on-integrating-log-monitoring-with-wmi-extensions/33836 "2025-05-27T18:26:59Z")

</div>

One of our customers are leveringing WMI to send events / logs. We want to integrate them in Dynatrace. And I just read: WMI: Monitor performance of Windows hosts & services The what’s next states: - Windows event repo…

---

## [How to increase result table display in Log Viewer above 1,000 log records](https://community.dynatrace.com/t/how-to-increase-result-table-display-in-log-viewer-above-1-000-log-records/34246)

<div class="topic-metadata">

**Author:** [@MaikBlecker](https://community.dynatrace.com/u/MaikBlecker)\
**Replies:** 2\
**Last updated:** [May 25, 2025, 10:42pm UTC](https://community.dynatrace.com/t/how-to-increase-result-table-display-in-log-viewer-above-1-000-log-records/34246 "2025-05-25T22:42:31Z")

</div>

Hello all, as noted in the documentation for log monitoring v2, the size of the download table as csv via the GUI is limited to 1,000 entries. Since the timeframe can be minimally limited to 5 minutes, I have in debug …

---

## [Logs is correlated to traces despite dt.span\_id, dt.trace\_id, dt.trace\_sampled are absent](https://community.dynatrace.com/t/logs-is-correlated-to-traces-despite-dt-span-id-dt-trace-id-dt-trace-sampled-are-absent/51778)

<div class="topic-metadata">

**Author:** [@waikeat\_chan](https://community.dynatrace.com/u/waikeat_chan)\
**Replies:** 1\
**Last updated:** [May 23, 2025, 9:30pm UTC](https://community.dynatrace.com/t/logs-is-correlated-to-traces-despite-dt-span-id-dt-trace-id-dt-trace-sampled-are-absent/51778 "2025-05-23T21:30:48Z")

</div>

I have open a ticket to Dynatrace about why traces don’t have log. Then based on the documentation provided, the understanding is that these fields/header needs to be present for the trace-log correlation to works. B…

[Previous page](https://community.dynatrace.com/c/platform/logs/90.md?page=1)

[Next page](https://community.dynatrace.com/c/platform/logs/90.md?page=3)
