topic Re: Log Event extraction to problem with multiple lines in Alerting

Log Event extraction to problem with multiple lines

dcole66 — Tue, 20 Feb 2024 23:49:59 GMT

I'm trying to see if there is a way I can create a problem utilising a long log entry. I have not worked out if it is better to have one long log content entry with multiple lines, or multiple log entries and consolidate those to one event/problem.

I am using the OneAgent log ingest api and have the flexibility (somewhat) to post either a log entry per line into dynatrace. Or concatenate lines into one content entry.

I'd then like to extract that as an event which will ultimately be given to ServiceNow which has the concept of a short description "I have a problem" and a long description - the mulitple log lines.

Am I barking up the wrong tree?

Re: Log Event extraction to problem with multiple lines

AntonPineiro — Wed, 21 Feb 2024 08:24:50 GMT

Hi,

You can ingest log line you are instested and create a log event.

Best regards

Re: Log Event extraction to problem with multiple lines

PacoPorro — Wed, 21 Feb 2024 08:43:35 GMT

As suggested by @AntonPineiro you should use log events

The short description in SNOW will be Title.
The long description in SNOW will be the Dynatrace description.

Re: Log Event extraction to problem with multiple lines

dcole66 — Wed, 21 Feb 2024 18:47:31 GMT

I have a log event...but that will only create an event with one of the log entries with criteria, or will it merge all of the log entries into one event?

Let say I push 100 log lines into dynatrace for one "thing" and I want this one this to be one event/problem