topic Re: Infrastructural event ingestion, unknown host (not yet in Dynatrace environment) in Alerting

Infrastructural event ingestion, unknown host (not yet in Dynatrace environment)

xstreur — Tue, 24 Sep 2024 06:39:45 GMT

Hello,

I'm looking for a solution to post new events from infrastructural components (Element Managers) that can use the Events API to post new (error) events. I'm trying to post new events but they seem to only accept them if the hostname already exists in the Dynatrace environment. How should I post these events so they will be visible in
DT so I can use the notifier to send them to a service management solution like ServiceNow.

Re: Infrastructural event ingestion, unknown host (not yet in Dynatrace environment)

Julius_Loman — Mon, 23 Sep 2024 18:56:45 GMT

A normal lifecycle is problem problem-opening event resulting in a Dynatrace problem. Problems can be then sent using alerting profiles and integrations to 3rd party tools such as Service Now.

Dynatrace works on the SmartScape entity model. This model can be enriched using custom topology and then you can send such problem opening events to those entities. So basically you need to create those custom entities first to be able to send events to them and raise problems.

There are also other possible solutions such as sending just log events and having problems created from logs only.

What element manager is the source of your events? Does it know at least a list of the devices it is managing?

Re: Infrastructural event ingestion, unknown host (not yet in Dynatrace environment)

Peter_Youssef — Thu, 26 Sep 2024 14:14:15 GMT

Hello @xstreur

As simple as that:

As long as, the hosts aren't monitored within the monitoring tenant, you can create custom devices through the Rest Api or the UI as well both are applicable based on your preferences and the best suitable for your team.
To create custom devices through Rest Api, create access token with "entities.wite" and use it to create a custom device through Environment APi v2 or the curl command as per preferences.
Create access token with "events.ingest" to utilize it while using the API to ingest events into the custom devices.

Then Execute > upon successful execution > you should receive one of the below Response codes.

To create custom device through UI

Under Infrastructure Observability > Technologies and processes > Custom Devices

After that proceed with Events ingestion through Environment Api v2, just an example, you can customize as per actual requirements:

you can utilize rest Api externally to create custom devices and ingest events as well without need to access the UI through the generated Curl command from the monitoring tenant.

Finally

You have options to either:

Continue with current integration with ServiceNow to keep posting notifications to SNow URL.
Enable the below options in Dynatrace integration side

For event Integration

So, all events will be correlated to the impacted entities, you will be notified in case of any impact or issues.

You can configure CMDB integration between Dynatrace and Service Now it will figure out a comprehensive monitoring and integration Landscape.

Kind Regards,

Peter.