topic Re: Audit log in Dynatrace Managed in Dynatrace Managed Q&A

Audit log in Dynatrace Managed

Julius_Loman — Wed, 28 Feb 2018 13:02:35 GMT

In Dynatrace Managed cluster management console it is possible to view the audit log. Are there any options to forward those audit events to other tool? (for example SIEM tool or syslog server)

Where is the audit log located? There are some logfiles named audit in the LOG_PATH but they don't contain the information present in the audit log, nor does the server log. Also as far as I know there is no publicly available API to pull this log file or it's events.

Re: Audit log in Dynatrace Managed

Radoslaw_Szulgo — Thu, 01 Mar 2018 10:44:28 GMT

These are store in the Cassandra database. Currently they are not available through Public API. This is on our roadmap.

Re: Audit log in Dynatrace Managed

ignacio — Wed, 29 Aug 2018 14:13:17 GMT

Hello @Radoslaw S.,

Any update on this? I need something similar to @Julius L., export the .log file to a syslog server. Is the content of AuditLog tab still only on Cassandra DB?

Thanks!

Best regards,

Ignacio Norris Perret

Re: Audit log in Dynatrace Managed

Radoslaw_Szulgo — Wed, 29 Aug 2018 15:28:22 GMT

No update yet to that.

Re: Audit log in Dynatrace Managed

ignacio — Wed, 29 Aug 2018 15:31:31 GMT

Thanks for the response!

Re: Audit log in Dynatrace Managed

paul_eggert — Wed, 20 Feb 2019 11:35:28 GMT

Any update? When part of Public API? Is there maybe another way to extract this log-file manually? Extract to a csv-file?

Re: Audit log in Dynatrace Managed

oakdag — Tue, 18 Jan 2022 13:57:54 GMT

There are only LOGIN/LOGOUT information. What I need is to see all the changes made. For example, configuration changes made in settings. I can get this via API. But does it stay as a log somewhere on the server?

Regards,

Ozkan

Re: Audit log in Dynatrace Managed

GilesDay — Fri, 11 Feb 2022 16:26:32 GMT

Any update to this? (Cluster API audit log)

Re: Audit log in Dynatrace Managed

sergio_borisovs — Wed, 20 Apr 2022 20:38:16 GMT

We need to send audit events ( login/logout, user/groups creation/modification, etc etc) to SIEM. What is the best choice to do that.

Thanks in advance

Re: Audit log in Dynatrace Managed

fstekelenburg — Wed, 29 Mar 2023 08:28:55 GMT

What is the current status? Quite an old topic.

Re: Audit log in Dynatrace Managed

GilesDay — Wed, 29 Mar 2023 12:29:19 GMT

interested also.

Re: Audit log in Dynatrace Managed

Richard_Cahill — Wed, 18 Oct 2023 04:46:03 GMT

Also interested..

Re: Audit log in Dynatrace Managed

gilles_tabary — Thu, 23 Jan 2025 16:52:42 GMT

Any update to Cluster API audit log ? Much wanted.

Re: Audit log in Dynatrace Managed

GilesDay — Tue, 28 Jan 2025 14:51:47 GMT

still interested also...

Re: Audit log in Dynatrace Managed

Richard_Cahill — Mon, 03 Feb 2025 03:47:18 GMT

Still interested. It's a big issue not being able to trace Where & when something got deleted by a user, or, if a key alert gets muted by a bad actor..

Re: Audit log in Dynatrace Managed

GilesDay — Mon, 03 Feb 2025 16:00:52 GMT

Can we change the status to something other than solved. @Mod