topic Re: Process Group detection-Advanced detection rules(c/c++ .exe processes) in Open Q&A

Process Group detection-Advanced detection rules(c/c++ .exe processes)

Gogi — Tue, 06 Sep 2022 11:57:44 GMT

Hi All,

We have one windows host windows host is getting monitored for full-stack in Dynatrace.

on this host java, c/c++ technology processes are running, java/jar process got discovered but .exe(c/c++) not got discovered.

Java is supported technology by Dynatrace, where as c/c++ comes under non supported technology.

My understnading is though c/c++ is non supported technology(can be oneagentSDK intrumented for full-stack) 1.whether c/c++ exe processes will be discovered by oneagent atleast for availability monitoring(not deep). 2. in our case these are not getting discovered also.

3.as these are not discovered I tried to discover them with "Advanced detection Rules" but still not getting discovered.

4. these process wont run always, these run for few seconds when batch job is triggered for every 15mins.

Re: Process Group detection-Advanced detection rules(c/c++ .exe processes)

Julius_Loman — Mon, 05 Sep 2022 10:29:42 GMT

You must use Declarative process grouping for this. Then you will see them in the process list.
Since the jobs are running for few seconds - what data do you expect to get from those processes? Some transaction data or monitor if they are running?

Re: Process Group detection-Advanced detection rules(c/c++ .exe processes)

rastislav_danis — Thu, 23 Mar 2023 12:58:49 GMT

Have you tried declarative process grouping (https://www.dynatrace.com/support/help/shortlink/process-groups#declare) ? Standard process detection uses some default built in rules, so if they live shortly, they are probably not detected: https://www.dynatrace.com/support/help/shortlink/most-important-processes

Re: Process Group detection-Advanced detection rules(c/c++ .exe processes)

Gogi — Mon, 05 Sep 2022 15:17:44 GMT

Hi Julius and Danis - thanks for info.

I have configured in "Declarative Process Grouping" now, lets wait for some time for discovery.

why means

1.Monitor if they are running or not.

2.monitor logs generated by these exe processes. please let me know whether Dynatrace collects logs or not for the processes discovered by "Declarative Process Grouping" as in doc its given "Declarative grouping works only for processes that aren't deep-monitored".

Re: Process Group detection-Advanced detection rules(c/c++ .exe processes)

Gogi — Tue, 06 Sep 2022 05:35:15 GMT

Hi Julius,

Now process got discovered, just enabled log collection for these processGroups and waiting to see logs get discovered.

Re: Process Group detection-Advanced detection rules(c/c++ .exe processes)

Gogi — Tue, 06 Sep 2022 06:18:46 GMT

@Julius_Loman I have configured log collection using ProcessGroup ID, still logs are not getting collected, please help me whether for processes discovered using "Declarative Process Grouping" approch log collection is supported or not.

Re: Process Group detection-Advanced detection rules(c/c++ .exe processes)

Julius_Loman — Tue, 06 Sep 2022 07:05:29 GMT

I don't think you can collect the log files this way for not deep monitored processes. You should match on log file name/directory instead.

Re: Process Group detection-Advanced detection rules(c/c++ .exe processes)

Gogi — Tue, 06 Sep 2022 09:36:12 GMT

@Julius_Loman - You should match on log file name/directory instead-> please can you elaborate this point ?

Re: Process Group detection-Advanced detection rules(c/c++ .exe processes)

Julius_Loman — Tue, 06 Sep 2022 09:44:31 GMT

Try to add the log file manually as described here.

Re: Process Group detection-Advanced detection rules(c/c++ .exe processes)

Gogi — Wed, 07 Sep 2022 05:11:35 GMT

@Julius_Loman -thanks for suggestion, I have added logs details manually and I can see both logs are getting collected by Dynatrace, but at PG level in Logs section it shows logs as invalid and faded, same logs I filtered in LogViewer it shows them.

Just I wanted to know why it shows invalid and faded at PG level, as these processes are not running always(batch triggered run every 15/30mins once) this might be reason that logs are showing invalid ?