topic Re: Can I create topology object with information contained in logs? in Log Analytics

Can I create topology object with information contained in logs?

y_buccellato — Tue, 16 Jan 2024 08:25:41 GMT

Good morning everyone,

Can I create topology object with information contained in logs?

I'm ingesting this payload as logs in Dynatrace from a only SaaS service (by playing with it's API via Power Automate):

{ "logstart": "18/12/23 1:52:22 PM", "message.guid": "XXXXXXXXXX", "transaction.id.type": "SalesId", "transaction.id": "400XXX", "integration.flow.name": "FLOW_ORD_Sales", "status": "COMPLETED", "duration.ms": "22833", "node.process.id": "5c8c446", "previous.component.name": "OOO_123", "exception": "" }

node.process.id is the equivalent of a host and integration.flow.name is the equivalent of the process running on the host. message.guid is the equivalent of a message processed by the integration.flow.name as an HTTP request.

Can I build a model out of it with this logs? I really would like to create such a complex but beautiful thing.

Regards

Re: Can I create topology object with information contained in logs?

y_buccellato — Mon, 15 Jan 2024 09:06:49 GMT

Anyone in the community is doing this?

Re: Can I create topology object with information contained in logs?

Julius_Loman — Mon, 15 Jan 2024 11:10:52 GMT

@y_buccellato sure, I'm doing it.

Yes, you can build up a custom topology based on logs. You have to define two custom types, where the source is logs. Then sure create a required dimension - so that only relevant lines will produce custom topology types.

You should define two custom types e.g.

acme:node
acme:transaction-flow

Both will be created by logs:

The acme:node definition should look like this - the transaction flow similarly:

and then the relation like this:

I highly recommend doing it as extension 2.0 from scratch and defining it in the extension yaml (unless you have just a single environment where it needs to be set up). It's then easier to define unified analysis screens for such entities.

Hope this helps.

Re: Can I create topology object with information contained in logs?

y_buccellato — Mon, 15 Jan 2024 13:16:38 GMT

Thank you Julius!