# Entity Linking when using Logs and Metrics streams via Firehose **URL:** \ **Category:** Cloud platforms\ **Tags:** aws, clouds, logs\ **Created:** [October 8, 2025, 11:50am UTC](https://community.dynatrace.com/t/entity-linking-when-using-logs-and-metrics-streams-via-firehose/53653 "2025-10-08T11:50:26Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![deni](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/deni/32/163_2.png) [@deni](https://community.dynatrace.com/u/deni)\ **Post date:** [October 8, 2025, 11:50am UTC](https://community.dynatrace.com/t/entity-linking-when-using-logs-and-metrics-streams-via-firehose/53653/1 "2025-10-08T11:50:26Z")
Hi, We have Logs and Metrics streams integration via Firehose. According to the documentation topology should be supported via [https://dt-url.net/x6038p6](https://dt-url.net/x6038p6). Also according to [Stream logs via Amazon Data Firehose — Dynatrace Docs](https://docs.dynatrace.com/docs/ingest-from/amazon-web-services/integrate-with-aws/aws-logs-ingest/lma-stream-logs-with-firehose) entity linking should be supported for some of the objects for example RDS. What we noticed is that logs are not listed in the Clouds App: From the logs app: dt.source\_entity [“CUSTOM\_DEVICE-XXX”,“RELATIONAL\_DATABASE\_SERVICE-XXX”] and the clouds app this entity has id CUSTOM\_DEVICE\_YYY Also if create management zone by aws account id  - “display entities” button shows nothing. In the plugin release notes I saw: **changed idPattern from arn** :aws: **{aws.account.id} to arn** :aws: **account::{aws.account.id}:account** I checked the arn metadata and it is the new format, so I expect that the id is extracted correctly. I search in the documentation about topology and it saw that RELATIONAL\_DATABASE\_SERVICE-XXX kind ids are Classic, but didn’t find information what will replace them and currently what happens with these entity linking. Can you help me with that? Regards, Deni ---
**Author:** ![t\_pawlak](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/t_pawlak/32/14991_2.png) [@t\_pawlak](https://community.dynatrace.com/u/t_pawlak)\ **Post date:** [October 8, 2025, 2:03pm UTC](https://community.dynatrace.com/t/entity-linking-when-using-logs-and-metrics-streams-via-firehose/53653/2 "2025-10-08T14:03:04Z")
Hi Deni, I think, you are correct in your observations. When using the Firehose integration for logs and metrics, entity linking is currently limited and there is still a distinction between the classic entity model and the new entity types used in the Cloud app. The IDs you see like _ **RELATIONAL\_DATABASE\_SERVICE-XXX** _ come from the classic entity model. They are still created for backward compatibility (for example, in the Logs app), but the Cloud app only shows the new model (_ **CUSTOM\_DEVICE\_YYY** _). The _ **idPattern** _ change you mentioned (_ **arn** _:aws:_ **account::…** _) is part of the ongoing migration to unify IDs across AWS entities. While ARN extraction is correct, linking is not yet fully consistent across Logs, Metrics, and Cloud topology. That’s why logs can still point to a classic entity, while the Cloud app only lists the new one. Similarly, management zones by AWS account ID won’t show entities if they are still represented in the classic model. At the moment: Firehose logs and metrics ingest works and provides enrichment, but topology in Clouds is only partially supported. RDS and some other AWS services are on the path to being fully represented with new IDs, but the migration is still ongoing. Eventually the classic IDs (like _ **RELATIONAL\_DATABASE\_SERVICE-\*** _) will be replaced by the new entity model, so linking between Logs/Clouds/Management zones will be consistent. So in short: you’re not misconfigured – this is expected behavior due to the model transition. If you need stable filtering/zoning today, it’s best to rely on the new ARN-based IDs. [Stream logs via Amazon Data Firehose](https://docs.dynatrace.com/docs/ingest-from/amazon-web-services/integrate-with-aws/aws-logs-ingest/lma-stream-logs-with-firehose) ---
**Author:** ![deni](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/deni/32/163_2.png) [@deni](https://community.dynatrace.com/u/deni)\ **Post date:** [October 8, 2025, 3:18pm UTC](https://community.dynatrace.com/t/entity-linking-when-using-logs-and-metrics-streams-via-firehose/53653/3 "2025-10-08T15:18:59Z")
Hi [@t\_pawlak](https://community.dynatrace.com/user/42367) , Thanks for your reply! Could you please clarify what you mean by **“rely on the new ARN-based IDs”**? Is there any **documentation** about the new entity model — including its **current state** and any **planned release dates**? I followed exactly [Stream logs via Amazon Data Firehose](https://docs.dynatrace.com/docs/ingest-from/amazon-web-services/integrate-with-aws/aws-logs-ingest/lma-stream-logs-with-firehose?_gl=1*zxj92v*_gcl_aw*R0NMLjE3NTk4MzcyNjYuQ2owS0NRanc2NGpEQmhEWEFSSXNBQmtrOEo2MEp2WWFmWXVKTDYyNHZ5ampscjRneWhabXRDTldCQjNBTzNMSWxDeno3WUpmX2JoZnAzUWFBbGtZRUFMd193Y0I.*_ga*Mzc3NDM5MTc0LjE3NTk4NTIyNjE.*_ga_1MEMV02JXV*czE3NTk5MzQzNDUkbzgkZzEkdDE3NTk5MzQ1MjgkajMkbDAkaDA.) document. However, in the _“Supported services”_ table, **Amazon RDS** is listed as supporting linking — but its logs still aren’t linked. I understand that the _ **RELATIONAL\_DATABASE\_SERVICE** _-\* is only for backward compatibility and looking in the environment seem that the current ids are in format _ **CUSTOM\_DEVICE-\*.** _ What’s confusing is that for the same Amazon RDS instance, I see **3** **different IDs** across the apps: RELATIONAL\_DATABASE\_SERVICE-XXX in Logs app (ok this is for backward comparability) CUSTOM\_DEVICE-YYY in the Logs app CUSTOM\_DEVICE-ZZZ in the Clouds app **About the id pattern**   - I looked at the metadata of the log message for a specific RDS and Cloud apps line for the same RDS (entity.name for both is the same) - they are in the following format aws\_arn: “arn:aws:rds:(zone):(account\_id):db:(entity.name)” and the entity for the **AWS account itself** has the same format as the new one in the plugin - aws\_arn: “arn:aws:account::(account\_id):account”. Regards, Deni ---
**Author:** ![t\_pawlak](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/t_pawlak/32/14991_2.png) [@t\_pawlak](https://community.dynatrace.com/u/t_pawlak)\ **Post date:** [October 9, 2025, 7:29am UTC](https://community.dynatrace.com/t/entity-linking-when-using-logs-and-metrics-streams-via-firehose/53653/4 "2025-10-09T07:29:54Z")
Hi, i think that New ARN-based IDs: by this I mean the entity identifiers that are derived directly from the AWS ARN (e.g. arn:aws:rds:… or arn:aws:account::…). These are what the new plugin and the Cloud app use internally, and they are the most reliable basis today for management zone rules or filtering. Documentation: unfortunately there isn’t a single public document that fully maps the “classic” entity model to the “new” one or provides a release roadmap. The transition is ongoing and that’s why you still see multiple IDs for the same RDS instance.