# How to detect / alarm process crashes?

**URL:** <https://community.dynatrace.com/t/how-to-detect-alarm-process-crashes/55840>\
**Category:** Alerting\
**Tags:** problem-detection, processes\
**Created:** [May 7, 2026, 3:49pm UTC](https://community.dynatrace.com/t/how-to-detect-alarm-process-crashes/55840 "2026-05-07T15:49:14Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![AntonioSousa](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/antoniosousa/32/50_2.png) [@AntonioSousa](https://community.dynatrace.com/u/AntonioSousa)\
**Post date:** [May 7, 2026, 3:49pm UTC](https://community.dynatrace.com/t/how-to-detect-alarm-process-crashes/55840/1 "2026-05-07T15:49:14Z")

</div>

Dynatrace detects & lists processes that have crashed.

But there is no way known to me that alerts us to these events. How can we find them and alert on them? They are events, as they appear in the list of events for processes. Best practices by someone that has tackled this issue?

In my immediate case, this is for Managed. But also interested in Grail.

---

<div class="post-metadata">

**Author:** ![AntonPineiro](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/antonpineiro/32/49_2.png) [@AntonPineiro](https://community.dynatrace.com/u/AntonPineiro)\
**Post date:** [May 8, 2026, 6:35am UTC](https://community.dynatrace.com/t/how-to-detect-alarm-process-crashes/55840/2 "2026-05-08T06:35:18Z")

</div>

Hi,

Maybe a workflow can be triggered when that event is found.

Best regards

---

<div class="post-metadata">

**Author:** ![Mohamed\_Hamdy](https://avatars.discourse-cdn.com/v4/letter/m/7ab992/32.png) [@Mohamed\_Hamdy](https://community.dynatrace.com/u/Mohamed_Hamdy)\
**Post date:** [May 8, 2026, 6:45am UTC](https://community.dynatrace.com/t/how-to-detect-alarm-process-crashes/55840/3 "2026-05-08T06:45:59Z")

</div>

Hello [@AntonioSousa](https://community.dynatrace.com/user/17213)&nbsp;,

For Dynatrace Managed, I tried many times to find a reliable way to detect process crashes directly, but I could not find a better option other than:

1. Creating **Process Group Availability Monitoring** , or using **logs** if the crash is detected in the logs and Log Monitoring is enabled.
2. Using the **Events API** to periodically extract process crash events.

However, these approaches may not be 100% reliable as an alerting mechanism, especially when they depend on periodic polling.

For Grail, you can create a **Davis Anomaly Detection** alert using DQL. The below query might help:

```auto
<span>fetch dt.davis.events.snapshots
| filter event.kind == "DAVIS_EVENT"
| fieldsAdd affected_process_entities = arrayConcat(toArray(`dt.entity.process_group_instance`), affected_entity_ids)
| filter iAny(startsWith(toString(affected_process_entities[]), "PROCESS_GROUP_INSTANCE-"))
| dedup {event.id}, sort: {timestamp desc}
| sort event.start desc
| filter event.group_label == "Process crashed"<br></span>

```

Best Regards,

Hamdy