Send email alerts based on specific string in logs

[murron]

Hi, new to Dynatrace here.

I've been asked to set up email alerts for a certain situation. If logs from any of three specific hosts contain "Invalid username or password." in their content field, an alert email should be sent to a specific address.

How would I go about that? We use Grail.

[AntonPineiro · Accepted solution]

Hi,

You need:

• Create a log event.
• Be sure is matching desired alerting profile.
• Create problem notification by email.

Best regards

[AntonioSousa · Accepted solution]

@murron,

In standard Dynatrace, you will have to raise a problem, to get something sent by email, as @AntonPineiro said. In this case, you will probably want to use a low timeout for the event, with the dt.event.timeout, or else you might have a huge amount of problems in your environment, as the default timeout is 15 minutes.

Other ways of doing the same thing involves integrating your ITSM solution with events (eg. ServiceNow ITOM) and then sending the emails from there. Or also having an integration at the event level; in this case, we have an extension that looks at the events and sends them to several channels, including emails. You could almost certainly do it with Workflows, but I haven't tested this yet. In all these cases, you won't have ""Invalid username or password." as problems in Dynatrace.

[murron]

One of the requirements I forgot to mention was that it needs to run once every hour. So I ended up using the workflows from your suggestion, which works very well and is easy to use.