Debug Azure Native communication

[michiel_otten]

Hi community,

We are currently investigating an Azure Native Monitoring setup with Dynatrace.

The Azure subscriptions are configured successfully, and from the Dynatrace side we do not see any errors. However, no monitoring data is appearing in Dynatrace.

We have already verified:

• The overall configuration

• The required tags on the Azure resources

Under normal circumstances, we would start troubleshooting by reviewing the ActiveGate logs. Since this is an Azure Native setup, those logs are not available.

Does anyone have suggestions on where we can look next for troubleshooting clues or diagnostics in this scenario?

Thanks in advance for your help.

Kind regards,
Michiel

[y_buccellato]

Ei,

are you trying to troubleshoot the OA deployed by using ANS or troubleshooting the Dynatrace Azure Resource that you deploy when you want to onboard a subscription (to have the overview of all resources on a subs and each resource group)?

[y_buccellato]

I leave a follow up just in case your are trying to deploy the ANS Dynatrace resource in a subscription to have general visibility.

To further go into the troubleshooting I would double check:

Start from Region check:

1.  Linking requires that the environment and the Dynatrace resource reside in the same Azure region.
   

Then review the Authorization game on both sides Azure and Dynatrace:

to supersimplify before we go in details the best scenario is: you are both the Owner of the Azure subscription and the Dynatrace Admin.

1. Azure: the user who is deploying the Dynatrace Resource must be contributor or owner of the Subscription
   1. Tricky Part: in theory if you do everything as an owner of the Subscription + Admin on Dynatrace everything is smooth and again in theory when you provision the resource "the system automatically creates system managed identity and provision the "Monitoring Reader role" to this identity".
      
      
      BUT if you are only contributor then [Important] complete the resource provisioning excluding the metrics configuration and ask an owner to assign the role Monitoring Reader to the Dynatrace resource.
      
      
2. Dynatrace: the user that's performing the linking action should have administrator permissions on the Dynatrace environment too. This mean:
   1. When linking multiple Azure subscriptions and creating the resource, you must have Dynatrace Account privileges tenant-manage-settings and tenant-agent-install

   2. again in Dynatrace the user need account with the following permissions:

      • View Account
      • View Environment
      • Install OneAgent
      • Manage Monitoring Settings

      Last thing:
      

      activegate you don't own - you can only open a ticket to DT and explain them in great detail what your are trying to troubleshoot.

      I hope I gave you some food for tought