What is the difference between loglevel and status?

[deni]

Hi,

I tried the following (in Playground) and don't see any difference:

Thanks,

Regards, Deni

[p_devulapalli · Accepted solution]

@deni loglevel and status are distinct yet related attributes in Dynatarce. loglevel reflects the severity of a log entry as defined by the originating application or system such as INFO, WARNING, or SEVERE. Whereas status attribute in Dynatrace logs indicates a higher-level categorization or grouping of log events based on their loglevel and other potential factors, such as content or context

Dynatrace enhances log data through automatic enrichment, which includes mapping specific loglevel values to more generalized status categories. For instance, a loglevel of SEVERE may be translated into a status of ERROR.

Moreover, the status attribute can be customized via log processing rules. These rules enable users to redefine or override the default loglevel-to-status mapping based on specific patterns or content within the logs, offering greater flexibility in how log data is interpreted and categorized.

Here is some related info

https://docs.dynatrace.com/docs/shortlink/lma-log-data-transformation#transform-all-types-of-logs