30 May 2025
03:42 PM
- last edited on
02 Jun 2025
07:42 AM
by
MaciejNeumann
Given the table below created from DQL fetching logs, How can I turn the eventId in to a link to pull the relevant raw logs? In this scenario, this DQL just pulls the last entry in the log by eventId and in the logs there could be many actions within a trigger so the support team wants to be able to come to this dashboard, see the summary and then be able to click through to pull all the logs for a given eventId
15 Jun 2025 07:08 PM - edited 15 Jun 2025 07:20 PM
One way to achieve this is to create a dashboard that shows the log entries filtered by the event id and set the event id as free text variable.
You will see that when you enter event id in the variable box (to display the desired results) the url in address bar will change and it will include your event id. It should be in this fromat
https://{environmentid}.apps.dynatrace.com/ui/apps/dynatrace.dashboards/dashboard/<dashboard_id>#from=now%28%29-7d&to=now%28%29&vfilter_event_id=<eventId>
Now in your first dashboard's DQL do
| fieldsAdd event_id_link = concat("https://{environmentid}.apps.dynatrace.com/ui/apps/dynatrace.dashboards/dashboard/<dashboard_id>#from=now%28%29-7d&to=now%28%29&vfilter_event_id=", eventId)
It will create a new field with a link to a pre-filtered dashboard with desired results. You will have to right-click in it and use the "open link" option, but it should work
Unfortunately Dynatrace dasboards do not support Drilldown option as for example Splunk does.
Maybe one day we will get it as it was already suggested as a feature here