Cluster "Event Log" through API?

[AntonioSousa]

It seems that it is possible to get the Managed "Audit Log" through API, despite still not having used it:

https://www.dynatrace.com/support/help/extend-dynatrace/dynatrace-api/environment-api/audit-logs/get...

Does anyone know if it's possible to get the "Event Log" from the CSC in Managed?

[Radoslaw_Szulgo · Accepted solution]

Audit logs in the environment are not the same as Audit in Cluster Management Console. However they overlap in major part.

There’s no Cluster REST API currently to get cluster changes. To fetch them to an external tool, you can pull and process audit logs from the node. You are interested in :

• Audit.user.log - log ins and log outs
• Audit.config.change.log - all configuration changes

hope this helps. REST API will be maybe available late this year or early next year.

[mrgrvs]

hi!
Do you have information on this functionality?

thanks!

[auke_wesselink]

Do you have more information about this question?

We really want the CMC events pulled from the cluster with the API, but I couldn't find this.

Also for the CMC audit logs we would like this!

[fstekelenburg]

Adding as a note to Linux users, since filenames are case sensitive, make sure to to search for audit.user and audit config. Especially handy when you have the mlocate package installed.

# locate udit.user
/var/opt/dynatrace-managed/log/nodekeeper/audit.user.0.0.log
/var/opt/dynatrace-managed/log/nodekeeper/audit.user.0.0.log.lck
/var/opt/dynatrace-managed/log/security-Gateway/audit.user.0.0.log
/var/opt/dynatrace-managed/log/security-Gateway/audit.user.0.0.log.lck
/var/opt/dynatrace-managed/log/server/audit.user.0.0.log
/var/opt/dynatrace-managed/log/server/audit.user.0.0.log.lck

# locate udit.config
/var/opt/dynatrace-managed/log/server/audit.config.change.0.0.log
/var/opt/dynatrace-managed/log/server/audit.config.change.0.0.log.lck
/var/opt/dynatrace-managed/log/server/audit.config.change.0.1.log

[fstekelenburg]

Original question was: "it's possible to get the 'Event Log' from the CSC in Managed?"

Although Audit logs have been discussed, the Events log seems yet unanswered.
The Cluster API does not show this information.
Cluster API - Authentication | Dynatrace Docs


The necessity is also indicated in RFE - Managed Cluster - Notification/send alert of cluster severe and warning events - Dynatrace Com...

[fstekelenburg]

If somebody has a work around, please share.
Like a (3rd party?) log forwarder to Dynatrace environment. Checking for Cluster Events in the audit.cluster.event.0.0.log, residing in /var/opt/dynatrace-managed/log/server.

[purva_bundela]

API to get the event data from Cluster Management to fetch the logged in users

[purva_bundela]

can you please help in this query. We need to figure out the data of active users, utilizing the Dynatrace environment

[purva_bundela]

Any update in this?

[fstekelenburg]

See Solved: Cluster "Event Log" through API? - Dynatrace Community