cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

I want to add "Windows Operating System" to the monitored process

nshimad1
Newcomer

Hi I am Shimada.

Is there anyone who can answer my question?

I want to add "Windows Operating System" to Hosts > ServerName > Processes on the DynaTraceSaaS page.

How can i do?

"Windows Operating System" has already been added to "Log files" of DynaTraceSaaS page.

Thank you.


12 REPLIES 12

vladislav_samoy
Inactive

Hi! Can you explain the reason to do it?


nshimad1
Newcomer

Hi!

When an error is notified to Windows format event logs,I want to notify "Problems" on DynaTraceSaaS page.

I made the following settings before,
"Problems" was not notified.

<https://answers.dynatrace.com/spaces/482/dynatrace-open-qa/questions/214180/windows-eventlog-error-detection.html>

So I thought that "Problems" would be notified if "Windows Operating System" could be added to Hosts> ServerName> Processes on DynaTraceSaaS page.

Can you do it?


Radu
Dynatrace Pro
Dynatrace Pro

Hi Shimada,

Based on your info from https://answers.dynatrace.com/spaces/482/dynatrace-open-qa/questions/214180/windows-eventlog-error-d... you are on the right path. If you want to alert against specific log patterns, this is the way to do it.

Can you post a screenshot of your log pattern event definition for the above scenario?
It will help us validate your setup.

Best regards,

Radu


Hi Radu.

Thanks for your comment.

I took the set screen as you told me.

Help me.

Thank you.


Hi Shimada,

That looks correct.
Once you save this, if any strings in those 3 logs of the WinAgentDB server contain error you should be alerted of it.

I would suggest the following next steps:
  • Generate a message that contains error, a few times (remember, this is strictly on the WinAgentDB host)
  • Check Problems, but also check the Host Details page (events section) for your log error
  • If you can't find any indication that it was triggered, verify that Dynatrace is actually parsing it correctly by looking at the log file from the Log Files section in the UI -> if Dynatrace is aware of it, the log file explorer should display that line of the log, otherwise there may be an issue with the logging syntax.

Let me know what the results.

Best regards,

Radu


Hi Radu.

Thanks for your comment.

I ran the following command on the WinAgentDB server,

[eventcreate /t error /id 999 /d "error test" /l system /so test]

And I confirmed that error was logged on "Log files" on DynaTraceSaaS page.

I also confirmed that it was also notified of "error test windows" set in "Log Analytics" on the DynaTrace SaaS page.

But, "Problems" of DynaTrace SaaS page,Does not detect that "Windows Operating System" has an error!

I am using a trial license, but are there any relationships with this issue?

If you buy an official license, will you detect the problem of "Windows Operating System" in "Problems" on DynaTrace SaaS page?

Help me.

Thank you.


Hi Shimada,

From what I can see this is the expected behaviour.
Problem 32 has been raised on the system, and it is a 'Error log pattern' as indicated in Log Analytics.

You should be able to access this Problem, by either clicking on the log analytics red part of the chart where it says "Navigate to the Problem screen", or if you go directly to the Problems dashboard and use a timeframe large enough to contain this problem ticket.

Can you please verify this?

Best regards,

Radu


Hi Radu,

Thanks for your comment.

Problem 32 notified that an error that matched the definition of "Windows EventLog Error" was recorded in "c:\WindowsAzure\Logs\TransparentInstaller.log" which is the log file of the [WaAppAgent.exe] process.

But what I'm expecting is that the error logged by the command I ran on the WinAgentDB server will be reported to the Problems dashboard.

Such a thing can not do with Dynatrace?

Help me.

Thank you.


Hi Shimada,

My mistake. You are right, this Problem 32 is not related to your log error event.

Can you do one more test please? Open the Host Details view for the WinAgentDB host, and expand the "Events" section on the bottom right part of that screen. With the timeframe set to include your log errors, do you see any Log Error events reported in there?


Hi Radu,

Thanks for your comment.

I tried the same thing again as you told me.

I ran the following command on the WinAgentDB server,

[eventcreate /t error /id 999 /d "error test" /l system /so test]

And I confirmed that error was logged on "Log files" on DynaTraceSaaS page.

Then,Open the Host Details view for the WinAgentDB host, and expand the "Events" section on the bottom right part of that screen.

However, the event at the command execution time was not displayed.

Why ?

Could you please try the same thing in your environment?

In your environment, will errors reported by the command be reported to problem dashboard?

Help me.

Thank you.


Hi Shimada,

My suggestion would be to open a support ticket.

The expected behaviour here is that a Problem ticket will open based on the log error event that you have created. The setup looks correct to me and this should trigger a Problem so I am not sure why it would not behave as such in your environment.

Best regards,

Radu


Hi Radu,

I understood.

Thank you for your kindness.