Showing results for 
Show  only  | Search instead for 
Did you mean: 

Extension 2.0 WMI collect string

DynaMight Champion
DynaMight Champion



Would this be an improvement (RFE), or to far fetched?


Make possible for the WMI 2.0 extension to also collect strings and or arrays . This would make Dynatrace also a great inventory tool. So collect every 60 minutes like below,




Just a thought, please comment (-;


KR Henk




Dynatrace Champion
Dynatrace Champion

It wouldn't fit in our metrics database as that one expects a number. It could potentially go into the log ingest though?

@dglugla , raise an RFE or is something similar already going to be possible based on what you've got planned?

Dynatrace Advisor
Dynatrace Advisor

If the data can be fetched via a standard WMI query - we can already store it via log ingest. See example usage in MS Exchange extension.

But I would also ask if the data is more an event, or rather entity attribute? For example: BIOS seems to fit more like an attribute of a host. While it can be reported either as an event, or a metric dimension (not a value though), it all comes down to where should it be presented: as a log line, or host entity attribute?

QFEs on the other hand are a great example of log events.


In any case - WMI exts already supports any of those.


Sample YAML section:




      - subgroup: ExchangeLogEvents
        featureSet: events
          minutes: 1
        query: SELECT SourceName, EventCode, RecordNumber, CategoryString, Message, Type, TimeGenerated FROM Win32_NTLogEvent WHERE Logfile='[MS]Exchange Management' OR SourceName LIKE '%[MS]Exchange%'
        type: logfileEvent
          - key: source
            value: column:SourceName
          - key: dt.event.key
            value: column:EventCode
          - key: category
            value: column:CategoryString
          - key: content
            value: column:Message
          - key: status
            value: column:Type
          - key: recordno
            value: column:RecordNumber
          - key: timestamp
            value: $timestamp(const:ntlog, column:TimeGenerated)




Solving network and DBs' challenges

Do you have more examples for Event log monitoring using WMI Extension 2.0?

How would you store the latest position read in the eventlog? Or dont you do that?

Second, how would you alert on something that only occurs once?

DynaMight Champion
DynaMight Champion

Both, thanks for your reply, small question, what are QFE's? 

Dynatrace Champion
Dynatrace Champion

The second command you pasted into your question? 🙂 

DynaMight Champion
DynaMight Champion

Oeps.... I did it again😞

Dynatrace Champion
Dynatrace Champion

Yes, stop playing with my heart 😂