Would this be an improvement (RFE), or to far fetched?
Make possible for the WMI 2.0 extension to also collect strings and or arrays . This would make Dynatrace also a great inventory tool. So collect every 60 minutes like below,
Just a thought, please comment (-;
Solved! Go to Solution.
If the data can be fetched via a standard WMI query - we can already store it via log ingest. See example usage in MS Exchange extension.
But I would also ask if the data is more an event, or rather entity attribute? For example: BIOS seems to fit more like an attribute of a host. While it can be reported either as an event, or a metric dimension (not a value though), it all comes down to where should it be presented: as a log line, or host entity attribute?
QFEs on the other hand are a great example of log events.
In any case - WMI exts already supports any of those.
Sample YAML section:
- subgroup: ExchangeLogEvents featureSet: events interval: minutes: 1 query: SELECT SourceName, EventCode, RecordNumber, CategoryString, Message, Type, TimeGenerated FROM Win32_NTLogEvent WHERE Logfile='[MS]Exchange Management' OR SourceName LIKE '%[MS]Exchange%' type: logfileEvent dimensions: - key: source value: column:SourceName - key: dt.event.key value: column:EventCode - key: category value: column:CategoryString - key: content value: column:Message - key: status value: column:Type - key: recordno value: column:RecordNumber - key: timestamp value: $timestamp(const:ntlog, column:TimeGenerated)