Ingest MSSQL logs to Dynatrace and create a problem when condition matches

[binodkumarroy]

Hi Team,

I am trying to ingest MSSQL Logs to Dynatrace and create the Problem when condition matches.

Logs contain 2 lines which is related to same Error, I would like to put the condition in Dynatrace if it contains severity :20 then create a problem and append complete second line in the problem:

2024-07-06 23:23:17.60 spid265 Error: 18056, Severity: 20, State: 23.
2024-07-06 23:23:17.60 spid265 The client was unable to reuse a session with SPID 25, which had been reset for connection pooling. The failure ID is 23. This error may have been caused by an earlier operation failing. Check the error logs for failed operations immediately before this error message.

Regards,

Binod

[erh_inetum · Accepted solution]

Hi Binod,

I think you can get this creating a processing rule and a log event .

The processing rule to doing something like this to capture the second line to use the content capture in a custom attribute that you will use in the log event.

The log event to capture "severity:20" content for event type "Error".

And finally, adding the custom attribute you define in the processing rule like:

Hope it helps.

Regards,

Elena.

[binodkumarroy]

Thanks Elena. Let me try this and update if it works.