Disable memory dumps for OneAgent

[michiel_otten]

Hi community,

I've got a question around memory dumps and the Dynatrace OneAgent. As we know, we can trigger memory dumps from the platform. Disabling this module on the ActiveGate removes the possibility for downloading it in the UI. 
But: a memory dump can still be triggered, it is then saved on the host itself.

is this something we could disable in general for hosts / host groups?

Kind regards,
Michiel

[AntonPineiro]

Hi,

Is removing "View sensitive request data" in user/group level an option to you?

Best regards

[michiel_otten]

Hi Anton, 

I did spot that one although in my opinion it removes way to much. Besides that, triggering a memory dump is not only sensitive, but also has a negative performance impact.

I was hoping for a certain agent configuration setting. But if this is not possible, the sensitive data setting is the only way forward.

[Julius_Loman · Accepted solution]

@michiel_otten this has been requested several times in last years. It's not possible and there is no option to prevent it, also confirmed from support (previously, there was such an option).
See https://community.dynatrace.com/t5/Product-ideas/More-granular-permissions-for-memory-dump-trigger/i...
and FYI - triggering the dump is not audited https://community.dynatrace.com/t5/Product-ideas/Audit-triggering-of-memory-dumps/idi-p/195209 , just an attempt to download the dump is audited.

[michiel_otten]

Thanks Julius. So for now: disable sensitive data on a management zone if we don't want memory dumps certain entities triggered? 

Off topic, is there an official response from dynatrace?

[Julius_Loman]

Correct. Unfortunately view sentivive days permission has much broader scope than triggering memory dump.

Official answer was that no changes are planned (you can find another product ideas regarding memory dumps).