How to detect / alarm process crashes?

[AntonioSousa]

Dynatrace detects & lists processes that have crashed.

But there is no way known to me that alerts us to these events. How can we find them and alert on them? They are events, as they appear in the list of events for processes. Best practices by someone that has tackled this issue?

In my immediate case, this is for Managed. But also interested in Grail.

[AntonPineiro]

Hi,

Maybe a workflow can be triggered when that event is found.

Best regards

[Mohamed_Hamdy]

Hello @AntonioSousa ,

For Dynatrace Managed, I tried many times to find a reliable way to detect process crashes directly, but I could not find a better option other than:

1. Creating Process Group Availability Monitoring, or using logs if the crash is detected in the logs and Log Monitoring is enabled.
2. Using the Events API to periodically extract process crash events.

However, these approaches may not be 100% reliable as an alerting mechanism, especially when they depend on periodic polling.

For Grail, you can create a Davis Anomaly Detection alert using DQL. The below query might help:

fetch dt.davis.events.snapshots
| filter event.kind == "DAVIS_EVENT"
| fieldsAdd affected_process_entities = arrayConcat(toArray(`dt.entity.process_group_instance`), affected_entity_ids)
| filter iAny(startsWith(toString(affected_process_entities[]), "PROCESS_GROUP_INSTANCE-"))
| dedup {event.id}, sort: {timestamp desc}
| sort event.start desc
| filter event.group_label == "Process crashed"

 Best Regards,

Hamdy