Retrieve Specific Filenames Using Wildcards in Dynatrace Log Ingestion Rules

[GaborBernics]

Hello,

I created a log ingestion rule at the host-group level to pick up logs.
The log.source contains the wildcard character "*", for example, /static/*/static/service.log.

The machines contain multiple folders:

• /static/XY/static/service.log
• /static/XZ/static/service.log

At first glance, this seems perfect because it can be applied to all machines without needing to create rules with specific folder names for each machine.

However, the log.source is only available with the wildcard, and Dynatrace does not provide the exact filenames.
As a result, the filtering is not working correctly.

When I need logs only from /static/XY/static/service.log, the query also provides log entries from /static/XZ/static/service.log.

Do you have any idea how I can retrieve the specific filenames?

Thanks a lot.

[Mizső]

Hi Gábor!

I think it is not possible. ☹️ Maybe other community members have any other ideas.

What would you like to achieve exactly? Drop me an e-mail if you need any online help: janos.mizsei@telvice.hu

Best regards,

Mizső

[GaborBernics]

Hello Mizső,

Thanks for the confirmation.

The main target is to enforce the log rules at the host-group level, instead of creating rules for all affected services on each machine.
The service path contains individually generated parts, which complicates the situation.

If Dynatrace is not able to retrieve the full path of the affected log entries, we may need to create individual rules using the API.

Regards,
Gabor 
[ Allianz Technology ]

[Mizső · Accepted solution]

Hi @GaborBernics!

I thinkthis is the only one way...the individual rules.

Maybe there is a dirty solution with an extra disk capacity reuirements. If you could enrich you every single log lines with the generated information (extra disk requirements for log size). This information could be parsed out from the log lines and could be used for filtering. Example for filtering based on parsed data from log lines...

Best regrads,

Mizső