SAAS Active Gate endpoints

[EduardLaGrange]

Does anyone know how I can get notified anytime Dynatrace adds a new active gate communication endpoint.   Our security requires that traffic can only be sent to specific URL endpoints (via a proxy).

I generally only notice that something's up when I see dropped messages on the Active Gate dashboards.

Thanks in advance

Eduard

[AntonPineiro]

Hi,

Maybe you can create your own custom metric base on how many ActiveGates you have in your self monitoring metrics.

Best regards

[EduardLaGrange]

Thanks for your reply, but my question was about the actual SAAS endpoints that the active gates connect to.   Like I said earlier, the only thing that gives me a clue that something might have changed is when I see dropped messages on my AG dashboard, upon investigation of AG gateway and communications logs I can see that new endpoints have become available, which I then have to request access for from security team.  

[Julius_Loman · Accepted solution]

@EduardLaGrange you can use the Deployment API to fetch the information, particularly

• the ActiveGate connectivity API
• the OneAgent connectivity API

Both provide a list of endpoints (along with token and environment info), first one is for ActiveGates (you will typically see cluster endpoints) and the second is for OneAgent connectivity

You can create a workflow and validate the list against your approved list if you need to automate it. Typically, you should properly use network zones to segment your connectivity.  Both OA and AG check for connectivity and at least one communication endpoint must be working.

[EduardLaGrange]

Hi Julius,

thanks for that suggestion that will work.  I was hoping for something more proactive from the Dynatrace side i.e. a notification that a new endpoint was added :).

Regards,

Eduard

[Julius_Loman]

Well, Dynatrace SaaS endpoints (not speaking about endpoints that you introduce with deploying an ActiveGate) are modified extremly rarely. If a significant change is introduced (for webhook notifications), it's typically communicated in advance (I remember at least one such case).