cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Why does the Dynatrace events API seem to repeat events? Are these the same events repeated or is something else going on?

vishal_kumar
Newcomer

I wanted to keep track of events for different Topology components. But I see the Events API keep repeating the same event either CLOSED or OPEN for a component. Why does it so? Also, the Problem API has those events but doesn't repeat it.

8 REPLIES 8

vishal_kumar
Newcomer

@Chad T. see the below API response.

Sample response where events are being repeated.
{
    "nextEventStartTms": 1605590620000,
    "nextEventId": -1692088114088737457,
    "nextCursor": "AgEAAAF1rQ9BfwEAAAF12vsdSAAAAQArTG9uZygxNzVkNGE4OTc2MCktTG9uZyhlODg0N2VkMzQ3MTQ4NTRmKS05Ng==",
    "from": 1604926259583,
    "to": 1605696691528,
    "totalEventCount": 253,
    "events": [
        {
            "eventId": -1584093882237761839,
            "startTime": 1605696620000,
            "endTime": 1605696630000,
            "entityId": "PROCESS_GROUP_INSTANCE-B2899BF04CC5A8C0",
            "entityName": "MonitoringHost.exe",
            "impactLevel": "INFRASTRUCTURE",
            "eventType": "PROCESS_RESTART",
            "eventStatus": "CLOSED",
            "tags": [],
            "id": "-1584093882237761839_1605696620000",
            "source": "builtin"
        },
        {
            "eventId": -4975954647130545657,
            "startTime": 1605695920000,
            "endTime": 1605695930000,
            "entityId": "PROCESS_GROUP_INSTANCE-B2899BF04CC5A8C0",
            "entityName": "MonitoringHost.exe",
            "impactLevel": "INFRASTRUCTURE",
            "eventType": "PROCESS_RESTART",
            "eventStatus": "CLOSED",
            "tags": [],
            "id": "-4975954647130545657_1605695920000",
            "source": "builtin"
        },
        {
            "eventId": -3073733996045218359,
            "startTime": 1605695020000,
            "endTime": 1605695030000,
            "entityId": "PROCESS_GROUP_INSTANCE-B2899BF04CC5A8C0",
            "entityName": "MonitoringHost.exe",
            "impactLevel": "INFRASTRUCTURE",
            "eventType": "PROCESS_RESTART",
            "eventStatus": "CLOSED",
            "tags": [],
            "id": "-3073733996045218359_1605695020000",
            "source": "builtin"
        },
        {
            "eventId": -4765459127359134993,
            "startTime": 1605693310000,
            "endTime": 1605693320000,
            "entityId": "PROCESS_GROUP_INSTANCE-00E0F9F4298532C1",
            "entityName": "IIS app pool DefaultAppPool",
            "impactLevel": "INFRASTRUCTURE",
            "eventType": "PROCESS_RESTART",
            "eventStatus": "CLOSED",
            "tags": [],
            "id": "-4765459127359134993_1605693310000",
            "source": "builtin"
        },
        {
            "eventId": -7178394851491026240,
            "startTime": 1605693020000,
            "endTime": 1605693030000,
            "entityId": "PROCESS_GROUP_INSTANCE-B2899BF04CC5A8C0",
            "entityName": "MonitoringHost.exe",
            "impactLevel": "INFRASTRUCTURE",
            "eventType": "PROCESS_RESTART",
            "eventStatus": "CLOSED",
            "tags": [],
            "id": "-7178394851491026240_1605693020000",
            "source": "builtin"
        },
        {
            "eventId": 7767823577618833510,
            "startTime": 1605692320000,
            "endTime": 1605692330000,
            "entityId": "PROCESS_GROUP_INSTANCE-B2899BF04CC5A8C0",
            "entityName": "MonitoringHost.exe",
            "impactLevel": "INFRASTRUCTURE",
            "eventType": "PROCESS_RESTART",
            "eventStatus": "CLOSED",
            "tags": [],
            "id": "7767823577618833510_1605692320000",
            "source": "builtin"
        },
        {
            "eventId": -8895123963769216496,
            "startTime": 1605691960000,
            "endTime": 1605691970000,
            "entityId": "PROCESS_GROUP_INSTANCE-00E0F9F4298532C1",
            "entityName": "IIS app pool DefaultAppPool",
            "impactLevel": "INFRASTRUCTURE",
            "eventType": "PROCESS_RESTART",
            "eventStatus": "CLOSED",
            "tags": [],
            "id": "-8895123963769216496_1605691960000",
            "source": "builtin"
        }]

vishal_kumar
Newcomer

@Chad T. Still waiting for your response on this question ?

The start time and the end times are all different between the events. I don't see where they are repeated in a sense that they are clones of one another. It appears that the process is being restarted. Do you have automation set up that recycles certain processes? This process might be included in that or the process itself has a restart schedule set.

-Chad

@Chad T.

Ok even the time is different but we have same repetitive events coming every time for example the "PROCESS_RESTART" for same entityID and also there is no automation done.

@Chad T. I am still curious to know why the events are repeated. Also, let's suppose if a host is disconnected, I don't see that event coming and sometimes it comes after a few hours which is very inconsistent.

Is there any automation that recycles that process automatically? maybe a Jenkins job? Dynatrace will detect when processes are on, off, restarted and/or crashed. If the system is reporting incorrect information and validation is provided like "We dont have Jenkins running restarts on that service/process" then a support ticket might be able to provide you with some better answers as they will be able to look into your environment.

-Chad

@Chad T. Ok. For sure we don't have any job to restart those process again and again. But my question was very specific why Dynatrace keeps reporting those events which are already CLOSED again and again which is completely shown in the sample posted. Also When my host becomes unavailable, I don't the events for that quickly but after a few hours it appears in the API. A bit inconsistency which I find in the API responses..

@Vishal K. that is very interesting, I'd recommend opening a support ticket - maybe there is a bug that support needs to resolve.

-Chad