# \#log-processing **URL:** https://community.dynatrace.com/tag/log-processing/925.md [Latest](https://community.dynatrace.com/latest.md) · [Categories](https://community.dynatrace.com/categories.md) · [Tags](https://community.dynatrace.com/tags.md) --- ## [Sending logs from Vector to Dynatrace via Log Ingestion API](https://community.dynatrace.com/t/sending-logs-from-vector-to-dynatrace-via-log-ingestion-api/57116)
**Author:** [@ntanaka](https://community.dynatrace.com/u/ntanaka)\ **Replies:** 1\ **Last updated:** [October 9, 2026, 4:25am UTC](https://community.dynatrace.com/t/sending-logs-from-vector-to-dynatrace-via-log-ingestion-api/57116 "2026-10-09T04:25:04Z")
Hello Dynatrace Community, We are currently considering a migration from Fluentd to Vector for log collection on OpenShift. According to Red Hat, Fluentd is deprecated starting with Red Hat OpenShift Logging 5.5, and V… --- ## [Drop records after metric and Davis event creation in pipeline](https://community.dynatrace.com/t/drop-records-after-metric-and-davis-event-creation-in-pipeline/56909)
**Author:** [@suraj\_gupta3](https://community.dynatrace.com/u/suraj_gupta3)\ **Replies:** 2\ **Last updated:** [September 10, 2026, 8:39am UTC](https://community.dynatrace.com/t/drop-records-after-metric-and-davis-event-creation-in-pipeline/56909 "2026-09-10T08:39:36Z")
Hello, I am evaluating a log-processing approach in Dynatrace OpenPipeline to reduce log storage and licensing costs while preserving operational visibility. The idea is to first analyze incoming logs and generate the … --- ## [How to troubleshoot ingestion of missed log data after the Log age limit](https://community.dynatrace.com/t/how-to-troubleshoot-ingestion-of-missed-log-data-after-the-log-age-limit/56862)
**Author:** [@jgrant](https://community.dynatrace.com/u/jgrant)\ **Replies:** 0\ **Last updated:** [September 7, 2026, 6:23am UTC](https://community.dynatrace.com/t/how-to-troubleshoot-ingestion-of-missed-log-data-after-the-log-age-limit/56862 "2026-09-07T06:23:14Z")
Summary Data of Ingest sources can be delayed and lost before reaching our platform for a myriad of reasons: system failures, delayed configuration changes to match application changes, major network disruptions, injudi… --- ## [Log ingestion windows event viewer](https://community.dynatrace.com/t/log-ingestion-windows-event-viewer/56738)
**Author:** [@Berry](https://community.dynatrace.com/u/Berry)\ **Replies:** 4\ **Last updated:** [August 18, 2026, 9:37pm UTC](https://community.dynatrace.com/t/log-ingestion-windows-event-viewer/56738 "2026-08-18T21:37:42Z")
hi guys, just wondering if we could ingest everything under windows viewer that includes all the subfolder? i understand we need to specify the path, but there’s too many. can we have a wildcard that it will ingest eve… --- ## [SNMP trap processing](https://community.dynatrace.com/t/snmp-trap-processing/55536)
**Author:** [@MichalSzekely](https://community.dynatrace.com/u/MichalSzekely)\ **Replies:** 3\ **Last updated:** [July 16, 2026, 8:53pm UTC](https://community.dynatrace.com/t/snmp-trap-processing/55536 "2026-07-16T20:53:06Z")
hello, I received a trap like this: { “event.type”: “LOG”, “content”: “SNMP trap (SNMPv2-SMI::experimental.94.0.4) reported from src:10.10.10.12\\n agent:10.10.10.12”, “status”: “NONE”, “timestamp”: “1775468179963”, … --- ## [How to direct logs to right bucket via openpipeline](https://community.dynatrace.com/t/how-to-direct-logs-to-right-bucket-via-openpipeline/56389)
**Author:** [@JannickDT\_CM](https://community.dynatrace.com/u/JannickDT_CM)\ **Replies:** 1\ **Last updated:** [July 9, 2026, 7:11am UTC](https://community.dynatrace.com/t/how-to-direct-logs-to-right-bucket-via-openpipeline/56389 "2026-07-09T07:11:17Z")
What is the best approach to direct my logs to the right bucket, making use of a openpipeline? Can anybody provide me more info/details how to do this? Thanks a lot --- ## [Tuning Retention Period of Extension Logs](https://community.dynatrace.com/t/tuning-retention-period-of-extension-logs/56172)
**Author:** [@siavash1996](https://community.dynatrace.com/u/siavash1996)\ **Replies:** 5\ **Last updated:** [June 15, 2026, 2:31pm UTC](https://community.dynatrace.com/t/tuning-retention-period-of-extension-logs/56172 "2026-06-15T14:31:25Z")
With the introduction of Pipeline Groups and Ready-Made OpenPipeline pipelines for extensions, such as SQL Server, am I correct in understanding that we can no longer move logs to a separate bucket with a custom retentio… --- ## [Azure Activity Logs: mapping entities for Davis Events](https://community.dynatrace.com/t/azure-activity-logs-mapping-entities-for-davis-events/55842)
**Author:** [@michiel\_otten](https://community.dynatrace.com/u/michiel_otten)\ **Replies:** 2\ **Last updated:** [May 12, 2026, 2:32pm UTC](https://community.dynatrace.com/t/azure-activity-logs-mapping-entities-for-davis-events/55842 "2026-05-12T14:32:30Z")
I’m currently ingesting Azure Activity Logs through the native Azure integration into the platform. The logs are arriving correctly, but I’m trying to trigger events based on entities such as azure.subscription. The cha… --- ## [Creating metric with multiple matchers](https://community.dynatrace.com/t/creating-metric-with-multiple-matchers/55376)
**Author:** [@Joe\_Kulesza](https://community.dynatrace.com/u/Joe_Kulesza)\ **Replies:** 2\ **Last updated:** [March 26, 2026, 4:24pm UTC](https://community.dynatrace.com/t/creating-metric-with-multiple-matchers/55376 "2026-03-26T16:24:04Z")
Hi Team, I am in the process of cleaning up some of our custom alerts and dashboards by converting things into metrics but wanted to see what the best practices are when there are multiple matchers for the query. An exa… --- ## [Split problems for the same log event configuration](https://community.dynatrace.com/t/split-problems-for-the-same-log-event-configuration/55074)
**Author:** [@nc1](https://community.dynatrace.com/u/nc1)\ **Replies:** 4\ **Last updated:** [February 27, 2026, 12:41pm UTC](https://community.dynatrace.com/t/split-problems-for-the-same-log-event-configuration/55074 "2026-02-27T12:41:06Z")
Hi, I have created a log event and I want to split the problems generated by the log event so that every log entry creates a unique problem. The docs linked above are telling me: For example, to create a separate pr… --- ## [Sending Log from ECS fargate to dynatrace](https://community.dynatrace.com/t/sending-log-from-ecs-fargate-to-dynatrace/55088)
**Author:** [@shubham\_s7](https://community.dynatrace.com/u/shubham_s7)\ **Replies:** 0\ **Last updated:** [February 24, 2026, 11:47am UTC](https://community.dynatrace.com/t/sending-log-from-ecs-fargate-to-dynatrace/55088 "2026-02-24T11:47:23Z")
Hi Team, I need your help with a case I’m not sure is feasible. Currently, my logs are being written to CloudWatch, but I want to move from CloudWatch to Dynatrace logs. I’m using ECS Fargate, where my Node.js applicat… --- ## [ECS Log Ingestion in Dynatrace](https://community.dynatrace.com/t/ecs-log-ingestion-in-dynatrace/55044)
**Author:** [@mehakpuri01](https://community.dynatrace.com/u/mehakpuri01)\ **Replies:** 1\ **Last updated:** [February 19, 2026, 10:17am UTC](https://community.dynatrace.com/t/ecs-log-ingestion-in-dynatrace/55044 "2026-02-19T10:17:24Z")
Hi All, We need to ship logs from ECS Fargate to Dynatrace. We believe the best method here would be to use Fluent Bit since there’s proper documentation that outlines detailed steps for sending logs to Dynatrace. Howe… --- ## [Pro-Tip: Simplify your DPL patterns with this experimental AI-powered CLI tool](https://community.dynatrace.com/t/pro-tip-simplify-your-dpl-patterns-with-this-experimental-ai-powered-cli-tool/54929)
**Author:** [@Maheedhar\_T](https://community.dynatrace.com/u/Maheedhar_T)\ **Replies:** 0\ **Last updated:** [February 9, 2026, 3:01pm UTC](https://community.dynatrace.com/t/pro-tip-simplify-your-dpl-patterns-with-this-experimental-ai-powered-cli-tool/54929 "2026-02-09T15:01:05Z")
Hi everyone! I’ve been spending some of my personal time lately exploring AI Agents (specifically OpenClaw) as a hobby. To see how these agents handle specific technical tasks, I decided to point one at a problem many o… --- ## [Alert if the log "pattern" changes](https://community.dynatrace.com/t/alert-if-the-log-pattern-changes/54593)
**Author:** [@gschramm](https://community.dynatrace.com/u/gschramm)\ **Replies:** 0\ **Last updated:** [January 12, 2026, 3:51pm UTC](https://community.dynatrace.com/t/alert-if-the-log-pattern-changes/54593 "2026-01-12T15:51:10Z")
I’ve configured openpipeline to move the logs from various applications to dedicated buckets. I’ve also create metric that is counting the messages per loglevel, host and logsource. Now I’m struggling with setting up An… --- ## [Keep Latest Logs with Custom Processing Rules in DQL](https://community.dynatrace.com/t/keep-latest-logs-with-custom-processing-rules-in-dql/45892)
**Author:** [@AlexisGND](https://community.dynatrace.com/u/AlexisGND)\ **Replies:** 3\ **Last updated:** [December 18, 2025, 2:26pm UTC](https://community.dynatrace.com/t/keep-latest-logs-with-custom-processing-rules-in-dql/45892 "2025-12-18T14:26:59Z")
Hello, I want to make a processing rule to filter out an entire log. Here’s the log sample : \[ { "interface.name": "Seq\_SAP\_to\_AGV", "host.environment": "PROD", "host.name": "Datastage", "c… --- ## [Process a line with multiple Services\\Status \\n](https://community.dynatrace.com/t/process-a-line-with-multiple-services-status-n/53554)
**Author:** [@CTull](https://community.dynatrace.com/u/CTull)\ **Replies:** 2\ **Last updated:** [December 17, 2025, 1:11pm UTC](https://community.dynatrace.com/t/process-a-line-with-multiple-services-status-n/53554 "2025-12-17T13:11:50Z")
I have something similar to pull in for a health check on services. Example JSON. { “event.type”: “LOG”, “content”: “Last Modified at: ,2025-08-29 08:25:03.747519\\nservice1,Good\\nservice2,Good\\nservice3,Good\\nservice… --- ## [Apply OpenPipeline DQL Data Masking Rules Across All Attributes](https://community.dynatrace.com/t/apply-openpipeline-dql-data-masking-rules-across-all-attributes/49134)
**Author:** [@bobmacks](https://community.dynatrace.com/u/bobmacks)\ **Replies:** 1\ **Last updated:** [December 17, 2025, 12:09pm UTC](https://community.dynatrace.com/t/apply-openpipeline-dql-data-masking-rules-across-all-attributes/49134 "2025-12-17T12:09:32Z")
Hi, We use DQL rules for cardholder data masking in Open Pipeline through combinations of string functions - replacePatterns, replaceString - similar to the snippet below fieldsAdd a = replacePattern(content, \<\ **Author:** [@cask](https://community.dynatrace.com/u/cask)\ **Replies:** 6\ **Last updated:** [December 17, 2025, 8:55am UTC](https://community.dynatrace.com/t/custom-log-source-name/45956 "2025-12-17T08:55:17Z") Hello all, I am creating a custom log source for a host. Im seeing (no log data available) for this source but I can verify that there are files on this source. Here is the current path, I have followed instructions fro… --- ## [How to retrieve nested json in fetch logs](https://community.dynatrace.com/t/how-to-retrieve-nested-json-in-fetch-logs/53849)
**Author:** [@dkroger](https://community.dynatrace.com/u/dkroger)\ **Replies:** 1\ **Last updated:** [November 28, 2025, 4:38pm UTC](https://community.dynatrace.com/t/how-to-retrieve-nested-json-in-fetch-logs/53849 "2025-11-28T16:38:27Z")
Hello team, I having trying to get some fields from keda controller in kubernetes using fetch logs, this query is almost there but missing some nested json values fetch logs | filter matchesValue(k8s.namespace.name, "k… --- ## [Calculate Sum of MSG Content Using DQL Queries](https://community.dynatrace.com/t/calculate-sum-of-msg-content-using-dql-queries/54236)
**Author:** [@Vikas\_g1997](https://community.dynatrace.com/u/Vikas_g1997)\ **Replies:** 1\ **Last updated:** [November 28, 2025, 3:23pm UTC](https://community.dynatrace.com/t/calculate-sum-of-msg-content-using-dql-queries/54236 "2025-11-28T15:23:59Z")
Hi Team, We are trying to display the number of logs that contain a specific message and service name. Example: Message: instantiating container sampler process decorator Service Name: timor-fulfilment-service Below… --- ## [How to split log access in a shared cluster](https://community.dynatrace.com/t/how-to-split-log-access-in-a-shared-cluster/53541)
**Author:** [@dkroger](https://community.dynatrace.com/u/dkroger)\ **Replies:** 1\ **Last updated:** [September 26, 2025, 3:46pm UTC](https://community.dynatrace.com/t/how-to-split-log-access-in-a-shared-cluster/53541 "2025-09-26T15:46:04Z")
We have migrated our logs recently to dynatrace, we have AKS shared clusters where with multiple teams with ingresses where we need to let them see their nginx logs (for their ingresses) but not all the ingresses logs fr… --- ## [Unable to capture the logs with added rules in custom log source and log ingest](https://community.dynatrace.com/t/unable-to-capture-the-logs-with-added-rules-in-custom-log-source-and-log-ingest/53455)
**Author:** [@juveria](https://community.dynatrace.com/u/juveria)\ **Replies:** 9\ **Last updated:** [September 25, 2025, 5:21am UTC](https://community.dynatrace.com/t/unable-to-capture-the-logs-with-added-rules-in-custom-log-source-and-log-ingest/53455 "2025-09-25T05:21:13Z")
Hi Team, We are enabling log monitoring for one server in PreProd Customer has given us the path : E:\\NRI\_Logs\\HSL\_NRI\\ DT\\15092025 .log We have added the rules in custom log source and log ingest rules but still un… --- ## [Split logs that are ingested via API](https://community.dynatrace.com/t/split-logs-that-are-ingested-via-api/52386)
**Author:** [@reshef](https://community.dynatrace.com/u/reshef)\ **Replies:** 2\ **Last updated:** [September 8, 2025, 10:37am UTC](https://community.dynatrace.com/t/split-logs-that-are-ingested-via-api/52386 "2025-09-08T10:37:15Z")
We recently set up log forwarding to Dynatrace Api via logstash. In logstash we can see these responses from Dynatrace Api: body=\>"{\\"success\\":{\\"code\\":200,\\"message\\":\\"Some events were limited. Following limits wer… --- ## [Ingest CSV data to Dynatrace](https://community.dynatrace.com/t/ingest-csv-data-to-dynatrace/53124)
**Author:** [@anuj08\_jain](https://community.dynatrace.com/u/anuj08_jain)\ **Replies:** 4\ **Last updated:** [August 28, 2025, 1:33pm UTC](https://community.dynatrace.com/t/ingest-csv-data-to-dynatrace/53124 "2025-08-28T13:33:50Z")
Is their Any way we can ingest the CSV files in Dynatrace? I have CSV file test.csv: timestamp,host,process,pid,loglevel,message 2025-08-26 14:21:05,web01,sshd,32145,INFO,"Accepted password for custuser3 from 10.10.5.4… --- ## [DPL (Classic Logs Processing) with "Unrecognized character escape"](https://community.dynatrace.com/t/dpl-classic-logs-processing-with-unrecognized-character-escape/52943)
**Author:** [@AntonioSousa](https://community.dynatrace.com/u/AntonioSousa)\ **Replies:** 6\ **Last updated:** [August 16, 2025, 8:42am UTC](https://community.dynatrace.com/t/dpl-classic-logs-processing-with-unrecognized-character-escape/52943 "2025-08-16T08:42:33Z")
In Classic Log processing, I’m trying to process content that has what seem to be nonexistent escape characters: I’m trying to extract “asousa” but with no success. I can get partial results, but I can’t even “Save c… --- ## [Log monitoring wildcards](https://community.dynatrace.com/t/log-monitoring-wildcards/52911)
**Author:** [@Agoyals](https://community.dynatrace.com/u/Agoyals)\ **Replies:** 4\ **Last updated:** [August 15, 2025, 6:07am UTC](https://community.dynatrace.com/t/log-monitoring-wildcards/52911 "2025-08-15T06:07:21Z")
Hi, I am new to Dynatrace. Looking to monitor some logs which present in multiple directory (multi depth). Trying to find a way where can define a single source so it can cover all the matching pattern logs recursively … --- ## [Timestamps in Logs with OneAgent 1.313+](https://community.dynatrace.com/t/timestamps-in-logs-with-oneagent-1-313/52495)
**Author:** [@jgrant](https://community.dynatrace.com/u/jgrant)\ **Replies:** 1\ **Last updated:** [July 16, 2025, 9:24am UTC](https://community.dynatrace.com/t/timestamps-in-logs-with-oneagent-1-313/52495 "2025-07-16T09:24:29Z")
Summary OneAgent 1.313 includes an important change to LogAnalytics logic for timestamp processing of log file content. The new default timezone for automatically recognized timestamp patterns is the local host’s timezo… --- ## [Clarity needed around OpenPipeline Log Ingest Limits](https://community.dynatrace.com/t/clarity-needed-around-openpipeline-log-ingest-limits/52395)
**Author:** [@36Krazyfists](https://community.dynatrace.com/u/36Krazyfists)\ **Replies:** 1\ **Last updated:** [July 9, 2025, 1:36pm UTC](https://community.dynatrace.com/t/clarity-needed-around-openpipeline-log-ingest-limits/52395 "2025-07-09T13:36:38Z")
If you check out the Log Management and Analytics Default limits page here, you’ll see this table: What confuses me is, how can the Content size limit be the same as the Request size limit? A single request can have… --- ## [A call for collaboration! Windows Security Logs Parsing](https://community.dynatrace.com/t/a-call-for-collaboration-windows-security-logs-parsing/52341)
**Author:** [@36Krazyfists](https://community.dynatrace.com/u/36Krazyfists)\ **Replies:** 0\ **Last updated:** [July 3, 2025, 3:19pm UTC](https://community.dynatrace.com/t/a-call-for-collaboration-windows-security-logs-parsing/52341 "2025-07-03T15:19:58Z")
So, we need to start parsing Windows Security logs and, boy oh boy, are they all over the place… Since Microsoft doesn’t seem to stick with dedicated field names and log formats between the various event types, this is … --- ## [Log events vs log metrics combined with metric events](https://community.dynatrace.com/t/log-events-vs-log-metrics-combined-with-metric-events/52063)
**Author:** [@henk\_stobbe](https://community.dynatrace.com/u/henk_stobbe)\ **Replies:** 3\ **Last updated:** [June 12, 2025, 1:41pm UTC](https://community.dynatrace.com/t/log-events-vs-log-metrics-combined-with-metric-events/52063 "2025-06-12T13:41:10Z")
Hello All, I notice people creating log metrics with metric events, after this they set a threshold of above 0 then please create an event. Should in general this not be done with a log event, with the same options? W… [Next page](https://community.dynatrace.com/tag/log-processing/925.md?match_all_tags=true&page=1&tags%5B%5D=log-processing)