Splunk integration with Dynatrace SaaS

[sangeetha_mitta]

Hi,

We have got a requirement to integrate Splunk with Dynatrace OneAgent (SaaS).

Could you please guide us with the integration procedure, any different methods to integrate, and any dependencies? If possible please provide any screenshots if available.

Thanks&Regards

Sangeetha

[skrystosik]

But what do you want to push to splunk from DT? User Sessions? Problems via Webhook?

Sebastian

[nj_njoku · Accepted solution]

Hi Sangeetha,

The easiest way to do this is to set up the Dynatrace App for Splunk and the Dynatrace Add-on for Splunk.

• The Add-on is responsible for executing the rest API calls and collecting the data from Dynatrace
• The App provides a collection of dashboards and saved searches

The Dynatrace Add-on for Splunk contains four distinct input types.

• Timeseries Metrics: a pre-defined collection of Dynatrace metrics that feed the App's dashboards as well as ITSI’s APM Module (Note: by default the Dynatrace App for Splunk assumes all data is written to a "dynatrace" index)
• Entity: Selectively choose which entities to collect data for (Applications, Services, Hosts, Processes &/or Process Groups)
• Problem: Details about problems that Dynatrace detects within a given environment
• Timeseries Single Metric: Any single timeseries metric that Dynatrace tracks

See links below for details

Dynatrace App for Splunk

Dynatrace Add-on for Splunk

Thanks

NJ

[l_morillo_gonza]

Hi, has anyone been able to send the user session data from dynatrace to splunk? using the app and the add-on?

[bill_scheuernst]

We are currently using the plugin, but I'm really more interested in exporting user session data. I've been told to point DT to Splunk's endpoint. Still trying to determine what that is.

[aoliva]

@sebastian k.

@William S.
Have you guys been able to figure this out? Like you, I'm trying to push user session data from DT to Splunk but I'm trying to figure out how to set up an endpoint in Splunk. I was able to do this with ElasticSearch easily, but I'm having difficulties with Splunk.

[aoliva]

Hi guys, this may be what you need: https://docs.splunk.com/Documentation/Splunk/latest/Data/UsetheHTTPEventCollector#HEC_functionality_...

[julien_egron]

It seems the plug-in does not permit to request USQL API but only timeseries ...

Any update on this ?

[hceylan]

Is this plugin use v1 or v2 api on Dynatrace?

[Slawa]

Do we have a solution for importing Splunk logs into Dynatrace?

[AntonPineiro]

Hi,

You have these options to ingest logs into Dynatrace.

Best regards

[Slawa]

Thanks) I know these DIY options,
I am looking for a DYNATRACE solution like an extension or ready-to-go scrips.