Dynatrace Add-on for Splunk
Overview
Details
Because Splunk has both historical and realtime data, this app allows you to apply predictive analytics to your APM data, correlate Dynatrace data with all of your other Splunk data (wire data, logs, server data, infrastructure data, etc.) and mine application performance monitoring data using Search Processing Language (SPL). The app collects data using Dynatrace's REST APIs.
Dynatrace Add-On for Splunk
What's Needed?
-
Downloads
- Dynatrace App for Splunk
- Dynatrace Add-on for Splunk
-
Dynatrace Information Required
- Dynatrace API tenanat URL
- Dynatrace API Authorization Token
Dynatrace Performance Metrics
Installation
- The installation consists of installing both the Dynatrace Add-on for Splunk and the Dynatrace App for Splunk.
- The Add-on is responsible for executing the rest API calls and collecting the data from Dynatrace
- The App provides a collection of dashboards and saved searches.
To install, navigate to Apps --> Manage Apps and select the “Install app from File” button. Specify the location of the file you downloaded and install it.
Configuration
-
The Dynatrace Add-on for Splunk contains four distinct input types.
- Timeseries Metrics: a pre-defined collection of Dynatrace metrics that feed the App's dashboards as well as ITSI’s APM Module (Note: by default the Dynatrace App for Splunk assumes all data is written to a "dynatrace" index)
- Entity: Selectively choose which entities to collect data for (Applications, Services, Hosts, Processes &/or Process Groups)
- Problem: Details about problems that Dynatrace detects within a given environment
- Timeseries Single Metric: Any single timeseries metric that Dynatrace tracks
-
Each input requires you to specify the following:
- Input Name
- Pollling interval
- Splunk Index to use
- Dynatrace account URL
- Dynatrace API authorization token
Create a new Input for the data you wish to collect via the Inputs menu -> Create New Input option.
Start Searching
Once the Dynatrace Add-on for Splunk is installed and configured you can execute searches using:
sourcetype="dynatrace:*"
Release Notes
Version 2.1.6
- Changed entity_details to pull all data from optional fields.
- Fixed synthetic test bug
- Refactored code for organization
Full change log:
https://github.com/dconnett-splunk/splunk-add-on-for-dynatrace/compare/v2.1.5...v2.1.6
Version 2.1.5
V2 API is now located under two input types
1. Dynatrace API Version 2
2. Dynatrace Timeseries Metrics API v2
Once you create an API Version 2 Input, you can select which endpoint you want to collect from.
- Added support for SyntheticTestsV2 and SyntheticExecutionsV2
- Added unit, dimensions, dimensions and dimension map to MetricsV2
- Added EntityV2 details
- Added support for MetricSelectors in MetricsV2
Added support for custom certificate verification add your RootCA certificate to $SPLUNK_HOME/etc/apps/$DynatraceAddOn/local/cert.pem
Bugs fixed:
* Missing data for paged results
* Fixed issue where Dynatrace Collection Interval for metricsV2 would always pull 2 hours of data, regardless of time set by user.
* This will reduce data usage drastically for metrics
* Proxy settings not respected for v2 Endpoints.
* Timezone calculations inconsistent use of UTC vs local.
Version 2.0.1
Changes for 2.0
Added Support for Dynatrace APIv2 for the following Endpoints:
* Metrics
* Entities
* Events
* Problems
* Synthetic Locations
Known Issues:
Entities do not contain all information
Version 1.2.2
*WARNING READ BEFORE UPGRADING to 1.2.x*
We are changed the way the Dynatrace Add-on for Splunk stores credentials in 1.2.x. It now uses a centralized storage methodology.
If upgrading from versions previous to 1.2, you will need to reconfigure all of your inputs after upgrading to this release.
Step 1: Navigate to "Dynatrace Add-on" -> "Configuration" -> "Add Account" (Add your Dynatrace tenant and token here)
Step 2: Navigate to "Dynatrace Add-on" -> "Inputs"
Step 3: For each input click "Actions" -> "Edit" -> Select your new Dynatrace Account defined in Step 1.
Changes for 1.2.2
Added knowledge objects from the Dynatrace App
Added compatibility for the Splunk APM Content Pack
Version 1.2
*WARNING READ BEFORE UPGRADING to 1.2*
We are changing the way the Dynatrace Add-on for Splunk stores credentials in this build. It now uses a centralized storage methodology.
You will need to reconfigure all of your inputs after upgrading to this release.
Step 1: Navigate to "Dynatrace Add-on" -> "Configuration" -> "Add Account" (Add your Dynatrace tenant and token here)
Step 2: Navigate to "Dynatrace Add-on" -> "Inputs"
Step 3: For each input click "Actions" -> "Edit" -> Select your new Dynatrace Account defined in Step 1.
Version 1.1.2
Removed indexes.conf for cloud certification.
Version 1.1.1
Resolved file permissions.
Version 1.1.0
- This is the first release with Python3 support for Splunk v8.x and beyond. It will continue to work with Python2 as well.
Version 1.0.5
-Updated eventtypes.conf that was creating incorrect entities in ITSI.
Version 1.0.4
Added ability to disable SSL certificate verification (for Dynatrace Managed environments using self-signed certificates)
Corrected Add-on display name in Splunk
Version 1.0.3
Added TA version header
Added mandatory HTTPS for API calls
If you are running a previous version you will need to reconfigure your Dynatrace tenant input.