Dynatrace Add-on for Splunk
Overview
Details
Because Splunk has both historical and realtime data, this app allows you to apply predictive analytics to your APM data, correlate Dynatrace data with all of your other Splunk data (wire data, logs, server data, infrastructure data, etc.) and mine application performance monitoring data using Search Processing Language (SPL). The app collects data using Dynatrace's REST APIs.
Dynatrace Add-On for Splunk
What's Needed?
-
Downloads
- Dynatrace App for Splunk
- Dynatrace Add-on for Splunk
-
Dynatrace Information Required
- Dynatrace API tenanat URL
- Dynatrace API Authorization Token
Dynatrace Performance Metrics
Installation
- The installation consists of installing both the Dynatrace Add-on for Splunk and the Dynatrace App for Splunk.
- The Add-on is responsible for executing the rest API calls and collecting the data from Dynatrace
- The App provides a collection of dashboards and saved searches.
To install, navigate to Apps --> Manage Apps and select the “Install app from File” button. Specify the location of the file you downloaded and install it.
Configuration
-
The Dynatrace Add-on for Splunk contains four distinct input types.
- Timeseries Metrics: a pre-defined collection of Dynatrace metrics that feed the App's dashboards as well as ITSI’s APM Module (Note: by default the Dynatrace App for Splunk assumes all data is written to a "dynatrace" index)
- Entity: Selectively choose which entities to collect data for (Applications, Services, Hosts, Processes &/or Process Groups)
- Problem: Details about problems that Dynatrace detects within a given environment
- Timeseries Single Metric: Any single timeseries metric that Dynatrace tracks
-
Each input requires you to specify the following:
- Input Name
- Pollling interval
- Splunk Index to use
- Dynatrace account URL
- Dynatrace API authorization token
Create a new Input for the data you wish to collect via the Inputs menu -> Create New Input option.
Start Searching
Once the Dynatrace Add-on for Splunk is installed and configured you can execute searches using:
sourcetype="dynatrace:*"Sourcecode can be found at the following Github Repository
Release Notes
Version 1.1.0
1. This is the first release with Python3 support for Splunk v8.x and beyond. It will continue to work with Python2 as well.
Version 1.0.5
-Updated eventtypes.conf that was creating incorrect entities in ITSI.
Version 1.0.4
Added ability to disable SSL certificate verification (for Dynatrace Managed environments using self-signed certificates)
Corrected Add-on display name in Splunk
Version 1.0.3
Added TA version header
Added mandatory HTTPS for API calls*
*If you are running a previous version you will need to reconfigure your Dynatrace tenant input.