OpenPipeline Ingest API - POST Custom security event endpoint (legacy)

Latest Dynatrace
Reference
1min

Migrate by September 2025

This endpoint (/custom/events.security/{endpoint}) is planned to be deprecated. Migrate your configuration to /custom/security.events/{endpoint} by end of September 2025. The legacy endpoints will remain available until the migration is complete.

For a full overview of what's changing and step-by-step guidance on how to migrate, follow the instructions in the Grail security table migration guide.

Configures custom endpoints to ingest security events.

The request consumes an application/json payload.

POST SaaS https://{your-environment-id}.live.dynatrace.com/platform/ingest/custom/events.security/{endpoint}

Authentication

To execute this request, you need an access token with openpipeline.events_security.custom scope.

To learn how to obtain and use it, see Tokens and authentication.

Parameters

Parameter	Type	Description	In	Required
endpoint	string	The endpoint defined via OpenPipeline Configuration API or the OpenPipeline app.	path	required
body	Events	The JSON body of the request. Contains the events for ingest.	body	required

Request body objects

The `Events` object

The events to be ingested. This can either be a list of events, or a single event.

Element	Type	Description	Required
<*>	object[]	List of events that will get ingested.	optional

Request body JSON model

This is a model of the request body, showing the possible elements. It has to be adjusted for usage in an actual request.

[
  {
    "event.id": 1,
    "additionalProp1": "bar",
    "additionalProp2": "foo",
    "additionalProp3": [
      {
        "prop1": "string",
        "prop2": 1
      }
    ]
  },
  {
    "event.id": 2,
    "additionalProp1": 123.45,
    "additionalProp2": "lorem",
    "additionalProp3": [
      {
        "prop1": "string",
        "prop2": 1
      }
    ]
  }
]

Response

Response codes

Code	Type	Description
202	-	Accepted. Response doesn't have a body.
400	ErrorResponseEnvelope	Failed. The input is invalid.
404	ErrorResponseEnvelope	Failed. Endpoint not found.
413	ErrorResponseEnvelope	Failed. Content too large.
429	ErrorResponseEnvelope	Failed. Too many requests.
5XX	ErrorResponseEnvelope	Server-side error.