This API is deprecated. Use the Events API v2 instead.
Lists all of your environment's events and their parameters. Because the possible number of events can be large, the response is limited to 150 events. You can narrow down the output by specifying filtering parameters in your request.
The request produces an application/json payload.
| GET | SaaS | https://{your-environment-id}.live.dynatrace.com/api/v1/events |
| Environment ActiveGate | https://{your-activegate-domain}:9999/e/{your-environment-id}/api/v1/events |
To execute this request, you need an access token with DataExport scope.
To learn how to obtain and use it, see Tokens and authentication.
Start timestamp of the query, in UTC milliseconds.
If not set, 30 days ago from now is used, unless relativeTime is set.
End timestamp of the query, in UTC milliseconds.
If not set, the current timestamp is used, unless relativeTime is set.
The timeframe must not exceed 2 years.
Relative timeframe, back from the current time.
10mins15mins2hours30mins3days5mins6hoursdayhourminmonthweekFilters the resulting set of events by the event type.
APPLICATION_JS_FRAMEWORK_DETECTEDAPPLICATION_OVERLOAD_PREVENTIONAVAILABILITY_EVENTCONNECTION_LOSTCPU_SATURATEDCUSTOM_ALERTCUSTOM_ANNOTATIONCUSTOM_APPLICATION_OVERLOAD_PREVENTIONCUSTOM_APP_CRASH_RATE_INCREASEDCUSTOM_CONFIGURATIONCUSTOM_DEPLOYMENTCUSTOM_INFODATABASE_CONNECTION_FAILUREDEPLOYMENT_CHANGED_CHANGEDEPLOYMENT_CHANGED_NEWDEPLOYMENT_CHANGED_REMOVEDDYNATRACE_INTERNALEBS_VOLUME_HIGH_LATENCYELASTIC_LOAD_BALANCER_HIGH_BACKEND_FAILURE_RATEELASTIC_LOAD_BALANCER_HIGH_FAILURE_RATEELASTIC_LOAD_BALANCER_HIGH_UNHEALTHY_HOST_RATEERROR_EVENTESXI_HOST_VM_MOTION_ARRIVEDESXI_HOST_VM_MOTION_LEFTESXI_HOST_VM_STARTEDESXI_STARTESXI_VM_DISCONNECTEDESXI_VM_MOTIONESXI_VM_POWER_OFFESXI_VM_STARTFAILURE_RATE_INCREASEDHIGH_CONNECTIVITY_FAILURESHIGH_DROPPED_PACKETS_RATEHIGH_GC_ACTIVITYHIGH_LATENCYHIGH_NETWORK_ERROR_RATEHIGH_NETWORK_LOSS_RATEHIGH_NETWORK_UTILIZATIONHOST_CONNECTION_FAILEDHOST_CONNECTION_LOSTHOST_DATASTORE_LOW_DISK_SPACEHOST_DISK_LOW_INODESHOST_GRACEFULLY_SHUTDOWNHOST_LOG_AVAILABILITYHOST_LOG_ERRORHOST_LOG_MATCHEDHOST_LOG_PERFORMANCEHOST_MAINTENANCEHOST_NO_CONNECTIONHOST_OF_SERVICE_UNAVAILABLEHOST_SHUTDOWNHOST_TIMEOUTHTTP_CHECK_GLOBAL_OUTAGEHTTP_CHECK_LOCAL_OUTAGEHTTP_CHECK_TEST_LOCATION_SLOWDOWNINSUFFICIENT_DISK_QUEUE_DEPTHJAVASCRIPT_ERROR_RATE_INCREASEDLAMBDA_FUNCTION_HIGH_ERROR_RATELOG_AVAILABILITYLOG_ERRORLOG_MATCHEDLOG_PERFORMANCELOW_DISK_SPACELOW_STORAGE_SPACEMARKED_FOR_TERMINATIONMEMORY_RESOURCES_EXHAUSTEDMEMORY_SATURATEDMOBILE_APPLICATION_OVERLOAD_PREVENTIONMOBILE_APP_CRASH_RATE_INCREASEDMONITORING_UNAVAILABLEMULTI_PROTOCOL_GLOBAL_OUTAGEMULTI_PROTOCOL_LOCAL_OUTAGEMULTI_PROTOCOL_LOCATION_SLOWDOWNOPENSTACK_HOST_VM_SHUTDOWNOPENSTACK_HOST_VM_STARTEDOPENSTACK_KEYSTONE_SLOWOPENSTACK_KEYSTONE_UNHEALTHYOPENSTACK_VM_LAUNCH_FAILEDOPENSTACK_VM_MOTIONOSI_DOCKER_DEVICEMAPPER_LOW_DATA_SPACEOSI_DOCKER_DEVICEMAPPER_LOW_METADATA_SPACEOVERLOADED_STORAGEPERFORMANCE_EVENTPGI_CRASHED_INFOPGI_HAPROXY_QUEUED_REQUESTS_HIGHPGI_HAPROXY_SESSION_USAGE_HIGHPGI_LOG_MATCHEDPGI_MEMDUMPPGI_MYSQL_SLOW_QUERIES_RATE_HIGHPGI_OF_SERVICE_UNAVAILABLEPGI_RMQ_HIGH_FILE_DESC_USAGEPGI_RMQ_HIGH_MEM_USAGEPGI_RMQ_HIGH_PROCESS_USAGEPGI_RMQ_HIGH_SOCKETS_USAGEPGI_RMQ_LOW_DISK_SPACEPROCESS_CRASHEDPROCESS_CUSTOM_AVAILABILITYPROCESS_CUSTOM_ERRORPROCESS_CUSTOM_PERFORMANCEPROCESS_GROUP_LOW_INSTANCE_COUNTPROCESS_LOG_AVAILABILITYPROCESS_LOG_ERRORPROCESS_LOG_PERFORMANCEPROCESS_RESTARTPROCESS_UNAVAILABLERDS_AZ_FAILOVER_COMPLETEDRDS_AZ_FAILOVER_STARTEDRDS_BACKUP_COMPLETEDRDS_BACKUP_STARTEDRDS_OF_SERVICE_UNAVAILABLERDS_RESTARTRDS_RESTART_SEQUENCERESOURCE_CONTENTIONSERVICE_RESPONSE_TIME_DEGRADEDSLOW_DISKSYNTHETIC_AVAILABILITYSYNTHETIC_NODE_OUTAGESYNTHETIC_PRIVATE_LOCATION_OUTAGESYNTHETIC_SLOWDOWNTHREADS_RESOURCES_EXHAUSTEDUNEXPECTED_HIGH_LOADUNEXPECTED_LOW_LOADUSER_ACTION_DURATION_DEGRADATIONVIRTUAL_MACHINE_SHUTDOWNWEB_CHECK_GLOBAL_OUTAGEWEB_CHECK_LOCAL_OUTAGEFilters the resulting set of events to the events, related to the specified Dynatrace entity.
The response is limited to 150 events, so if you want to receive more you can use the cursor to get the next 150. This parameter should be empty when querying for the first time.
The cursor key can then be found in the nextCursor field of the previous response.
When using the cursor string, it is not necessary to specify the additional parameters, as that info is already encoded within the cursor.
Each event contains at least the following meta information elements and event-specific properties.
EventQueryResult objectEvents of the environment.
Start of the query timeframe.
The cursor for the next 150 events, fitting the specified criteria.
Set this value for the cursor query parameter. Without it you'll get the first 150 events again.
You don't have to specify any additional parameters, because the cursor already contains all of them.
End of the query timeframe.
The total amount of events, fitting the specified criteria.
EventRestEntry objectSet of parameters of the event.
Apart from the general properties mentioned here, which each event has, an actual event has a set of metadata that varies depending on the event type.
The timestamp of the event closure, in UTC milliseconds
The ID of the affected Dynatrace entity.
The name of the affected Dynatrace entity.
The state of the event: open or closed.
CLOSEDOPENThe type of the event.
APPLICATION_JS_FRAMEWORK_DETECTEDAPPLICATION_OVERLOAD_PREVENTIONAVAILABILITY_EVENTCONNECTION_LOSTCPU_SATURATEDCUSTOM_ALERTCUSTOM_ANNOTATIONCUSTOM_APPLICATION_OVERLOAD_PREVENTIONCUSTOM_APP_CRASH_RATE_INCREASEDCUSTOM_CONFIGURATIONCUSTOM_DEPLOYMENTCUSTOM_INFODATABASE_CONNECTION_FAILUREDEPLOYMENT_CHANGED_CHANGEDEPLOYMENT_CHANGED_NEWDEPLOYMENT_CHANGED_REMOVEDDYNATRACE_INTERNALEBS_VOLUME_HIGH_LATENCYELASTIC_LOAD_BALANCER_HIGH_BACKEND_FAILURE_RATEELASTIC_LOAD_BALANCER_HIGH_FAILURE_RATEELASTIC_LOAD_BALANCER_HIGH_UNHEALTHY_HOST_RATEERROR_EVENTESXI_HOST_VM_MOTION_ARRIVEDESXI_HOST_VM_MOTION_LEFTESXI_HOST_VM_STARTEDESXI_STARTESXI_VM_DISCONNECTEDESXI_VM_MOTIONESXI_VM_POWER_OFFESXI_VM_STARTFAILURE_RATE_INCREASEDHIGH_CONNECTIVITY_FAILURESHIGH_DROPPED_PACKETS_RATEHIGH_GC_ACTIVITYHIGH_LATENCYHIGH_NETWORK_ERROR_RATEHIGH_NETWORK_LOSS_RATEHIGH_NETWORK_UTILIZATIONHOST_CONNECTION_FAILEDHOST_CONNECTION_LOSTHOST_DATASTORE_LOW_DISK_SPACEHOST_DISK_LOW_INODESHOST_GRACEFULLY_SHUTDOWNHOST_LOG_AVAILABILITYHOST_LOG_ERRORHOST_LOG_MATCHEDHOST_LOG_PERFORMANCEHOST_MAINTENANCEHOST_NO_CONNECTIONHOST_OF_SERVICE_UNAVAILABLEHOST_SHUTDOWNHOST_TIMEOUTHTTP_CHECK_GLOBAL_OUTAGEHTTP_CHECK_LOCAL_OUTAGEHTTP_CHECK_TEST_LOCATION_SLOWDOWNINSUFFICIENT_DISK_QUEUE_DEPTHJAVASCRIPT_ERROR_RATE_INCREASEDLAMBDA_FUNCTION_HIGH_ERROR_RATELOG_AVAILABILITYLOG_ERRORLOG_MATCHEDLOG_PERFORMANCELOW_DISK_SPACELOW_STORAGE_SPACEMARKED_FOR_TERMINATIONMEMORY_RESOURCES_EXHAUSTEDMEMORY_SATURATEDMOBILE_APPLICATION_OVERLOAD_PREVENTIONMOBILE_APP_CRASH_RATE_INCREASEDMONITORING_UNAVAILABLEMULTI_PROTOCOL_GLOBAL_OUTAGEMULTI_PROTOCOL_LOCAL_OUTAGEMULTI_PROTOCOL_LOCATION_SLOWDOWNOPENSTACK_HOST_VM_SHUTDOWNOPENSTACK_HOST_VM_STARTEDOPENSTACK_KEYSTONE_SLOWOPENSTACK_KEYSTONE_UNHEALTHYOPENSTACK_VM_LAUNCH_FAILEDOPENSTACK_VM_MOTIONOSI_DOCKER_DEVICEMAPPER_LOW_DATA_SPACEOSI_DOCKER_DEVICEMAPPER_LOW_METADATA_SPACEOVERLOADED_STORAGEPERFORMANCE_EVENTPGI_CRASHED_INFOPGI_HAPROXY_QUEUED_REQUESTS_HIGHPGI_HAPROXY_SESSION_USAGE_HIGHPGI_LOG_MATCHEDPGI_MEMDUMPPGI_MYSQL_SLOW_QUERIES_RATE_HIGHPGI_OF_SERVICE_UNAVAILABLEPGI_RMQ_HIGH_FILE_DESC_USAGEPGI_RMQ_HIGH_MEM_USAGEPGI_RMQ_HIGH_PROCESS_USAGEPGI_RMQ_HIGH_SOCKETS_USAGEPGI_RMQ_LOW_DISK_SPACEPROCESS_CRASHEDPROCESS_CUSTOM_AVAILABILITYPROCESS_CUSTOM_ERRORPROCESS_CUSTOM_PERFORMANCEPROCESS_GROUP_LOW_INSTANCE_COUNTPROCESS_LOG_AVAILABILITYPROCESS_LOG_ERRORPROCESS_LOG_PERFORMANCEPROCESS_RESTARTPROCESS_UNAVAILABLERDS_AZ_FAILOVER_COMPLETEDRDS_AZ_FAILOVER_STARTEDRDS_BACKUP_COMPLETEDRDS_BACKUP_STARTEDRDS_OF_SERVICE_UNAVAILABLERDS_RESTARTRDS_RESTART_SEQUENCERESOURCE_CONTENTIONSERVICE_RESPONSE_TIME_DEGRADEDSLOW_DISKSYNTHETIC_AVAILABILITYSYNTHETIC_NODE_OUTAGESYNTHETIC_PRIVATE_LOCATION_OUTAGESYNTHETIC_SLOWDOWNTHREADS_RESOURCES_EXHAUSTEDUNEXPECTED_HIGH_LOADUNEXPECTED_LOW_LOADUSER_ACTION_DURATION_DEGRADATIONVIRTUAL_MACHINE_SHUTDOWNWEB_CHECK_GLOBAL_OUTAGEWEB_CHECK_LOCAL_OUTAGEThe encoded ID of the event. The format is eventID_startTime.
You should use the value from this field when you need an event ID.
The impact level of the event. It shows what is affected by the problem: infrastructure, service, or application.
APPLICATIONENVIRONMENTINFRASTRUCTURESERVICEThe id of the resource the event occurred on.
The name of the resource the event occurred on.
The severity of the event.
AVAILABILITYCUSTOM_ALERTERRORMONITORING_UNAVAILABLEPERFORMANCERESOURCE_CONTENTIONThe timestamp of the event detection, in UTC milliseconds.
TagInfo objectTag of a Dynatrace entity.
The origin of the tag, such as AWS or Cloud Foundry.
Custom tags use the CONTEXTLESS value.
AWSAWS_GENERICAZURECLOUD_FOUNDRYCONTEXTLESSENVIRONMENTGOOGLE_CLOUDKUBERNETESThe key of the tag.
Custom tags have the tag value here.
The value of the tag.
Not applicable to custom tags.
{"events": [{"endTime": 1521542929000,"entityId": "HOST-0000000000000007","entityName": "Example Host","eventStatus": "OPEN","eventType": "SLOW_DISK","id": "5915682011263205071_1521042929000","impactLevel": "INFRASTRUCTURE","severityLevel": "PERFORMANCE","source": "builtin","startTime": 1521042929000,"tags": [{"context": "CONTEXTLESS","key": "exampleTag"}]},{"endTime": 1521542929000,"entityId": "HOST-0000000000000007","entityName": "Example Host","eventStatus": "OPEN","eventType": "SLOW_DISK","id": "5915682011263205071_1521042929000","impactLevel": "INFRASTRUCTURE","severityLevel": "PERFORMANCE","source": "builtin","startTime": 1521042929000,"tags": [{"context": "CONTEXTLESS","key": "exampleTag"}]}],"from": 1521042929000,"nextCursor": "AgEBAAFn5IIFrgEAAAFofwDTrgAAAQAcMTY4N2RhYzViZTAtZmUxODEwOWQ5YTA1MTIyNQ%3D%3D","to": 1521542929000,"totalEventCount": 2}
In this example, the request queries all the ERROR_EVENT events that occurred during the last 24 hours. The result is truncated to two events.
The API token is passed in the Authorization header.
curl -X GET \'https://mySampleEnv.live.dynatrace.com/api/v1/events?eventType=ERROR_EVENT&relativeTime=day' \-H 'Authorization: Api-Token dt0c01.abc123.abcdefjhij1234567890'
https://mySampleEnv.live.dynatrace.com/api/v1/events?eventType=ERROR_EVENT&relativeTime=day
{"nextEventStartTms": null,"nextEventId": null,"nextCursor": null,"from": 1530703635653,"to": 1533295635653,"totalEventCount": 25,"events": [{"eventId": -8338439733889003014,"startTime": 1532328338475,"endTime": 1532328638475,"entityId": "HOST-E4D1E5F46E239F21","entityName": "l-8.dyna.trace","severityLevel": "ERROR","impactLevel": "INFRASTRUCTURE","eventType": "ERROR_EVENT","eventStatus": "CLOSED","tags": [{"context": "CONTEXTLESS","key": "deploy"},{"context": "CONTEXTLESS","key": "room23"}],"id": "-8338439733889003014_1532328338475","annotationDescription": "testTrigger","correlationId": "67da0a4293956e55","source": "restTest"},{"eventId": 3092227520312561338,"startTime": 1531832640600,"endTime": 1531836240600,"entityId": "HOST-CE6A2253598EA88D","entityName": "q2.docker.l5","severityLevel": "ERROR","impactLevel": "INFRASTRUCTURE","eventType": "ERROR_EVENT","eventStatus": "CLOSED","tags": [{"context": "CONTEXTLESS","key": "ServiceNow"}],"id": "3092227520312561338_1531832640600","customProperties": {"Property 2": "value 2","Property 1": "value 1","Property 3": "value 3"},"annotationDescription": "package is damaged","correlationId": "1b79973c6902b486","source": "myAPI"}]}
200