Business Analytics

bizflow.analysis.label

string

experimentalThe label for the bizflow.analysis.value field.

completeness

bizflow.analysis.value

long

experimentalA value representing the number of conversions or unique flows that were fulfilled, which has been calculated within the specified timeframe.

44300

bizflow.errors.value

long

experimentalA value representing the number of business exceptions, which have occurred within the specified timeframe.

45

bizflow.kpi.label

string

experimentalA label representing a numeric KPI attribute for the mapping event to determine the business KPI based on its value.

revenue; total mortgage; total items

bizflow.name

string

experimentalA name of a business flow.

Order to cash process

bizflow.query_timeframe.hours

long

experimentalA KPI monitoring field, which represents the timeframe in which the data for the Business Flow KPIs gets calculated and ingested into Grail.

96

event.type

string

stableHigh level, domain specific classification criteria for the event. For a BizFlow KPI bizevent, this value must be bizflow.kpis. ²Tags: permission

bizflow.kpis

event.category

string

stableUse to augment event.kind and event.type fields with an additional level of business event classification criteria.

checkout

event.kind

string

stableGives high-level information about what kind of information the event contains without being specific about the contents of the event. It helps to determine the record type of a raw event. ¹Tags: permission

BIZ_EVENT

event.type

string

stableHigh level, domain specific classification criteria for the event. ³Tags: permission

com.easytrade.purchase

aws.region

string

resource stableA specific geographical AWS Cloud location.Tags: primary-field

us-east-1

carbon.emissions

double

experimentalTotal emissions in grams of CO₂ equivalent generated by the energy consumption estimations including not only computing but also data center cooling, lighting, and other consumptions.

cloud.region

string

resource deprecatedDeprecated in favor of cloud specific fields, such as aws.region, azure.location, gcp.region, etc.

us-east-1

energy.measurement.cpu_wasted

double

experimentalEnergy wasted (Wh) based on CPU utilization waste excluding any data center energy overheads.

12.3

energy.measurement.total_wasted

double

experimentalEnergy wasted (Wh) based on CPU utilization waste. Includes data center cooling, lighting and other consumptions to the total energy wasted.

14.02

event.id

string

stableUniquely identifies the event within the event.provider realm (event.provider and event.id should together define a unique identification criterion for the event).

5547782627070661074_1647601320000

event.start

string

stableThe event start timestamp in UTC (given in Grail preferred Linux timestamp nano precision format).

16481073970000

gcp.region

string

resource stableA region is a specific geographical location where you can host your resources.Tags: primary-field

europe-west3

k8s.cpu.allocatable

long

experimentalAmount of CPU allocatable.

64

k8s.monitoring_mode

string

experimentalThe monitoring mode of the Kubernetes cluster.

API-only; App-only; Cloud native full stack

k8s.nodes.count

long

experimentalThe total amount of Kubernetes nodes.

5

monitoring.mode

string

experimentalType of the monitoring mode reported by Dynatrace.

fullstack_host; infrastructure

aws.region

string

resource stableA specific geographical AWS Cloud location.Tags: primary-field

us-east-1

carbon.emissions

double

experimentalTotal emissions in grams of CO₂ equivalent generated by the energy consumption estimations including not only computing but also data center cooling, lighting, and other consumptions.

cloud.region

string

resource deprecatedDeprecated in favor of cloud specific fields, such as aws.region, azure.location, gcp.region, etc.

us-east-1

dt.entity.kubernetes_cluster

string

resource stableAn entity ID of an entity of type KUBERNETES_CLUSTER.Tags: entity-id

KUBERNETES_CLUSTER-E0D8F94D9065F24F

energy.measurement.total

double

experimentalTotal amount of energy in Wh estimated for the energy consumption estimated for compute and for data center cooling, lighting, or other consumption.

event.end

string

stableThe event end timestamp in UTC (given in Grail preferred Linux timestamp nano precision format).

16481073970000

event.provider

string

stableThe domain-specific identification of the event originating component. ¹Tags: permission

dynatrace.biz.carbon

event.type

string

stableHigh-level, domain-specific classification criteria for the event. For a carbon Kubernetes namespace bizevent, this value must be carbon.measurement.k8s.namespace ²Tags: permission

carbon.measurement.k8s.namespace

k8s.cluster.name

string

resource stableThe user-defined name of the cluster in Dynatrace. Doesn't need to be unique or immutable.Tags: permission primary-field

unguard-dev; acme-prod10

k8s.namespace.name

string

resource stableThe name of the namespace that the pod is running in.Tags: permission primary-field

default; kube-system

k8s.services.count

long

experimentalThe total amount of Kubernetes services.

13

monitoring.mode

string

experimentalType of the monitoring mode reported by Dynatrace.

fullstack_host; infrastructure

aws.region

string

resource stableA specific geographical AWS Cloud location.Tags: primary-field

us-east-1

carbon.emissions

double

experimentalTotal emissions in grams of CO₂ equivalent generated by the energy consumption estimations including not only computing but also data center cooling, lighting, and other consumptions.

cloud.region

string

resource deprecatedDeprecated in favor of cloud specific fields, such as aws.region, azure.location, gcp.region, etc.

us-east-1

dt.entity.kubernetes_cluster

string

resource stableAn entity ID of an entity of type KUBERNETES_CLUSTER.Tags: entity-id

KUBERNETES_CLUSTER-E0D8F94D9065F24F

energy.measurement.cpu_wasted

double

experimentalEnergy wasted (Wh) based on CPU utilization waste excluding any data center energy overheads.

12.3

energy.measurement.total_wasted

double

experimentalEnergy wasted (Wh) based on CPU utilization waste. Includes data center cooling, lighting and other consumptions to the total energy wasted.

14.02

event.id

string

stableUniquely identifies the event within the event.provider realm (event.provider and event.id should together define a unique identification criterion for the event).

5547782627070661074_1647601320000

event.start

string

stableThe event start timestamp in UTC (given in Grail preferred Linux timestamp nano precision format).

16481073970000

gcp.region

string

resource stableA region is a specific geographical location where you can host your resources.Tags: primary-field

europe-west3

k8s.containers.count

long

experimentalThe total amount of Kubernetes containers.

63

k8s.memory.allocatable

double

experimentalAmount of memory allocatable.

256.0

k8s.namespace.name

string

resource stableThe name of the namespace that the pod is running in.Tags: permission primary-field

default; kube-system

k8s.pods.count

long

experimentalThe total amount of Kubernetes pods.

58

timestamp

timestamp

stableThe time (UNIX Epoch time in nanoseconds) when the event originated, typically when the source created it. If no original timestamp is available, it will be populated at ingest time and required for all events. In the case of a correlated event (for example, ITIL events), this time could be different from the event.start time, as this time represents the actual timestamp when the "update" for the event was created.

1649822520123123123

aws.region

string

resource stableA specific geographical AWS Cloud location.Tags: primary-field

us-east-1

carbon.emissions

double

experimentalTotal emissions in grams of CO₂ equivalent generated by the energy consumption estimations including not only computing but also data center cooling, lighting, and other consumptions.

carbon.intensity.last_update

string

experimentalDate of the last update known from the carbon intensity value.

1970-01-01T00:00:00.000Z

cloud.provider

string

resource stableName of the cloud provider.

alibaba_cloud

dt.entity.host

string

resource stableAn entity ID of an entity of type HOST.Tags: entity-id

HOST-E0D8F94D9065F24F

energy.cpu_idle_threshold

double

experimentalCPU idle threshold setting (in percentage) in effect at the time of event ingestion.

5.0

energy.measurement.computing

double

deprecatedDeprecated, do not use it! Use energy.measurement.machine instead.

energy.measurement.cpu

double

experimentalEnergy estimation (Wh) consumed by CPUs in a host based on CPU utilization metrics. Value is optional.

energy.measurement.cpu_wasted

double

experimentalEnergy wasted (Wh) based on CPU utilization waste excluding any data center energy overheads.

12.3

energy.measurement.infrastructure_overhead

double

experimentalTotal amount of energy in Wh estimated for the energy consumption estimated for data center cooling, lighting or other consumptions, not including computing energy consumption.

energy.measurement.machine

double

experimentalTotal amount of energy in Wh estimated only for the computing part, not including other energy consumption from data center cooling, lighting or other consumptions not related to compute.

energy.measurement.missing_metrics

string

experimentalOptional list of missing infrastructure utilization metrics

io; network

energy.measurement.total

double

experimentalTotal amount of energy in Wh estimated for the energy consumption estimated for compute and for data center cooling, lighting, or other consumption.

energy.pue

double

experimentalPower Usage Effectiveness (PUE) value used on the calculation to include data center cooling, lighting and other consumptions to the total energy estimated for compute.

1.58

energy.pue.origin

string

experimentalOrigin of Power Usage Effectiveness (PUE) value.

global; aws; gcp; azure; custom

event.id

string

stableUniquely identifies the event within the event.provider realm (event.provider and event.id should define a unique identification critera for the event).

5547782627070661074_1647601320000

event.start

string

stableThe event start timestamp in UTC (given in Grail preferred Linux timestamp nano precision format).

16481073970000

execution.method

string

experimentalWhat kind of trigger is used to execute estimation.

workflow-v2; workflow-v3; actions-v4

host.disk.size

double

experimentalThe total size of disk storage accessible to a host in bytes.

system.model

string

experimentalThe system model of the instrumented host. The value is optional as it is not always available

t3.medium; m5.large; Dell Precision 5540

timestamp

timestamp

stableThe time (UNIX Epoch time in nanoseconds) when the event originated, typically when the source created it. If no original timestamp is available, it will be populated at ingest time and required for all events. In the case of a correlated event (for example, ITIL events), this time could be different from the event.start time, as this time represents the actual timestamp when the "update" for the event was created.

1649822520123123123

utilization.io.average

double

**deprecatedReplaced with host.disk.size attribute, which more accurately reflects the role of disk storage in the carbon calculation.**Average of storage usage metric from the host used in the calculation. Value is optional as a bizevent can be ingested directly with energy consumption from a device that doesn't require energy estimation from utilization metrics or maybe this metric is missing.

utilization.network.average

double

**deprecatedDeprecated. Use utilization.networkTotal.average instead.**Average of network usage metric from the host used in the calculation. Value is optional as a bizevent can be ingested directly with energy consumption from a device that doesn't require energy estimation from utilization metrics or maybe this metric is missing.

utilization.networkPublic.average

double

experimentalThe sum of public download and upload of a host in Bytes per second (B/s), i.e. to network interface cards with public IPs.

compliance.cifs_impacted.ids

string

experimentalA distinct list of all the unique identifiers of the business flows configured as critical or important functions (CIFs) affected by the incident.

vu9U3hXa3q0AAAABAChhcHA6ZHluYXRyYWNlLmJpei5mbG93OpCpei1mbG93LXNldHRpbmdzAAZ0ZW5hbnQABnRlbmFudAAkZTAyYmM4ZWMtYjIxNy0zYjAyLWI4ZjctMTg5MGU5OTUwOTYwvu9U3hXa2a2

compliance.framework

string

experimentalThe name to display of the compliance framework.

DORA

compliance.incident.comment

string

experimentalThe human-readable display of the comment added when classifying the incident in Compliance Assistant as major according to DORA.

The incident was classified as major due to insights on reputational damage and user impact.

compliance.incident.duration_criteria

boolean

experimentalIndicates if the DORA classification criteria of incident duration has been breached.

true; false

compliance.incident.economic_impact_criteria

boolean

experimentalIndicates if the DORA classification criteria of incident economic impact has been breached.

true; false

compliance.incident.time.classified

timestamp

experimentalThe time (UNIX Epoch time in nanoseconds) when the incident has been classified as major in line with DORA requirements.

1649822520123123123

event.kind

string

stableGives high-level information about what kind of information the event contains without being specific about the contents of the event. It helps to determine the record type of a raw event.Tags: permission

BIZ_EVENT

event.type

string

stableHigh-level, domain-specific classification criteria for the event. For a Compliance Assistant incident bizevent, the value must be compliance.incident.Tags: permission

compliance.incident

problem.event.id

string

experimentalUnique identifier string of the underlying dt.davis.problem.

5547782627070661074_1647601320000

timestamp

timestamp

stableThe time (UNIX Epoch time in nanoseconds) when the event originated, typically when the source created it. If no original timestamp is available, it will be populated at ingest time and required for all events. In the case of a correlated event (for example, ITIL events), this time could be different from the event.start time, as this time represents the actual timestamp when the "update" for the event was created.

1649822520123123123

aws.region

string

resource stableA specific geographical AWS Cloud location.Tags: primary-field

us-east-1

cloud.provider

string

resource stableName of the cloud provider.

alibaba_cloud

event.id

string

stableUniquely identifies the event within the event.provider realm (event.provider and event.id should define a unique identification critera for the event).

5547782627070661074_1647601320000

event.type

string

stableHigh level, domain specific classification criteria for the event. In this type of event, it should be cost.list.price.Tags: permission

cost.list.price

price.currency

string

experimentalThree letter code of currency used on the total hourly cost of the instance, following ISO 4217.

USD

resource.category

string

experimentalCategory of the resource extracted from public price list of cloud vendor. Its value is optional.

instance; faas; ec2; storage

resource.instance.memory_total

long

experimental(Optional) Total memory of the instance on price list, expressed in bytes.

454555

resource.instance.type

string

experimentalAWS, GCE or Azure machine-type, retrieved from instance metadata service. In Semantic Dictionary this attribute appears in dt.entity.host in system.model value

m5.large

aws.region

string

resource stableA specific geographical AWS Cloud location.Tags: primary-field

us-east-1

cloud.provider

string

resource stableName of the cloud provider.

alibaba_cloud

cost.currency

string

experimentalThree letter code of currency used on the total hourly cost of the instance, following ISO 4217.

EUR

dt.entity.host

string

resource stableAn entity ID of an entity of type HOST.Tags: entity-id

HOST-E0D8F94D9065F24F

event.id

string

stableUnique identifier string of an event; is stable across multiple refreshes and updates.

5547782627070661074_1647601320000

event.start

string

stableThe event start timestamp in UTC (given in Grail preferred Linux timestamp nano precision format).

1649822520123123123

gcp.region

string

resource stableA region is a specific geographical location where you can host your resources.Tags: primary-field

europe-west3

price.total

double

experimentalTotal cost per hour of the resource based on public price list.

0.384

resource.instance.cpu_cores

long

experimentalNumber of CPU cores on instance price list

4

resource.instance.os_type

string

experimentalType of operating system in the instance on price list

Linux; Windows

timestamp

timestamp

stableThe time (UNIX Epoch time in nanoseconds) when the event originated, typically when the source created it. If no original timestamp is available, it will be populated at ingest time and required for all events. In the case of a correlated event (for example, ITIL events), this time could be different from the event.start time, as this time represents the actual timestamp when the "update" for the event was created.

1649822520123123123

aws.account.id

string

resource stableThe 12-digit number, such as 123456789012, that uniquely identifies an AWS account.Tags: permission primary-field

123456789012

aws.region

string

resource stableA specific geographical AWS Cloud location.Tags: primary-field

us-east-1

aws.x_Discounts

double

experimentalThe discount applied to the AWS service.

0.02

aws.x_ServiceCode

string

experimentalThe unique identifier or code assigned to the AWS service.

AmazonEC2; AmazonS3

azure.availability_zones

string[]

resource experimentalAvailability zones of Azure cloud resource.

['1']

azure.resource.group

string

resource stableA resource group is a container that holds related resources for an Azure solution.Tags: permission primary-field

demo-backend-rg

cloud.availability_zone

string

resource deprecatedDeprecated in favor of cloud specific fields, such as aws.availability_zone, azure.availability_zones, gcp.zone, etc.

us-east-1a

cloud.region

string

resource deprecatedDeprecated in favor of cloud specific fields, such as aws.region, azure.location, gcp.region, etc.

us-east-1

event.id

string

stableUnique identifier string of an event; is stable across multiple refreshes and updates.

5547782627070661074_1647601320000

event.start

string

stableThe event start timestamp in UTC (given in Grail preferred Linux timestamp nano precision format).

1649822520123123123

focus.AvailabilityZone

string

experimentalProvider-assigned identifier for a physically separated and isolated area within a region that provides high availability and fault tolerance. Availability Zone is commonly used for scenarios like analyzing cross-zone data transfer usage and the corresponding cost based on where resources are deployed.

us-east-1a; us-west-2b

focus.BillingAccountId

string

experimentalThe identifier assigned to a billing account by the provider.

example-account-id-1; example-account-id-2

focus.BillingAccountType

string

experimentalThe provider-assigned readable display name to identify the type of billing account.

Account Type 1; Account Type 2

focus.BillingPeriodEnd

string

experimentalThe exclusive end date and time of a billing period.

2024-02-01T00:00:00Z; 2024-03-01T00:00:00Z

focus.CapacityReservationId

string

experimentalA provider-assigned identifier for a capacity reservation. Capacity reservations are used to ensure that resources are available when needed.

cr-12345; cr-67890

focus.ChargeCategory

string

experimentalThe category of the charge.

Usage; Purchase; Tax; Credit; Adjustment

focus.ChargeDescription

string

experimentalA description of the charge.

Monthly compute charge; Annual storage charge

focus.ChargePeriodEnd

string

experimentalThe end date and time of the charge period.

2024-12-31T23:59:59Z; 2025-12-31T23:59:59Z

focus.CommitmentDiscountCategory

string

experimentalThe category of the commitment discount.

Spend; Usage

focus.CommitmentDiscountName

string

experimentalThe name of the commitment discount.

Discount A; Discount B

focus.CommitmentDiscountStatus

string

experimentalThe status of the commitment discount.

Used; Unused

focus.CommitmentDiscountUnit

string

experimentalThe unit of the commitment discount.

hours; GB

focus.ConsumedUnit

string

experimentalThe unit of the consumed quantity.

hours; GB

focus.ContractedUnitPrice

double

experimentalThe unit price agreed upon in a contract for a specific service or resource.

0.05; 0.1

focus.InvoiceId

string

experimentalAn identifier for an invoice encapsulating some or all charges in the corresponding billing period for a given billing account.

example-invoice-id-1; example-invoice-id-2

focus.ListCost

double

experimentalThe list cost of a service or resource before any discounts or credits are applied.

100.0; 200.0

focus.PricingCategory

string

experimentalThe category of the pricing.

Standard; Dynamic; Committed; Other

focus.PricingCurrencyContractedUnitPrice

double

experimentalThe agreed-upon unit price for a single Pricing Unit of the associated SKU, inclusive of negotiated discounts, while excluding negotiated commitment discounts or any other discounts.

0.09; 0.12

focus.PricingCurrencyListUnitPrice

double

experimentalThe suggested provider-published unit price for a single Pricing Unit of the associated SKU, exclusive of any discounts.

0.03; 0.05

focus.PricingUnit

string

experimentalThe unit of the pricing quantity.

hours; GB

focus.PublisherName

string

experimentalThe publisher of the service or resource.

Publisher A; Publisher B

focus.RegionName

string

experimentalThe name of the region.

US East; US West

focus.ResourceName

string

experimentalThe name of the resource.

Resource A; Resource B

focus.ServiceCategory

string

experimentalThe category of the service.

AI and Machine Learning; Analytics; Business Applications; Compute; Databases; Developer Tools; Multicloud; Identity; Integration; Internet of Things; Management and Governance; Media; Migration; Mobile; Networking; Security; Storage; Web; Other

focus.ServiceSubcategory

string

experimentalThe subcategory of the service.

AI Platforms; Bots; Generative AI; Machine Learning; Natural Language Processing; Other (AI and Machine Learning); Analytics Platforms; Business Intelligence; Data Processing; Search; Streaming Analytics; Other (Analytics); Productivity and Collaboration; Other (Business Applications); Containers; End User Computing; Quantum Compute; Serverless Compute; Virtual Machines; Other (Compute); Caching; Data Warehouses; Ledger Databases; NoSQL Databases; Relational Databases; Time Series Databases; Other (Databases); Developer Platforms; Continuous Integration and Deployment; Development Environments; Source Code Management; Quality Assurance; Other (Developer Tools); Identity and Access Management; Other (Identity); API Management; Messaging; Workflow Orchestration; Other (Integration); IoT Analytics; IoT Platforms; Other (Internet of Things); Architecture; Compliance; Cost Management; Data Governance; Disaster Recovery; Endpoint Management; Observability; Support; Other (Management and Governance); Content Creation; Gaming; Media Streaming; Mixed Reality; Other (Media); Data Migration; Resource Migration; Other (Migration); Other (Mobile); Multicloud Integration; Other (Multicloud); Application Networking; Content Delivery; Network Connectivity; Network Infrastructure; Network Routing; Network Security; Other (Networking); Secret Management; Security Posture Management; Threat Detection and Response; Other (Security); Backup Storage; Block Storage; File Storage; Object Storage; Storage Platforms; Other (Storage); Application Platforms; Other (Web); Other (Other)

focus.SkuMeter

string

experimentalThe meter associated with the SKU.

meter-12345; meter-67890

focus.SkuPriceId

string

experimentalA provider-assigned identifier for the SKU price.

price-id-12345; price-id-67890

focus.SubAccountName

string

experimentalThe name of the sub-account.

Sub Account A; Sub Account B

focus.Tags

string

experimentalProvider-defined or user-defined tags.

Tag A; Tag B

gcp.project.id

string

resource stableIdentifier of the GCP project associated with this resource.Tags: permission primary-field

dynatrace-gcp-extension

gcp.zone

string

resource stableA zone is a subset of a region. Each region has three or more zones.

europe-west3-c

timestamp

timestamp

stableThe time (UNIX Epoch time in nanoseconds) when the event originated, typically when the source created it. If no original timestamp is available, it will be populated at ingest time and required for all events. In the case of a correlated event (for example, ITIL events), this time could be different from the event.start time, as this time represents the actual timestamp when the "update" for the event was created.

1649822520123123123