Synthetic events

  • Latest Dynatrace
  • Reference
  • Published Sep 22, 2025

Definition of Synthetic events.

Synthetic HTTP monitor execution

Synthetic HTTP monitor execution event

AttributeTypeDescriptionExamples
dt.entity.http_checkstringresource stable
An entity ID of an entity of type HTTP_CHECK.
Tags: entity-id
HTTP_CHECK-A140F3B85BCCBD1A
dt.entity.synthetic_locationstringresource stable
An entity ID of an entity of type SYNTHETIC_LOCATION.
Tags: entity-id
SYNTHETIC_LOCATION-D140F3B85BCCBD1A
dt.security_contextstringresource stable
The security context is used in access permissions to limit the visibility. Learn more about the Dynatrace permission model
Tags: permission
dt.synthetic.batch.idlongexperimental
The identifier of the batch (defined for on-demand executions only).
dt.synthetic.monitor.idstringexperimental
The identifier of the monitor.
HTTP_CHECK-6349B98E1CD87352
event.idstringstable
Unique identifier string of an event; is stable across multiple refreshes and updates.
5547782627070661074_1647601320000
event.kindstringstable
Gives high-level information about what kind of information the event contains without being specific about the contents of the event. It helps to determine the record type of a raw event. 1
Tags: permission
SYNTHETIC_EVENT
event.typestringstable
The unique type identifier of a given event.
Tags: permission
ESXI_HOST_MEMORY_SATURATION; PROCESS_RESTART; CPU_SATURATION; MEMORY_SATURATION; Automation Workflow; AppEngine Functions - Small
event.versionstringstable
Describes the version of the event.
1.0.0
execution.end_timestamptimestampexperimental
The timestamp when execution was finished, in UTC milliseconds.
1629891695487
execution.typestringexperimental
The type of the execution.
on-demand
timestamptimestampstable
The time (UNIX Epoch time in nanoseconds) when the event originated, typically when the source created it. If no original timestamp is available, it will be populated at ingest time and required for all events. In the case of a correlated event (for example, ITIL events), this time could be different from the event.start time, as this time represents the actual timestamp when the "update" for the event was created.
1649822520123123123
1

Fixed value SYNTHETIC_EVENT.

execution.type MUST be one of the following:

ValueDescription
on-creationon-creation
on-demandon-demand
on-demand with customized scripton-demand with customized script
on-updateon-update
re-runre-run
standardstandard
AttributeTypeDescriptionExamples
result.status.categorystringexperimental
The category of the status.
FAIL
result.status.codelongexperimental
Numeric representation of the status.
599
result.status.detailsstringexperimental
Status details.
connection timed out after 5000 ms: google.com
result.status.messagestringexperimental
The message returned by an execution or a status message.
TIMEOUT
result.status.on_demand.detailsstringexperimental
The details of the status.
PERFORMANCE_THRESHOLD_VIOLATION
result.status.on_demand.messagestringexperimental
The on-demand status message.
Success

result.status.category MUST be one of the following:

ValueDescription
FAILExecution fail
NOT_EXECUTEDNot executed
SUCCESSSuccess
UNEXPECTED_ERRORUnexpected error
AttributeTypeDescriptionExamples
result.engine.idlongexperimental
The id of the engine which has executed the monitor.
123
result.executed_steps_countlongexperimental
The number of executed steps.
2
result.failed_step.namestringexperimental
The name of the failed step
Second step
result.failed_step.sequence_idlongdeprecated
The sequence ID of the step. Replaced by result.failed_step.sequence_number
2
result.failed_step.sequence_numberlongexperimental
The sequence id of the step.
2
result.location.typestringexperimental
The type of synthetic location.
private
result.statestringexperimental
Result state of monitor execution.
FAIL

result.location.type MUST be one of the following:

ValueDescription
privatePrivate
publicPublic

result.state MUST be one of the following:

ValueDescription
FAILFail
SUCCESSSuccess
AttributeTypeDescriptionExamples
result.statistics.durationdurationexperimental
The duration of the step/sum of all steps.
456
result.statistics.host_name_resolution_timelongexperimental
The host name resolution time of the step/sum of all steps.
12345
result.statistics.peer_certificate_expiry_datelongexperimental
The peer certificate expiration date.
1741996799000
result.statistics.redirection_timelongexperimental
The redirection time of the step/sum of all steps.
2
result.statistics.redirects_countlongexperimental
The number of redirects of the step/sum of all steps.
266
result.statistics.response_body_size_limit_exceededbooleanexperimental
Set to true in case response body size has been exceeded.
true
result.statistics.response_sizelongexperimental
The response size of the step/sum of all steps.
456
result.statistics.response_status_codelongexperimental
The HTTP status code reported for the execution.
404
result.statistics.start_timestamptimestampexperimental
The start timestamp of the execution.
1629891693487
result.statistics.tcp_connect_timelongexperimental
The tcp connection time of the step/sum of all steps.
12345
result.statistics.time_to_first_bytelongexperimental
The time taken until the first byte of the response is received from the server, relevant application caches, or a local resource. Reported for monitor level, calculated for the sum of all steps.
244
result.statistics.tls_handshake_timelongexperimental
The tls handshake time of the step/sum of all steps.
12345

Synthetic HTTP step execution

Synthetic HTTP step execution event

AttributeTypeDescriptionExamples
dt.entity.http_checkstringresource stable
An entity ID of an entity of type HTTP_CHECK.
Tags: entity-id
HTTP_CHECK-A140F3B85BCCBD1A
dt.entity.http_check_stepstringresource stable
An entity ID of an entity of type HTTP_CHECK_STEP.
Tags: entity-id
HTTP_CHECK_STEP-A140F3B85BCCBD1A
dt.entity.synthetic_locationstringresource stable
An entity ID of an entity of type SYNTHETIC_LOCATION.
Tags: entity-id
SYNTHETIC_LOCATION-D140F3B85BCCBD1A
dt.security_contextstringresource stable
The security context is used in access permissions to limit the visibility. Learn more about the Dynatrace permission model
Tags: permission
dt.synthetic.batch.idlongexperimental
The identifier of the batch (defined for on-demand executions only).
dt.synthetic.monitor.idstringexperimental
The identifier of the monitor.
HTTP_CHECK-6349B98E1CD87352
event.idstringstable
Unique identifier string of an event; is stable across multiple refreshes and updates.
5547782627070661074_1647601320000
event.kindstringstable
Gives high-level information about what kind of information the event contains without being specific about the contents of the event. It helps to determine the record type of a raw event. 1
Tags: permission
SYNTHETIC_EVENT
event.typestringstable
The unique type identifier of a given event.
Tags: permission
ESXI_HOST_MEMORY_SATURATION; PROCESS_RESTART; CPU_SATURATION; MEMORY_SATURATION; Automation Workflow; AppEngine Functions - Small
event.versionstringstable
Describes the version of the event.
1.0.0
execution.end_timestamptimestampexperimental
The timestamp when execution was finished, in UTC milliseconds.
1629891695487
execution.typestringexperimental
The type of the execution.
on-demand
step.namestringexperimental
The name of the step.
Step name
step.sequence_numberlongexperimental
The sequence number of the step (numbered from 0).
0
timestamptimestampstable
The time (UNIX Epoch time in nanoseconds) when the event originated, typically when the source created it. If no original timestamp is available, it will be populated at ingest time and required for all events. In the case of a correlated event (for example, ITIL events), this time could be different from the event.start time, as this time represents the actual timestamp when the "update" for the event was created.
1649822520123123123
1

Fixed value SYNTHETIC_EVENT.

execution.type MUST be one of the following:

ValueDescription
on-creationon-creation
on-demandon-demand
on-demand with customized scripton-demand with customized script
on-updateon-update
re-runre-run
standardstandard
AttributeTypeDescriptionExamples
result.status.categorystringexperimental
The category of the status.
FAIL
result.status.codelongexperimental
Numeric representation of the status.
599
result.status.detailsstringexperimental
Status details.
connection timed out after 5000 ms: google.com
result.status.messagestringexperimental
The message returned by an execution or a status message.
TIMEOUT
result.status.on_demand.detailsstringexperimental
The details of the status.
PERFORMANCE_THRESHOLD_VIOLATION
result.status.on_demand.messagestringexperimental
The on-demand status message.
Success

result.status.category MUST be one of the following:

ValueDescription
FAILExecution fail
NOT_EXECUTEDNot executed
SUCCESSSuccess
UNEXPECTED_ERRORUnexpected error
AttributeTypeDescriptionExamples
result.statistics.durationdurationexperimental
The duration of the step/sum of all steps.
456
result.statistics.host_name_resolution_timelongexperimental
The host name resolution time of the step/sum of all steps.
12345
result.statistics.peer_certificate_expiry_datelongexperimental
The peer certificate expiration date.
1741996799000
result.statistics.redirection_timelongexperimental
The redirection time of the step/sum of all steps.
2
result.statistics.redirects_countlongexperimental
The number of redirects of the step/sum of all steps.
266
result.statistics.response_body_size_limit_exceededbooleanexperimental
Set to true in case response body size has been exceeded.
true
result.statistics.response_sizelongexperimental
The response size of the step/sum of all steps.
456
result.statistics.response_status_codelongexperimental
The HTTP status code reported for the execution.
404
result.statistics.start_timestamptimestampexperimental
The start timestamp of the execution.
1629891693487
result.statistics.tcp_connect_timelongexperimental
The tcp connection time of the step/sum of all steps.
12345
result.statistics.time_to_first_bytelongexperimental
The time taken until the first byte of the response is received from the server, relevant application caches, or a local resource. Reported for monitor level, calculated for the sum of all steps.
244
result.statistics.tls_handshake_timelongexperimental
The tls handshake time of the step/sum of all steps.
12345

Synthetic HTTP step execution details

Synthetic HTTP step execution details event

AttributeTypeDescriptionExamples
custom_logsrecord[]experimental
A collection of custom log lines
dt.entity.http_check_stepstringresource stable
An entity ID of an entity of type HTTP_CHECK_STEP.
Tags: entity-id
HTTP_CHECK_STEP-A140F3B85BCCBD1A
dt.security_contextstringresource stable
The security context is used in access permissions to limit the visibility. Learn more about the Dynatrace permission model
Tags: permission
event.idstringstable
Unique identifier string of an event; is stable across multiple refreshes and updates.
5547782627070661074_1647601320000
event.kindstringstable
Gives high-level information about what kind of information the event contains without being specific about the contents of the event. It helps to determine the record type of a raw event. 1
Tags: permission
SYNTHETIC_EVENT
event.typestringstable
The unique type identifier of a given event.
Tags: permission
ESXI_HOST_MEMORY_SATURATION; PROCESS_RESTART; CPU_SATURATION; MEMORY_SATURATION; Automation Workflow; AppEngine Functions - Small
event.versionstringstable
Describes the version of the event.
1.0.0
step.namestringexperimental
The name of the step.
Step name
step.sequence_numberlongexperimental
The sequence number of the step (numbered from 0).
0
timestamptimestampstable
The time (UNIX Epoch time in nanoseconds) when the event originated, typically when the source created it. If no original timestamp is available, it will be populated at ingest time and required for all events. In the case of a correlated event (for example, ITIL events), this time could be different from the event.start time, as this time represents the actual timestamp when the "update" for the event was created.
1649822520123123123
1

Fixed value SYNTHETIC_EVENT.

AttributeTypeDescriptionExamples
result.statistics.methodstringexperimental
HTTP request method.
GET; POST; HEAD
result.statistics.peer_certificate_detailsstringexperimental
The peer certificate details.
Signature Algorithm: SHA256withRSA
result.statistics.request.header.__key__stringexperimental
HTTP request headers, __key__ being the lowercase HTTP header name, e.g. "http.request.header.accept-encoding". The value is a string.
https://www.foo.bar/; gzip, deflate, br; 1.2.3.4, 1.2.3.5
result.statistics.request_bodystringexperimental
The request body.
request body
result.statistics.resolved_ipsrecord[]experimental
A collection of resolved ips.
result.statistics.response.header.__key__stringexperimental
HTTP response headers, __key__ being the lowercase HTTP header name, e.g. "http.response.header.content-type". The value is a string.
909; text/html; charset=utf-8; abc, def
result.statistics.response_bodystringexperimental
The response body.
response body
result.statistics.response_messagestringexperimental
The response message.
OK
result.statistics.urlstringexperimental
The HTTP request url.
www.dynatrace.com

Synthetic batch status

Synthetic batch status event

AttributeTypeDescriptionExamples
batch.sourcestringexperimental
The source of the batch.
PUBLIC_API
batch.statusstringexperimental
The status of the batch.
Success; Failed
batch_result.durationdurationexperimental
The duration of the batch execution.
456
batch_result.executed_countlongexperimental
The number of triggered executions with the result SUCCESS or FAILED.
5
batch_result.failed_countlongexperimental
The number of triggered executions with the result FAILED.
4
batch_result.failed_to_execute_countlongexperimental
The number of executions that were triggered and not executed because of a problem with the Synthetic engine.
3
batch_result.total_durationdurationexperimental
The sum of duration of the sum of all executions in batch.
1567
batch_result.triggered_countlongexperimental
The number of triggered executions within the batch.
6
batch_result.triggering_problems_countlongexperimental
The number of executions that were not triggered due to some problems.
2
configuration.fail_on_performance_issuebooleanexperimental
Information whether performance issue validation was enabled.
true
configuration.fail_on_ssl_warningbooleanexperimental
Information whether ssl certificate validation was enabled.
true
configuration.processing_modestringexperimental
The execution's processing mode
DISABLE_PROBLEM_DETECTION
configuration.take_screenshot_on_successbooleanexperimental
Information whether the execution should provide a screenshot in case of success.
true
dt.security_contextstringresource stable
The security context is used in access permissions to limit the visibility. Learn more about the Dynatrace permission model
Tags: permission
event.idstringstable
Unique identifier string of an event; is stable across multiple refreshes and updates.
5547782627070661074_1647601320000
event.kindstringstable
Gives high-level information about what kind of information the event contains without being specific about the contents of the event. It helps to determine the record type of a raw event. 1
Tags: permission
SYNTHETIC_EVENT
event.typestringstable
The unique type identifier of a given event.
Tags: permission
ESXI_HOST_MEMORY_SATURATION; PROCESS_RESTART; CPU_SATURATION; MEMORY_SATURATION; Automation Workflow; AppEngine Functions - Small
event.versionstringstable
Describes the version of the event.
1.0.0
failed_executionsrecord[]experimental
A collection of failed execution objects. Information about on-demand executions that failed.
failed_to_executerecord[]experimental
A collection of failed execution objects. Information about on-demand executions that failed to be executed.
metadata.__key__string[]experimental
The metadata properties of the batch. 'key' being the metadata key. The value is a string defined by a user.
["metadata.version": "1.255.20221022"]
timestamptimestampstable
The time (UNIX Epoch time in nanoseconds) when the event originated, typically when the source created it. If no original timestamp is available, it will be populated at ingest time and required for all events. In the case of a correlated event (for example, ITIL events), this time could be different from the event.start time, as this time represents the actual timestamp when the "update" for the event was created.
1649822520123123123
triggered_executionslong[]experimental
A collection of triggered executions ids.
[[12345, 23456]]
triggering_problemsrecord[]experimental
A collection of triggering problem objects. The details of problems encountered while triggering on-demand executions.
user.idstringstable
Unique UUID of a human user. If the system itself has to be represented, the constant 'system' is used.
35ba9499-f87c-4047-962c-14dc32e255e5; system
1

Fixed value SYNTHETIC_EVENT.

batch.source MUST be one of the following:

ValueDescription
PUBLIC_APIAPI
UIUI

batch.status MUST be one of the following:

ValueDescription
FailedFailed
Failed to executeFailed to execute
Not triggeredNot triggered
RunningRunning
SuccessSuccess

configuration.processing_mode MUST be one of the following:

ValueDescription
DISABLE_PROBLEM_DETECTIONDISABLE_PROBLEM_DETECTION
EXECUTIONS_DETAILS_ONLYEXECUTIONS_DETAILS_ONLY
STANDARDSTANDARD

Synthetic browser monitor execution

Synthetic browser monitor execution event

AttributeTypeDescriptionExamples
dt.entity.synthetic_locationstringresource stable
An entity ID of an entity of type SYNTHETIC_LOCATION.
Tags: entity-id
SYNTHETIC_LOCATION-D140F3B85BCCBD1A
dt.entity.synthetic_teststringresource stable
An entity ID of an entity of type SYNTHETIC_TEST.
Tags: entity-id
SYNTHETIC_TEST-A140F3B85BCCBD1A
dt.security_contextstringresource stable
The security context is used in access permissions to limit the visibility. Learn more about the Dynatrace permission model
Tags: permission
dt.synthetic.batch.idlongexperimental
The identifier of the batch (defined for on-demand executions only).
dt.synthetic.monitor.idstringexperimental
The identifier of the monitor.
HTTP_CHECK-6349B98E1CD87352
event.idstringstable
Unique identifier string of an event; is stable across multiple refreshes and updates.
5547782627070661074_1647601320000
event.kindstringstable
Gives high-level information about what kind of information the event contains without being specific about the contents of the event. It helps to determine the record type of a raw event. 1
Tags: permission
SYNTHETIC_EVENT
event.typestringstable
The unique type identifier of a given event.
Tags: permission
ESXI_HOST_MEMORY_SATURATION; PROCESS_RESTART; CPU_SATURATION; MEMORY_SATURATION; Automation Workflow; AppEngine Functions - Small
event.versionstringstable
Describes the version of the event.
1.0.0
execution.end_timestamptimestampexperimental
The timestamp when execution was finished, in UTC milliseconds.
1629891695487
execution.typestringexperimental
The type of the execution.
on-demand
timestamptimestampstable
The time (UNIX Epoch time in nanoseconds) when the event originated, typically when the source created it. If no original timestamp is available, it will be populated at ingest time and required for all events. In the case of a correlated event (for example, ITIL events), this time could be different from the event.start time, as this time represents the actual timestamp when the "update" for the event was created.
1649822520123123123
1

Fixed value SYNTHETIC_EVENT.

execution.type MUST be one of the following:

ValueDescription
on-creationon-creation
on-demandon-demand
on-demand with customized scripton-demand with customized script
on-updateon-update
re-runre-run
standardstandard
AttributeTypeDescriptionExamples
result.status.categorystringexperimental
The category of the status.
FAIL
result.status.codelongexperimental
Numeric representation of the status.
599
result.status.detailsstringexperimental
Status details.
connection timed out after 5000 ms: google.com
result.status.messagestringexperimental
The message returned by an execution or a status message.
TIMEOUT
result.status.on_demand.detailsstringexperimental
The details of the status.
PERFORMANCE_THRESHOLD_VIOLATION
result.status.on_demand.messagestringexperimental
The on-demand status message.
Success

result.status.category MUST be one of the following:

ValueDescription
FAILExecution fail
NOT_EXECUTEDNot executed
SUCCESSSuccess
UNEXPECTED_ERRORUnexpected error
AttributeTypeDescriptionExamples
result.engine.idlongexperimental
The id of the engine which has executed the monitor.
123
result.executed_steps_countlongexperimental
The number of executed steps.
2
result.failed_step.namestringexperimental
The name of the failed step
Second step
result.failed_step.sequence_idlongdeprecated
The sequence ID of the step. Replaced by result.failed_step.sequence_number
2
result.failed_step.sequence_numberlongexperimental
The sequence id of the step.
2
result.location.typestringexperimental
The type of synthetic location.
private
result.statestringexperimental
Result state of monitor execution.
FAIL

result.location.type MUST be one of the following:

ValueDescription
privatePrivate
publicPublic

result.state MUST be one of the following:

ValueDescription
FAILFail
SUCCESSSuccess

Synthetic network availability monitor execution

Synthetic network availability monitor execution event

AttributeTypeDescriptionExamples
dt.entity.multiprotocol_monitorstringresource stable
An entity ID of an entity of type MULTIPROTOCOL_MONITOR.
Tags: entity-id
MULTIPROTOCOL_MONITOR-A140F3B85BCCBD1A
dt.entity.synthetic_locationstringresource stable
An entity ID of an entity of type SYNTHETIC_LOCATION.
Tags: entity-id
SYNTHETIC_LOCATION-D140F3B85BCCBD1A
dt.security_contextstringresource stable
The security context is used in access permissions to limit the visibility. Learn more about the Dynatrace permission model
Tags: permission
dt.synthetic.batch.idlongexperimental
The identifier of the batch (defined for on-demand executions only).
dt.synthetic.monitor.idstringexperimental
The identifier of the monitor.
HTTP_CHECK-6349B98E1CD87352
event.idstringstable
Unique identifier string of an event; is stable across multiple refreshes and updates.
5547782627070661074_1647601320000
event.kindstringstable
Gives high-level information about what kind of information the event contains without being specific about the contents of the event. It helps to determine the record type of a raw event. 1
Tags: permission
SYNTHETIC_EVENT
event.typestringstable
The unique type identifier of a given event.
Tags: permission
ESXI_HOST_MEMORY_SATURATION; PROCESS_RESTART; CPU_SATURATION; MEMORY_SATURATION; Automation Workflow; AppEngine Functions - Small
event.versionstringstable
Describes the version of the event.
1.0.0
execution.end_timestamptimestampexperimental
The timestamp when execution was finished, in UTC milliseconds.
1629891695487
execution.typestringexperimental
The type of the execution.
on-demand
timestamptimestampstable
The time (UNIX Epoch time in nanoseconds) when the event originated, typically when the source created it. If no original timestamp is available, it will be populated at ingest time and required for all events. In the case of a correlated event (for example, ITIL events), this time could be different from the event.start time, as this time represents the actual timestamp when the "update" for the event was created.
1649822520123123123
1

Fixed value SYNTHETIC_EVENT.

execution.type MUST be one of the following:

ValueDescription
on-creationon-creation
on-demandon-demand
on-demand with customized scripton-demand with customized script
on-updateon-update
re-runre-run
standardstandard
AttributeTypeDescriptionExamples
result.status.categorystringexperimental
The category of the status.
FAIL
result.status.codelongexperimental
Numeric representation of the status.
599
result.status.detailsstringexperimental
Status details.
connection timed out after 5000 ms: google.com
result.status.messagestringexperimental
The message returned by an execution or a status message.
TIMEOUT
result.status.on_demand.detailsstringexperimental
The details of the status.
PERFORMANCE_THRESHOLD_VIOLATION
result.status.on_demand.messagestringexperimental
The on-demand status message.
Success

result.status.category MUST be one of the following:

ValueDescription
FAILExecution fail
NOT_EXECUTEDNot executed
SUCCESSSuccess
UNEXPECTED_ERRORUnexpected error
AttributeTypeDescriptionExamples
result.engine.idlongexperimental
The id of the engine which has executed the monitor.
123
result.executed_steps_countlongexperimental
The number of executed steps.
2
result.failed_step.namestringexperimental
The name of the failed step
Second step
result.failed_step.sequence_idlongdeprecated
The sequence ID of the step. Replaced by result.failed_step.sequence_number
2
result.failed_step.sequence_numberlongexperimental
The sequence id of the step.
2
result.location.typestringexperimental
The type of synthetic location.
private
result.statestringexperimental
Result state of monitor execution.
FAIL
result.statistics.durationdurationexperimental
The duration of the step/sum of all steps.
456
result.statistics.start_timestamptimestampexperimental
The start timestamp of the execution.
1629891693487

result.location.type MUST be one of the following:

ValueDescription
privatePrivate
publicPublic

result.state MUST be one of the following:

ValueDescription
FAILFail
SUCCESSSuccess
Related tags
Digital Experience