Synthetic events

Definition of Synthetic events.

Synthetic HTTP monitor execution

Synthetic HTTP monitor execution event

Attribute
Type
Description
Examples
dt.entity.http_check
string
stable
An entity ID of an entity of type HTTP_CHECK.
Tags: entity-id
HTTP_CHECK-A140F3B85BCCBD1A
dt.entity.synthetic_location
string
stable
An entity ID of an entity of type SYNTHETIC_LOCATION.
Tags: entity-id
SYNTHETIC_LOCATION-D140F3B85BCCBD1A
dt.security_context
string
stable
The security context is used in access permissions to limit the visibility. Learn more about the Dynatrace permission model
Tags: permission
dt.synthetic.batch.id
long
experimental
The identifier of the batch (defined for on-demand executions only).
dt.synthetic.monitor.id
string
experimental
The identifier of the monitor.
HTTP_CHECK-6349B98E1CD87352
event.id
string
stable
Unique identifier string of an event, is stable across multiple refreshes and updates.
5547782627070661074_1647601320000
event.kind
string
stable
Gives high-level information about what kind of information the event contains without being specific to the contents of the event. It helps to determine the record type of a raw event. 1
Tags: permission
SYNTHETIC_EVENT
event.type
string
stable
The unique type identifier of a given event.
Tags: permission
ESXI_HOST_MEMORY_SATURATION; PROCESS_RESTART; CPU_SATURATION; MEMORY_SATURATION; Automation Workflow; AppEngine Functions - Small
event.version
string
stable
Describes the version of the event.
1.0.0
execution.end_timestamp
timestamp
experimental
The timestamp when execution was finished, in UTC milliseconds.
1629891695487
execution.type
string
experimental
The type of the execution.
on-demand
timestamp
timestamp
stable
The time (UNIX Epoch time in nanoseconds) when the event originated, typically when the source created it. If no original timestamp is available, it will be populated at ingest time and required for all events. In the case of a correlated event (for example, ITIL events), this time could be different from the event.start time, as this time represents the actual timestamp when the "update" for the event was created.
1649822520123123123
1

Fixed value SYNTHETIC_EVENT.

execution.type MUST be one of the following:

Value
Description
on-creation
on-creation
on-demand
on-demand
on-demand with customized script
on-demand with customized script
on-update
on-update
re-run
re-run
standard
standard
Attribute
Type
Description
Examples
result.status.code
long
experimental
Numeric representation of the status.
599
result.status.details
string
experimental
Status details.
connection timed out after 5000 ms: google.com
result.status.message
string
experimental
The message returned by an execution or a status message.
TIMEOUT
result.status.on_demand.details
string
experimental
The details of the status.
PERFORMANCE_THRESHOLD_VIOLATION
result.status.on_demand.message
string
experimental
The on-demand status message.
Success
Attribute
Type
Description
Examples
result.engine.id
long
experimental
The id of the engine which has executed the monitor.
123
result.executed_steps_count
long
experimental
The number of executed steps.
2
result.failed_step.name
string
experimental
The name of the failed step
Second step
result.failed_step.sequence_id
long
experimental
The sequence id of the step.
2
result.location.type
string
experimental
The type of synthetic location.
private
result.state
string
experimental
Result state of monitor execution.
FAIL

result.location.type MUST be one of the following:

Value
Description
private
Private
public
Public

result.state MUST be one of the following:

Value
Description
FAIL
Fail
SUCCESS
Success
Attribute
Type
Description
Examples
result.statistics.duration
duration
experimental
The duration of the step/sum of all steps.
456
result.statistics.host_name_resolution_time
long
experimental
The host name resolution time of the step/sum of all steps.
12345
result.statistics.peer_certificate_expiry_date
long
experimental
The peer certificate expiration date.
1741996799000
result.statistics.redirection_time
long
experimental
The redirection time of the step/sum of all steps.
2
result.statistics.redirects_count
long
experimental
The number of redirects of the step/sum of all steps.
266
result.statistics.response_body_size_limit_exceeded
boolean
experimental
Set to true in case response body size has been exceeded.
true
result.statistics.response_size
long
experimental
The response size of the step/sum of all steps.
456
result.statistics.response_status_code
long
experimental
The HTTP status code reported for the execution.
404
result.statistics.start_timestamp
timestamp
experimental
The start timestamp of the execution.
1629891693487
result.statistics.tcp_connect_time
long
experimental
The tcp connection time of the step/sum of all steps.
12345
result.statistics.time_to_first_byte
long
experimental
The time taken until the first byte of the response is received from the server, relevant application caches, or a local resource. Reported for monitor level, calculated for the sum of all steps.
244
result.statistics.tls_handshake_time
long
experimental
The tls handshake time of the step/sum of all steps.
12345

Synthetic HTTP step execution

Synthetic HTTP step execution event

Attribute
Type
Description
Examples
dt.entity.http_check
string
stable
An entity ID of an entity of type HTTP_CHECK.
Tags: entity-id
HTTP_CHECK-A140F3B85BCCBD1A
dt.entity.http_check_step
string
stable
An entity ID of an entity of type HTTP_CHECK_STEP.
Tags: entity-id
HTTP_CHECK_STEP-A140F3B85BCCBD1A
dt.entity.synthetic_location
string
stable
An entity ID of an entity of type SYNTHETIC_LOCATION.
Tags: entity-id
SYNTHETIC_LOCATION-D140F3B85BCCBD1A
dt.security_context
string
stable
The security context is used in access permissions to limit the visibility. Learn more about the Dynatrace permission model
Tags: permission
dt.synthetic.batch.id
long
experimental
The identifier of the batch (defined for on-demand executions only).
dt.synthetic.monitor.id
string
experimental
The identifier of the monitor.
HTTP_CHECK-6349B98E1CD87352
event.id
string
stable
Unique identifier string of an event, is stable across multiple refreshes and updates.
5547782627070661074_1647601320000
event.kind
string
stable
Gives high-level information about what kind of information the event contains without being specific to the contents of the event. It helps to determine the record type of a raw event. 1
Tags: permission
SYNTHETIC_EVENT
event.type
string
stable
The unique type identifier of a given event.
Tags: permission
ESXI_HOST_MEMORY_SATURATION; PROCESS_RESTART; CPU_SATURATION; MEMORY_SATURATION; Automation Workflow; AppEngine Functions - Small
event.version
string
stable
Describes the version of the event.
1.0.0
execution.end_timestamp
timestamp
experimental
The timestamp when execution was finished, in UTC milliseconds.
1629891695487
execution.type
string
experimental
The type of the execution.
on-demand
step.name
string
experimental
The name of the step.
Step name
step.sequence_number
long
experimental
The sequence number of the step (numbered from 0).
0
timestamp
timestamp
stable
The time (UNIX Epoch time in nanoseconds) when the event originated, typically when the source created it. If no original timestamp is available, it will be populated at ingest time and required for all events. In the case of a correlated event (for example, ITIL events), this time could be different from the event.start time, as this time represents the actual timestamp when the "update" for the event was created.
1649822520123123123
1

Fixed value SYNTHETIC_EVENT.

execution.type MUST be one of the following:

Value
Description
on-creation
on-creation
on-demand
on-demand
on-demand with customized script
on-demand with customized script
on-update
on-update
re-run
re-run
standard
standard
Attribute
Type
Description
Examples
result.status.code
long
experimental
Numeric representation of the status.
599
result.status.details
string
experimental
Status details.
connection timed out after 5000 ms: google.com
result.status.message
string
experimental
The message returned by an execution or a status message.
TIMEOUT
result.status.on_demand.details
string
experimental
The details of the status.
PERFORMANCE_THRESHOLD_VIOLATION
result.status.on_demand.message
string
experimental
The on-demand status message.
Success
Attribute
Type
Description
Examples
result.statistics.duration
duration
experimental
The duration of the step/sum of all steps.
456
result.statistics.host_name_resolution_time
long
experimental
The host name resolution time of the step/sum of all steps.
12345
result.statistics.peer_certificate_expiry_date
long
experimental
The peer certificate expiration date.
1741996799000
result.statistics.redirection_time
long
experimental
The redirection time of the step/sum of all steps.
2
result.statistics.redirects_count
long
experimental
The number of redirects of the step/sum of all steps.
266
result.statistics.response_body_size_limit_exceeded
boolean
experimental
Set to true in case response body size has been exceeded.
true
result.statistics.response_size
long
experimental
The response size of the step/sum of all steps.
456
result.statistics.response_status_code
long
experimental
The HTTP status code reported for the execution.
404
result.statistics.start_timestamp
timestamp
experimental
The start timestamp of the execution.
1629891693487
result.statistics.tcp_connect_time
long
experimental
The tcp connection time of the step/sum of all steps.
12345
result.statistics.time_to_first_byte
long
experimental
The time taken until the first byte of the response is received from the server, relevant application caches, or a local resource. Reported for monitor level, calculated for the sum of all steps.
244
result.statistics.tls_handshake_time
long
experimental
The tls handshake time of the step/sum of all steps.
12345

Synthetic HTTP step execution details

Synthetic HTTP step execution details event

Attribute
Type
Description
Examples
custom_logs
record[]
experimental
A collection of custom log lines
dt.entity.http_check_step
string
stable
An entity ID of an entity of type HTTP_CHECK_STEP.
Tags: entity-id
HTTP_CHECK_STEP-A140F3B85BCCBD1A
dt.security_context
string
stable
The security context is used in access permissions to limit the visibility. Learn more about the Dynatrace permission model
Tags: permission
event.id
string
stable
Unique identifier string of an event, is stable across multiple refreshes and updates.
5547782627070661074_1647601320000
event.kind
string
stable
Gives high-level information about what kind of information the event contains without being specific to the contents of the event. It helps to determine the record type of a raw event. 1
Tags: permission
SYNTHETIC_EVENT
event.type
string
stable
The unique type identifier of a given event.
Tags: permission
ESXI_HOST_MEMORY_SATURATION; PROCESS_RESTART; CPU_SATURATION; MEMORY_SATURATION; Automation Workflow; AppEngine Functions - Small
event.version
string
stable
Describes the version of the event.
1.0.0
step.name
string
experimental
The name of the step.
Step name
step.sequence_number
long
experimental
The sequence number of the step (numbered from 0).
0
timestamp
timestamp
stable
The time (UNIX Epoch time in nanoseconds) when the event originated, typically when the source created it. If no original timestamp is available, it will be populated at ingest time and required for all events. In the case of a correlated event (for example, ITIL events), this time could be different from the event.start time, as this time represents the actual timestamp when the "update" for the event was created.
1649822520123123123
1

Fixed value SYNTHETIC_EVENT.

Attribute
Type
Description
Examples
result.statistics.method
string
experimental
HTTP request method.
GET; POST; HEAD
result.statistics.peer_certificate_details
string
experimental
The peer certificate details.
Signature Algorithm: SHA256withRSA
result.statistics.request.header.__key__
string
experimental
HTTP request headers, __key__ being the lowercase HTTP header name, e.g. "http.request.header.accept-encoding". The value is a string.
https://www.foo.bar/; gzip, deflate, br; 1.2.3.4, 1.2.3.5
result.statistics.request_body
string
experimental
The request body.
request body
result.statistics.resolved_ips
record[]
experimental
A collection of resolved ips.
result.statistics.response.header.__key__
string
experimental
HTTP response headers, __key__ being the lowercase HTTP header name, e.g. "http.response.header.content-type". The value is a string.
909; text/html; charset=utf-8; abc, def
result.statistics.response_body
string
experimental
The response body.
response body
result.statistics.response_message
string
experimental
The response message.
OK
result.statistics.url
string
experimental
The HTTP request url.
www.dynatrace.com

Synthetic batch status

Synthetic batch status event

Attribute
Type
Description
Examples
batch.source
string
experimental
The source of the batch.
PUBLIC_API
batch.status
string
experimental
The status of the batch.
Success; Failed
batch_result.duration
duration
experimental
The duration of the batch execution.
456
batch_result.executed_count
long
experimental
The number of triggered executions with the result SUCCESS or FAILED.
5
batch_result.failed_count
long
experimental
The number of triggered executions with the result FAILED.
4
batch_result.failed_to_execute_count
long
experimental
The number of executions that were triggered and not executed because of a problem with the Synthetic engine.
3
batch_result.total_duration
duration
experimental
The sum of duration of the sum of all executions in batch.
1567
batch_result.triggered_count
long
experimental
The number of triggered executions within the batch.
6
batch_result.triggering_problems_count
long
experimental
The number of executions that were not triggered due to some problems.
2
configuration.fail_on_performance_issue
boolean
experimental
Information whether performance issue validation was enabled.
true
configuration.fail_on_ssl_warning
boolean
experimental
Information whether ssl certificate validation was enabled.
true
configuration.processing_mode
string
experimental
The execution's processing mode
DISABLE_PROBLEM_DETECTION
configuration.take_screenshot_on_success
boolean
experimental
Information whether the execution should provide a screenshot in case of success.
true
dt.security_context
string
stable
The security context is used in access permissions to limit the visibility. Learn more about the Dynatrace permission model
Tags: permission
event.id
string
stable
Unique identifier string of an event, is stable across multiple refreshes and updates.
5547782627070661074_1647601320000
event.kind
string
stable
Gives high-level information about what kind of information the event contains without being specific to the contents of the event. It helps to determine the record type of a raw event. 1
Tags: permission
SYNTHETIC_EVENT
event.type
string
stable
The unique type identifier of a given event.
Tags: permission
ESXI_HOST_MEMORY_SATURATION; PROCESS_RESTART; CPU_SATURATION; MEMORY_SATURATION; Automation Workflow; AppEngine Functions - Small
event.version
string
stable
Describes the version of the event.
1.0.0
failed_executions
record[]
experimental
A collection of failed execution objects. Information about on-demand executions that failed.
failed_to_execute
record[]
experimental
A collection of failed execution objects. Information about on-demand executions that failed to be executed.
metadata.__key__
string[]
experimental
The metadata properties of the batch. 'key' being the metadata key. The value is a string defined by a user.
["metadata.version": "1.255.20221022"]
timestamp
timestamp
stable
The time (UNIX Epoch time in nanoseconds) when the event originated, typically when the source created it. If no original timestamp is available, it will be populated at ingest time and required for all events. In the case of a correlated event (for example, ITIL events), this time could be different from the event.start time, as this time represents the actual timestamp when the "update" for the event was created.
1649822520123123123
triggered_executions
long[]
experimental
A collection of triggered executions ids.
[[12345, 23456]]
triggering_problems
record[]
experimental
A collection of triggering problem objects. The details of problems encountered while triggering on-demand executions.
user.id
string
stable
Unique UUID of a human user. If the system itself has to be represented, the constant 'system' is used.
35ba9499-f87c-4047-962c-14dc32e255e5; system
1

Fixed value SYNTHETIC_EVENT.

batch.source MUST be one of the following:

Value
Description
PUBLIC_API
API
UI
UI

batch.status MUST be one of the following:

Value
Description
Failed
Failed
Failed to execute
Failed to execute
Not triggered
Not triggered
Running
Running
Success
Success

configuration.processing_mode MUST be one of the following:

Value
Description
DISABLE_PROBLEM_DETECTION
DISABLE_PROBLEM_DETECTION
EXECUTIONS_DETAILS_ONLY
EXECUTIONS_DETAILS_ONLY
STANDARD
STANDARD

Synthetic browser monitor execution

Synthetic browser monitor execution event

Attribute
Type
Description
Examples
dt.entity.synthetic_location
string
stable
An entity ID of an entity of type SYNTHETIC_LOCATION.
Tags: entity-id
SYNTHETIC_LOCATION-D140F3B85BCCBD1A
dt.entity.synthetic_test
string
stable
An entity ID of an entity of type SYNTHETIC_TEST.
Tags: entity-id
SYNTHETIC_TEST-A140F3B85BCCBD1A
dt.security_context
string
stable
The security context is used in access permissions to limit the visibility. Learn more about the Dynatrace permission model
Tags: permission
dt.synthetic.batch.id
long
experimental
The identifier of the batch (defined for on-demand executions only).
dt.synthetic.monitor.id
string
experimental
The identifier of the monitor.
HTTP_CHECK-6349B98E1CD87352
event.id
string
stable
Unique identifier string of an event, is stable across multiple refreshes and updates.
5547782627070661074_1647601320000
event.kind
string
stable
Gives high-level information about what kind of information the event contains without being specific to the contents of the event. It helps to determine the record type of a raw event. 1
Tags: permission
SYNTHETIC_EVENT
event.type
string
stable
The unique type identifier of a given event.
Tags: permission
ESXI_HOST_MEMORY_SATURATION; PROCESS_RESTART; CPU_SATURATION; MEMORY_SATURATION; Automation Workflow; AppEngine Functions - Small
event.version
string
stable
Describes the version of the event.
1.0.0
execution.end_timestamp
timestamp
experimental
The timestamp when execution was finished, in UTC milliseconds.
1629891695487
execution.type
string
experimental
The type of the execution.
on-demand
timestamp
timestamp
stable
The time (UNIX Epoch time in nanoseconds) when the event originated, typically when the source created it. If no original timestamp is available, it will be populated at ingest time and required for all events. In the case of a correlated event (for example, ITIL events), this time could be different from the event.start time, as this time represents the actual timestamp when the "update" for the event was created.
1649822520123123123
1

Fixed value SYNTHETIC_EVENT.

execution.type MUST be one of the following:

Value
Description
on-creation
on-creation
on-demand
on-demand
on-demand with customized script
on-demand with customized script
on-update
on-update
re-run
re-run
standard
standard
Attribute
Type
Description
Examples
result.status.code
long
experimental
Numeric representation of the status.
599
result.status.details
string
experimental
Status details.
connection timed out after 5000 ms: google.com
result.status.message
string
experimental
The message returned by an execution or a status message.
TIMEOUT
result.status.on_demand.details
string
experimental
The details of the status.
PERFORMANCE_THRESHOLD_VIOLATION
result.status.on_demand.message
string
experimental
The on-demand status message.
Success
Attribute
Type
Description
Examples
result.engine.id
long
experimental
The id of the engine which has executed the monitor.
123
result.executed_steps_count
long
experimental
The number of executed steps.
2
result.failed_step.name
string
experimental
The name of the failed step
Second step
result.failed_step.sequence_id
long
experimental
The sequence id of the step.
2
result.location.type
string
experimental
The type of synthetic location.
private
result.state
string
experimental
Result state of monitor execution.
FAIL

result.location.type MUST be one of the following:

Value
Description
private
Private
public
Public

result.state MUST be one of the following:

Value
Description
FAIL
Fail
SUCCESS
Success

Synthetic network availability monitor execution

Synthetic network availability monitor execution event

Attribute
Type
Description
Examples
dt.entity.multiprotocol_monitor
string
stable
An entity ID of an entity of type MULTIPROTOCOL_MONITOR.
Tags: entity-id
MULTIPROTOCOL_MONITOR-A140F3B85BCCBD1A
dt.entity.synthetic_location
string
stable
An entity ID of an entity of type SYNTHETIC_LOCATION.
Tags: entity-id
SYNTHETIC_LOCATION-D140F3B85BCCBD1A
dt.security_context
string
stable
The security context is used in access permissions to limit the visibility. Learn more about the Dynatrace permission model
Tags: permission
dt.synthetic.batch.id
long
experimental
The identifier of the batch (defined for on-demand executions only).
dt.synthetic.monitor.id
string
experimental
The identifier of the monitor.
HTTP_CHECK-6349B98E1CD87352
event.id
string
stable
Unique identifier string of an event, is stable across multiple refreshes and updates.
5547782627070661074_1647601320000
event.kind
string
stable
Gives high-level information about what kind of information the event contains without being specific to the contents of the event. It helps to determine the record type of a raw event. 1
Tags: permission
SYNTHETIC_EVENT
event.type
string
stable
The unique type identifier of a given event.
Tags: permission
ESXI_HOST_MEMORY_SATURATION; PROCESS_RESTART; CPU_SATURATION; MEMORY_SATURATION; Automation Workflow; AppEngine Functions - Small
event.version
string
stable
Describes the version of the event.
1.0.0
execution.end_timestamp
timestamp
experimental
The timestamp when execution was finished, in UTC milliseconds.
1629891695487
execution.type
string
experimental
The type of the execution.
on-demand
timestamp
timestamp
stable
The time (UNIX Epoch time in nanoseconds) when the event originated, typically when the source created it. If no original timestamp is available, it will be populated at ingest time and required for all events. In the case of a correlated event (for example, ITIL events), this time could be different from the event.start time, as this time represents the actual timestamp when the "update" for the event was created.
1649822520123123123
1

Fixed value SYNTHETIC_EVENT.

execution.type MUST be one of the following:

Value
Description
on-creation
on-creation
on-demand
on-demand
on-demand with customized script
on-demand with customized script
on-update
on-update
re-run
re-run
standard
standard
Attribute
Type
Description
Examples
result.status.code
long
experimental
Numeric representation of the status.
599
result.status.details
string
experimental
Status details.
connection timed out after 5000 ms: google.com
result.status.message
string
experimental
The message returned by an execution or a status message.
TIMEOUT
result.status.on_demand.details
string
experimental
The details of the status.
PERFORMANCE_THRESHOLD_VIOLATION
result.status.on_demand.message
string
experimental
The on-demand status message.
Success
Attribute
Type
Description
Examples
result.engine.id
long
experimental
The id of the engine which has executed the monitor.
123
result.executed_steps_count
long
experimental
The number of executed steps.
2
result.failed_step.name
string
experimental
The name of the failed step
Second step
result.failed_step.sequence_id
long
experimental
The sequence id of the step.
2
result.location.type
string
experimental
The type of synthetic location.
private
result.state
string
experimental
Result state of monitor execution.
FAIL
result.statistics.duration
duration
experimental
The duration of the step/sum of all steps.
456
result.statistics.start_timestamp
timestamp
experimental
The start timestamp of the execution.
1629891693487

result.location.type MUST be one of the following:

Value
Description
private
Private
public
Public

result.state MUST be one of the following:

Value
Description
FAIL
Fail
SUCCESS
Success