Events API v1 - GET events feed
This API is deprecated. Use the Events API v2 instead.
Lists all of your environment's events and their parameters. Because the possible number of events can be large, the response is limited to 150 events. You can narrow down the output by specifying filtering parameters in your request.
The request produces an application/json payload.
| GET | SaaS | https://{your-environment-id}.live.dynatrace.com/api/v1/events |
| Environment ActiveGate | https://{your-activegate-domain}:9999/e/{your-environment-id}/api/v1/events |
Authentication
To execute this request, you need an access token with DataExport scope.
To learn how to obtain and use it, see Tokens and authentication.
Parameters
Start timestamp of the query, in UTC milliseconds.
If not set, 30 days ago from now is used, unless relativeTime is set.
End timestamp of the query, in UTC milliseconds.
If not set, the current timestamp is used, unless relativeTime is set.
The timeframe must not exceed 2 years.
Relative timeframe, back from the current time.
10mins15mins2hours30mins3days5mins6hoursdayhourminmonthweek
Filters the resulting set of events by the event type.
APPLICATION_JS_FRAMEWORK_DETECTEDAPPLICATION_OVERLOAD_PREVENTIONAVAILABILITY_EVENTCONNECTION_LOSTCPU_SATURATEDCUSTOM_ALERTCUSTOM_ANNOTATIONCUSTOM_APPLICATION_OVERLOAD_PREVENTIONCUSTOM_APP_CRASH_RATE_INCREASEDCUSTOM_CONFIGURATIONCUSTOM_DEPLOYMENTCUSTOM_INFODATABASE_CONNECTION_FAILUREDEPLOYMENT_CHANGED_CHANGEDEPLOYMENT_CHANGED_NEWDEPLOYMENT_CHANGED_REMOVEDDYNATRACE_INTERNALEBS_VOLUME_HIGH_LATENCYELASTIC_LOAD_BALANCER_HIGH_BACKEND_FAILURE_RATEELASTIC_LOAD_BALANCER_HIGH_FAILURE_RATEELASTIC_LOAD_BALANCER_HIGH_UNHEALTHY_HOST_RATEERROR_EVENTESXI_HOST_VM_MOTION_ARRIVEDESXI_HOST_VM_MOTION_LEFTESXI_HOST_VM_STARTEDESXI_STARTESXI_VM_DISCONNECTEDESXI_VM_MOTIONESXI_VM_POWER_OFFESXI_VM_STARTFAILURE_RATE_INCREASEDHIGH_CONNECTIVITY_FAILURESHIGH_DROPPED_PACKETS_RATEHIGH_GC_ACTIVITYHIGH_LATENCYHIGH_NETWORK_ERROR_RATEHIGH_NETWORK_LOSS_RATEHIGH_NETWORK_UTILIZATIONHOST_CONNECTION_FAILEDHOST_CONNECTION_LOSTHOST_DATASTORE_LOW_DISK_SPACEHOST_DISK_LOW_INODESHOST_GRACEFULLY_SHUTDOWNHOST_LOG_AVAILABILITYHOST_LOG_ERRORHOST_LOG_MATCHEDHOST_LOG_PERFORMANCEHOST_MAINTENANCEHOST_NO_CONNECTIONHOST_OF_SERVICE_UNAVAILABLEHOST_SHUTDOWNHOST_TIMEOUTHTTP_CHECK_GLOBAL_OUTAGEHTTP_CHECK_LOCAL_OUTAGEHTTP_CHECK_TEST_LOCATION_SLOWDOWNINSUFFICIENT_DISK_QUEUE_DEPTHJAVASCRIPT_ERROR_RATE_INCREASEDLAMBDA_FUNCTION_HIGH_ERROR_RATELOG_AVAILABILITYLOG_ERRORLOG_MATCHEDLOG_PERFORMANCELOW_DISK_SPACELOW_STORAGE_SPACEMARKED_FOR_TERMINATIONMEMORY_RESOURCES_EXHAUSTEDMEMORY_SATURATEDMOBILE_APPLICATION_OVERLOAD_PREVENTIONMOBILE_APP_CRASH_RATE_INCREASEDMONITORING_UNAVAILABLEMULTI_PROTOCOL_GLOBAL_OUTAGEMULTI_PROTOCOL_LOCAL_OUTAGEMULTI_PROTOCOL_LOCATION_SLOWDOWNOPENSTACK_HOST_VM_SHUTDOWNOPENSTACK_HOST_VM_STARTEDOPENSTACK_KEYSTONE_SLOWOPENSTACK_KEYSTONE_UNHEALTHYOPENSTACK_VM_LAUNCH_FAILEDOPENSTACK_VM_MOTIONOSI_DOCKER_DEVICEMAPPER_LOW_DATA_SPACEOSI_DOCKER_DEVICEMAPPER_LOW_METADATA_SPACEOVERLOADED_STORAGEPERFORMANCE_EVENTPGI_CRASHED_INFOPGI_HAPROXY_QUEUED_REQUESTS_HIGHPGI_HAPROXY_SESSION_USAGE_HIGHPGI_LOG_MATCHEDPGI_MEMDUMPPGI_MYSQL_SLOW_QUERIES_RATE_HIGHPGI_OF_SERVICE_UNAVAILABLEPGI_RMQ_HIGH_FILE_DESC_USAGEPGI_RMQ_HIGH_MEM_USAGEPGI_RMQ_HIGH_PROCESS_USAGEPGI_RMQ_HIGH_SOCKETS_USAGEPGI_RMQ_LOW_DISK_SPACEPROCESS_CRASHEDPROCESS_CUSTOM_AVAILABILITYPROCESS_CUSTOM_ERRORPROCESS_CUSTOM_PERFORMANCEPROCESS_GROUP_LOW_INSTANCE_COUNTPROCESS_LOG_AVAILABILITYPROCESS_LOG_ERRORPROCESS_LOG_PERFORMANCEPROCESS_RESTARTPROCESS_UNAVAILABLERDS_AZ_FAILOVER_COMPLETEDRDS_AZ_FAILOVER_STARTEDRDS_BACKUP_COMPLETEDRDS_BACKUP_STARTEDRDS_OF_SERVICE_UNAVAILABLERDS_RESTARTRDS_RESTART_SEQUENCERESOURCE_CONTENTIONSERVICE_RESPONSE_TIME_DEGRADEDSLOW_DISKSYNTHETIC_AVAILABILITYSYNTHETIC_NODE_OUTAGESYNTHETIC_PRIVATE_LOCATION_OUTAGESYNTHETIC_SLOWDOWNTHREADS_RESOURCES_EXHAUSTEDUNEXPECTED_HIGH_LOADUNEXPECTED_LOW_LOADUSER_ACTION_DURATION_DEGRADATIONVIRTUAL_MACHINE_SHUTDOWNWEB_CHECK_GLOBAL_OUTAGEWEB_CHECK_LOCAL_OUTAGE
Filters the resulting set of events to the events, related to the specified Dynatrace entity.
The response is limited to 150 events, so if you want to receive more you can use the cursor to get the next 150. This parameter should be empty when querying for the first time.
The cursor key can then be found in the nextCursor field of the previous response.
When using the cursor string, it is not necessary to specify the additional parameters, as that info is already encoded within the cursor.
Response
Each event contains at least the following meta information elements and event-specific properties.
Response codes
Response body objects
The EventQueryResult object
Events of the environment.
Start of the query timeframe.
The cursor for the next 150 events, fitting the specified criteria.
Set this value for the cursor query parameter. Without it you'll get the first 150 events again.
You don't have to specify any additional parameters, because the cursor already contains all of them.
End of the query timeframe.
The total amount of events, fitting the specified criteria.
The EventRestEntry object
Set of parameters of the event.
Apart from the general properties mentioned here, which each event has, an actual event has a set of metadata that varies depending on the event type.
The timestamp of the event closure, in UTC milliseconds
The ID of the affected Dynatrace entity.
The name of the affected Dynatrace entity.
The state of the event: open or closed.
CLOSEDOPEN
The type of the event.
APPLICATION_JS_FRAMEWORK_DETECTEDAPPLICATION_OVERLOAD_PREVENTIONAVAILABILITY_EVENTCONNECTION_LOSTCPU_SATURATEDCUSTOM_ALERTCUSTOM_ANNOTATIONCUSTOM_APPLICATION_OVERLOAD_PREVENTIONCUSTOM_APP_CRASH_RATE_INCREASEDCUSTOM_CONFIGURATIONCUSTOM_DEPLOYMENTCUSTOM_INFODATABASE_CONNECTION_FAILUREDEPLOYMENT_CHANGED_CHANGEDEPLOYMENT_CHANGED_NEWDEPLOYMENT_CHANGED_REMOVEDDYNATRACE_INTERNALEBS_VOLUME_HIGH_LATENCYELASTIC_LOAD_BALANCER_HIGH_BACKEND_FAILURE_RATEELASTIC_LOAD_BALANCER_HIGH_FAILURE_RATEELASTIC_LOAD_BALANCER_HIGH_UNHEALTHY_HOST_RATEERROR_EVENTESXI_HOST_VM_MOTION_ARRIVEDESXI_HOST_VM_MOTION_LEFTESXI_HOST_VM_STARTEDESXI_STARTESXI_VM_DISCONNECTEDESXI_VM_MOTIONESXI_VM_POWER_OFFESXI_VM_STARTFAILURE_RATE_INCREASEDHIGH_CONNECTIVITY_FAILURESHIGH_DROPPED_PACKETS_RATEHIGH_GC_ACTIVITYHIGH_LATENCYHIGH_NETWORK_ERROR_RATEHIGH_NETWORK_LOSS_RATEHIGH_NETWORK_UTILIZATIONHOST_CONNECTION_FAILEDHOST_CONNECTION_LOSTHOST_DATASTORE_LOW_DISK_SPACEHOST_DISK_LOW_INODESHOST_GRACEFULLY_SHUTDOWNHOST_LOG_AVAILABILITYHOST_LOG_ERRORHOST_LOG_MATCHEDHOST_LOG_PERFORMANCEHOST_MAINTENANCEHOST_NO_CONNECTIONHOST_OF_SERVICE_UNAVAILABLEHOST_SHUTDOWNHOST_TIMEOUTHTTP_CHECK_GLOBAL_OUTAGEHTTP_CHECK_LOCAL_OUTAGEHTTP_CHECK_TEST_LOCATION_SLOWDOWNINSUFFICIENT_DISK_QUEUE_DEPTHJAVASCRIPT_ERROR_RATE_INCREASEDLAMBDA_FUNCTION_HIGH_ERROR_RATELOG_AVAILABILITYLOG_ERRORLOG_MATCHEDLOG_PERFORMANCELOW_DISK_SPACELOW_STORAGE_SPACEMARKED_FOR_TERMINATIONMEMORY_RESOURCES_EXHAUSTEDMEMORY_SATURATEDMOBILE_APPLICATION_OVERLOAD_PREVENTIONMOBILE_APP_CRASH_RATE_INCREASEDMONITORING_UNAVAILABLEMULTI_PROTOCOL_GLOBAL_OUTAGEMULTI_PROTOCOL_LOCAL_OUTAGEMULTI_PROTOCOL_LOCATION_SLOWDOWNOPENSTACK_HOST_VM_SHUTDOWNOPENSTACK_HOST_VM_STARTEDOPENSTACK_KEYSTONE_SLOWOPENSTACK_KEYSTONE_UNHEALTHYOPENSTACK_VM_LAUNCH_FAILEDOPENSTACK_VM_MOTIONOSI_DOCKER_DEVICEMAPPER_LOW_DATA_SPACEOSI_DOCKER_DEVICEMAPPER_LOW_METADATA_SPACEOVERLOADED_STORAGEPERFORMANCE_EVENTPGI_CRASHED_INFOPGI_HAPROXY_QUEUED_REQUESTS_HIGHPGI_HAPROXY_SESSION_USAGE_HIGHPGI_LOG_MATCHEDPGI_MEMDUMPPGI_MYSQL_SLOW_QUERIES_RATE_HIGHPGI_OF_SERVICE_UNAVAILABLEPGI_RMQ_HIGH_FILE_DESC_USAGEPGI_RMQ_HIGH_MEM_USAGEPGI_RMQ_HIGH_PROCESS_USAGEPGI_RMQ_HIGH_SOCKETS_USAGEPGI_RMQ_LOW_DISK_SPACEPROCESS_CRASHEDPROCESS_CUSTOM_AVAILABILITYPROCESS_CUSTOM_ERRORPROCESS_CUSTOM_PERFORMANCEPROCESS_GROUP_LOW_INSTANCE_COUNTPROCESS_LOG_AVAILABILITYPROCESS_LOG_ERRORPROCESS_LOG_PERFORMANCEPROCESS_RESTARTPROCESS_UNAVAILABLERDS_AZ_FAILOVER_COMPLETEDRDS_AZ_FAILOVER_STARTEDRDS_BACKUP_COMPLETEDRDS_BACKUP_STARTEDRDS_OF_SERVICE_UNAVAILABLERDS_RESTARTRDS_RESTART_SEQUENCERESOURCE_CONTENTIONSERVICE_RESPONSE_TIME_DEGRADEDSLOW_DISKSYNTHETIC_AVAILABILITYSYNTHETIC_NODE_OUTAGESYNTHETIC_PRIVATE_LOCATION_OUTAGESYNTHETIC_SLOWDOWNTHREADS_RESOURCES_EXHAUSTEDUNEXPECTED_HIGH_LOADUNEXPECTED_LOW_LOADUSER_ACTION_DURATION_DEGRADATIONVIRTUAL_MACHINE_SHUTDOWNWEB_CHECK_GLOBAL_OUTAGEWEB_CHECK_LOCAL_OUTAGE
The encoded ID of the event. The format is eventID_startTime.
You should use the value from this field when you need an event ID.
The impact level of the event. It shows what is affected by the problem: infrastructure, service, or application.
APPLICATIONENVIRONMENTINFRASTRUCTURESERVICE
The id of the resource the event occurred on.
The name of the resource the event occurred on.
The severity of the event.
AVAILABILITYCUSTOM_ALERTERRORMONITORING_UNAVAILABLEPERFORMANCERESOURCE_CONTENTION
The timestamp of the event detection, in UTC milliseconds.
The TagInfo object
Tag of a Dynatrace entity.
The origin of the tag, such as AWS or Cloud Foundry.
Custom tags use the CONTEXTLESS value.
AWSAWS_GENERICAZURECLOUD_FOUNDRYCONTEXTLESSENVIRONMENTGOOGLE_CLOUDKUBERNETES
The key of the tag.
Custom tags have the tag value here.
The value of the tag.
Not applicable to custom tags.
Response body JSON model
{"events": [{"endTime": 1521542929000,"entityId": "HOST-0000000000000007","entityName": "Example Host","eventStatus": "OPEN","eventType": "SLOW_DISK","id": "5915682011263205071_1521042929000","impactLevel": "INFRASTRUCTURE","severityLevel": "PERFORMANCE","source": "builtin","startTime": 1521042929000,"tags": [{"context": "CONTEXTLESS","key": "exampleTag"}]},{"endTime": 1521542929000,"entityId": "HOST-0000000000000007","entityName": "Example Host","eventStatus": "OPEN","eventType": "SLOW_DISK","id": "5915682011263205071_1521042929000","impactLevel": "INFRASTRUCTURE","severityLevel": "PERFORMANCE","source": "builtin","startTime": 1521042929000,"tags": [{"context": "CONTEXTLESS","key": "exampleTag"}]}],"from": 1521042929000,"nextCursor": "AgEBAAFn5IIFrgEAAAFofwDTrgAAAQAcMTY4N2RhYzViZTAtZmUxODEwOWQ5YTA1MTIyNQ%3D%3D","to": 1521542929000,"totalEventCount": 2}
Example
In this example, the request queries all the ERROR_EVENT events that occurred during the last 24 hours. The result is truncated to two events.
The API token is passed in the Authorization header.
Curl
curl -X GET \'https://mySampleEnv.live.dynatrace.com/api/v1/events?eventType=ERROR_EVENT&relativeTime=day' \-H 'Authorization: Api-Token dt0c01.abc123.abcdefjhij1234567890'
Request URL
https://mySampleEnv.live.dynatrace.com/api/v1/events?eventType=ERROR_EVENT&relativeTime=day
Response content
{"nextEventStartTms": null,"nextEventId": null,"nextCursor": null,"from": 1530703635653,"to": 1533295635653,"totalEventCount": 25,"events": [{"eventId": -8338439733889003014,"startTime": 1532328338475,"endTime": 1532328638475,"entityId": "HOST-E4D1E5F46E239F21","entityName": "l-8.dyna.trace","severityLevel": "ERROR","impactLevel": "INFRASTRUCTURE","eventType": "ERROR_EVENT","eventStatus": "CLOSED","tags": [{"context": "CONTEXTLESS","key": "deploy"},{"context": "CONTEXTLESS","key": "room23"}],"id": "-8338439733889003014_1532328338475","annotationDescription": "testTrigger","correlationId": "67da0a4293956e55","source": "restTest"},{"eventId": 3092227520312561338,"startTime": 1531832640600,"endTime": 1531836240600,"entityId": "HOST-CE6A2253598EA88D","entityName": "q2.docker.l5","severityLevel": "ERROR","impactLevel": "INFRASTRUCTURE","eventType": "ERROR_EVENT","eventStatus": "CLOSED","tags": [{"context": "CONTEXTLESS","key": "ServiceNow"}],"id": "3092227520312561338_1531832640600","customProperties": {"Property 2": "value 2","Property 1": "value 1","Property 3": "value 3"},"annotationDescription": "package is damaged","correlationId": "1b79973c6902b486","source": "myAPI"}]}
Response code
200