Settings API - Anomaly detection for applications schema table

Anomaly detection for applications (builtin:anomaly-detection.rum-web)

Dynatrace automatically detects application-related performance anomalies such as response time degradations, failure rate increases, and traffic spikes. Use these settings to configure detection sensitivity, set alert thresholds, or disable alerting for certain applications.

To avoid false-positive problem notifications, automated anomaly detection is only available for applications and services that have run for at least 20% of a week (7 days).

Schema ID
Schema groups
Scope
builtin:anomaly-detection.rum-web
  • group:anomaly-detection
APPLICATION_METHOD - User Action
APPLICATION - Web application
environment
GETManagedhttps://{your-domain}/e/{your-environment-id}/api/v2/settings/schemas/builtin:anomaly-detection.rum-web
SaaShttps://{your-environment-id}.live.dynatrace.com/api/v2/settings/schemas/builtin:anomaly-detection.rum-web
Environment ActiveGatehttps://{your-activegate-domain}/e/{your-environment-id}/api/v2/settings/schemas/builtin:anomaly-detection.rum-web

Authentication

To execute this request, you need an access token with Read settings (settings.read) scope. To learn how to obtain and use it, see Tokens and authentication.

Parameters

Property
Type
Description
Required
Response time
responseTime
-
required
Error rate
errorRate
-
required
Detect traffic drops
trafficDrops
-
required
Detect traffic spikes
trafficSpikes
-
required
The responseTime object
Property
Type
Description
Required
Detect key performance metric degradations
enabled
boolean
-
required
Detection strategy for key performance metric degradations
detectionMode
enum
  • auto
  • fixed
required
responseTimeAuto
-
required
responseTimeFixed
-
required
The errorRate object
Property
Type
Description
Required
Detect increases in JavaScript errors
enabled
boolean
-
required
Detection strategy for increases in JavaScript errors
errorRateDetectionMode
enum
  • auto
  • fixed
required
errorRateAuto

Alert if the percentage of failing user actions increases by both the absolute and relative thresholds:

required
errorRateFixed
-
required
The appTrafficDrops object
Property
Type
Description
Required
Detect traffic drops
enabled
boolean
-
required
trafficDrops

Dynatrace learns your typical application traffic over an observation period of one week.

Depending on this expected value Dynatrace detects abnormal traffic drops within your application.

required
The appTrafficSpikes object
Property
Type
Description
Required
Detect traffic spikes
enabled
boolean
-
required
trafficSpikes

Dynatrace learns your typical application traffic over an observation period of one week.

Depending on this expected value Dynatrace detects abnormal traffic spikes within your application.

required
The responseTimeAuto object
Property
Type
Description
Required
All user actions
responseTimeAll

Alert if the median response time of all user actions degrades beyond both the absolute and relative thresholds:

required
Slowest 10%
responseTimeSlowest

Alert if the response time of the slowest 10% of requests degrades beyond both the absolute and relative thresholds:

required
Avoid over-alerting
overAlertingProtection
-
required
The responseTimeFixed object
Property
Type
Description
Required
All user actions
responseTimeAll

Alert if the key performance metric of all requests degrades beyond this threshold:

required
Slowest 10%
responseTimeSlowest

Alert if the key performance metric of the slowest 10% of requests degrades beyond this threshold:

required
Avoid over-alerting
overAlertingProtection
-
required
Sensitivity
sensitivity
enum
  • low
  • medium
  • high
required
The errorRateAuto object
Property
Type
Description
Required
Absolute threshold
absoluteIncrease
float
-
required
Relative threshold
relativeIncrease
float
-
required
Avoid over-alerting
overAlertingProtection
-
required
The errorRateFixed object
Property
Type
Description
Required
Alert if this custom error rate threshold is exceeded during any 5-minute-period
maxFailureRateIncrease
float
-
required
Minimum number of actions per minute
errorRateReqPerMin
float

To avoid over-alerting for low traffic applications

required
Sensitivity
errorRateSensitivity
enum
  • low
  • medium
  • high
required
Amount of minutes the observed traffic has to stay in abnormal state before alert
minutesAbnormalState
float
-
required
The trafficDrops object
Property
Type
Description
Required
Alert if the observed traffic is less than this percentage of the expected value
trafficDropPercentage
float
-
required
Minutes the observed traffic has to stay in abnormal state before alert
abnormalStateAbnormalState
float
-
required
The trafficSpikes object
Property
Type
Description
Required
Alert if the observed traffic is more than this percentage of the expected value
trafficSpikePercentage
float
-
required
Minutes an application has to stay in abnormal state before alert
minutesAbnormalState
float
-
required
The responseTimeAutoAll object
Property
Type
Description
Required
Absolute threshold
degradationMilliseconds
float
-
required
Relative threshold
degradationPercent
float
-
required
The responseTimeAutoSlowest object
Property
Type
Description
Required
Absolute threshold
slowestDegradationMilliseconds
float
-
required
Relative threshold
slowestDegradationPercent
float
-
required
The overAlertingProtectionAuto object
Property
Type
Description
Required
Minimum number of actions per minute
actionsPerMinute
float

Only alert if there are at least

required
Only alert if the abnormal state remains for at least
minutesAbnormalState
float
-
required
The responseTimeFixedAll object
Property
Type
Description
Required
Alert if the key performance metric degrades beyond this many ms within an observation period of 5 minutes
degradationMilliseconds
float
-
required
The responseTimeFixedSlowest object
Property
Type
Description
Required
Alert if the key performance metric of the slowest 10% degrades beyond this many ms within an observation period of 5 minutes
slowestDegradationMilliseconds
float
-
required