Azure events

Latest Dynatrace
How-to guide

Enable Azure Event Grid system topic event forwarding

Azure Event Grid system topics capture resource lifecycle events—such as blob creation and deletion, resource group changes, and service health alerts— from Azure services. To forward these events to Dynatrace, create an event subscription on a system topic that routes events to the dt-events-evh Event Hub deployed by the ARM template.

Azure automatically creates system topics for supported services when you first subscribe to their events. If no system topic exists yet for a resource, it will be created as part of step 3 below.

Configure an event subscription

When configuring the event subscription, you must select Cloud Event Schema v1.0 as the event schema. The default Event Grid Schema is not supported and events will not be ingested.

In the Azure portal, go to the resource from which you want to capture events (for example, a storage account or a resource group).
Go to Events and select Event Subscription.
Under EVENT SUBSCRIPTION DETAILS
1. Enter a name for the event subscription.
2. In Event Schema, select Cloud Event Schema v1.0.
Under TOPIC DETAILS, enter a System Topic Name if prompted.
Under EVENT TYPES, select the event types you want to forward.

For example, Blob Created, Blob Deleted, Resource Write Success.
Under ENDPOINT DETAILS, configure the destination:
1. In Endpoint Type, select Event Hub.
2. In Endpoint, select Configure and endpoint.
3. In Event Hub Namespace, select the namespace deployed by the ARM template in the same region as the resource.
4. In Event Hub, select dt-events-evh.
Select Confirm selection, then Create.

Repeat this for each resource or resource type from which you want to capture events.

Query Azure events in Notebooks

You can query Azure events ingested via Dynatrace using Notebooks and DQL.

Use the dt.da.source attribute to filter for events ingested through the Azure events ingest pipeline.

fetch events
| filter dt.da.source == "azure-event-ingest"
| sort timestamp desc

Enable Azure Event Grid system topic event forwarding

Azure automatically creates system topics for supported services when you first subscribe to their events. If no system topic exists yet for a resource, it will be created as part of step 3 below.

Configure an event subscription

When configuring the event subscription, you must select Cloud Event Schema v1.0 as the event schema. The default Event Grid Schema is not supported and events will not be ingested.

In the Azure portal, go to the resource from which you want to capture events (for example, a storage account or a resource group).
Go to Events and select Event Subscription.
Under EVENT SUBSCRIPTION DETAILS
1. Enter a name for the event subscription.
2. In Event Schema, select Cloud Event Schema v1.0.
Under TOPIC DETAILS, enter a System Topic Name if prompted.
Under EVENT TYPES, select the event types you want to forward.

For example, Blob Created, Blob Deleted, Resource Write Success.
Under ENDPOINT DETAILS, configure the destination:
1. In Endpoint Type, select Event Hub.
2. In Endpoint, select Configure and endpoint.
3. In Event Hub Namespace, select the namespace deployed by the ARM template in the same region as the resource.
4. In Event Hub, select dt-events-evh.
Select Confirm selection, then Create.

Repeat this for each resource or resource type from which you want to capture events.