Azure events

Latest Dynatrace
How-to guide

Enable Azure Event Grid system topic event forwarding

Azure Event Grid system topics capture resource lifecycle events (such as blob creation and deletion, resource group changes, and service health alerts) from Azure services. To forward these events to Dynatrace, create an event subscription on a system topic that routes events to your event hub—dt-events-evh by default. This works with an Event Hubs namespace deployed by the Dynatrace ARM template or with one you onboarded yourself.

Configure an event subscription

When configuring the event subscription, you must select Cloud Event Schema v1.0 as the event schema. The default Event Grid Schema is not supported, and events are not ingested.

In the Azure portal, go to the resource from which you want to capture events (for example, a storage account or a resource group).
Go to Events and select Event Subscription.
Under EVENT SUBSCRIPTION DETAILS
1. Enter a name for the event subscription.
2. In Event Schema, select Cloud Event Schema v1.0.
Under TOPIC DETAILS, enter a System Topic Name if prompted.

Azure automatically creates system topics for supported services when you first subscribe to their events, so you'll only see this prompt if no system topic exists yet for the resource.
Under EVENT TYPES, select the event types you want to forward.

For example, Blob Created, Blob Deleted, Resource Write Success.
Under ENDPOINT DETAILS, configure the destination:
1. In Endpoint Type, select Event Hub.
2. In Endpoint, select Configure and endpoint.
3. In Event Hub Namespace, select your Event Hubs namespace in the same region as the resource.
4. In Event Hub, select dt-events-evh, or your own event hub name if you tagged the namespace with an override. For details, see Event Hubs requirements.
Select Confirm selection, then Create.

Repeat this for each resource or resource type from which you want to capture events.

Query Azure events in Notebooks

You can query Azure events ingested via Dynatrace using Notebooks and DQL.

Use the dt.da.source attribute to filter for events ingested through the Azure events ingest pipeline.

fetch events
| filter dt.da.source == "azure-event-ingest"
| sort timestamp desc

Enable Azure Event Grid system topic event forwarding

Configure an event subscription

When configuring the event subscription, you must select Cloud Event Schema v1.0 as the event schema. The default Event Grid Schema is not supported, and events are not ingested.

In the Azure portal, go to the resource from which you want to capture events (for example, a storage account or a resource group).
Go to Events and select Event Subscription.
Under EVENT SUBSCRIPTION DETAILS
1. Enter a name for the event subscription.
2. In Event Schema, select Cloud Event Schema v1.0.
Under TOPIC DETAILS, enter a System Topic Name if prompted.

Azure automatically creates system topics for supported services when you first subscribe to their events, so you'll only see this prompt if no system topic exists yet for the resource.
Under EVENT TYPES, select the event types you want to forward.

For example, Blob Created, Blob Deleted, Resource Write Success.
Under ENDPOINT DETAILS, configure the destination:
1. In Endpoint Type, select Event Hub.
2. In Endpoint, select Configure and endpoint.
3. In Event Hub Namespace, select your Event Hubs namespace in the same region as the resource.
4. In Event Hub, select dt-events-evh, or your own event hub name if you tagged the namespace with an override. For details, see Event Hubs requirements.
Select Confirm selection, then Create.

Repeat this for each resource or resource type from which you want to capture events.