Dynatrace Monaco CLI command reference
This command cheat sheet for Dynatrace Configuration as Code via Monaco (Dynatrace Monaco CLI) describes the basic commands for managing your configuration files.
Deploy command
The deploy
command deploys configurations to environments defined in a given deployment manifest file.
Usage
monaco deploy graph <manifest.yaml> [flags]
Example
The most straightforward way to use deploy
is to run it without any flags (command options) and pass the file name of your deployment manifest. This way, all configurations in the project
section of the deployment manifest file are applied to all environments defined in the environments
section of the file.
monaco deploy manifest.yaml
Positional Arguments required
Argument
Description
<manifest.yaml>
The manifest file defining projects to deploy and the environments to deploy them to.
Flags optional
Flag
Description
--continue-on-error
or
-c
Proceed with deployment even if an error is encountered.
This can be used to ensure that all valid configurations are applied to your environments, even if other configurations are invalid or failed to deploy.
Using this flag might lead to follow-up errors for configurations that depend on each other.
--dry-run
or
-d
Validate configuration file structure without deploying them.
With this flag set, monaco deploy
checks whether your templates are valid JSON and whether your configuration YAML files can be parsed and used.
A dry-run
doesn't connect to Dynatrace and can't validate the content of JSON sent to Dynatrace. A deployment may still fail with HTTP 400 Bad Request errors after a successful dry-run
if the content of a JSON template is incorrect.
--environment <name>
or
-e <name>
Apply your configurations to specific environments within your deployment manifest file. To set multiple environments, either repeat this flag or separate them using a comma (,
).
This flag is mutually exclusive with --group
.
- If this flag is specified, configurations are deployed to each specified environment.
- If neither
--group
nor--environment
is present, all environments are used.
--group <name>
or
-g <name>
Apply your configurations to specific environment groups within your deployment manifest file. To set multiple groups, either repeat this flag or separate them using a comma (,
).
This flag is mutually exclusive with --environment
.
- If this flag is specified, configurations are deployed to each environment within the specified groups.
- If neither
--group
nor--environment
is present, all environments are used.
--project <name>
or
-p <name>
Specify one or more projects to be deployed. To set multiple projects, either repeat this flag or separate them using a comma (,
).
- If this flag is specified, configurations from the specified projects are deployed.
- Without this flag, configurations from all projects defined in the manifest are deployed.
Proxy
In environments where access to Dynatrace API endpoints is only possible or allowed via a proxy server, the Dynatrace Monaco CLI provides an option to specify the address of your proxy server when running a command:
Download command
The download
command lets you download configurations from a Dynatrace environment as Dynatrace Monaco CLI files. Use this feature to avoid starting from scratch when using the Dynatrace Monaco CLI.
Usage
There are two ways to define the connection to the Dynatrace environment to download from - either by using a manifest file, or by defining the required values to connect directly using CLI flags.
monaco download [connection flags] [flags]
Use the --help
flag to view all options:
monaco download --help
Using the manifest
-
Create a manifest file if you don't have one already.
-
Run the Dynatrace Monaco CLI using the
download
command:monaco download --manifest your-manifest.yaml --environment environment-nameIf you named your manifest file the default
manifest.yaml
, you can omit themanifest
flag:monaco download --environment environment-name
Connection Flags required
Flag
Description
--manifest <filepath>
or
-m <filepath>
Path to the manifest file to use for connection information.
Default: manifest.yaml
in the current folder.
--environment <name>
or
-e <name>
Specify an environment defined in the manifest to download configurations from.
Direct download
You can use command flags to download an environment directly without using a manifest.
Authentication secrets are always loaded from environment variables, so you need to supply the name of a variable, not the actual secrets, when using the --token
, --oauth-client-credentials
and --oauth-client-secret
flags.
In the example, these environment variables are named API_TOKEN_ENV_VAR
, CLIENT_ID_ENV_VAR
, and CLIENT_SECRET_ENV_VAR
.
The same variable names will be used for the manifest that downloading will create for you.
To download from a Dynatrace Platform environment, you need to supply an API token as well as OAuth credentials:
monaco download --url https://platform-env.apps.dynatrace.com --token API_TOKEN_ENV_VAR --oauth-client-id CLIENT_ID_ENV_VAR --oauth-client-secret CLIENT_SECRET_ENV_VAR
To download from earlier generations of Dynatrace, you only need to supply the API token:
monaco download --url https://env.dynatrace.com --token API_TOKEN_ENV_VAR
This command will get you started and create a manifest.
After a direct download, you have everything you need to deploy
your downloaded configuration.
Connection Flags required
Flag
Description
--url <url>
URL of the Dynatrace environment from which to download the configuration.
To be able to connect to any Dynatrace environment, an API token needs to be provided using --token
.
In case of connecting to a Dynatrace Platform environment, an additional OAuth Client ID, as well as an OAuth Client Secret, needs to be provided via the flags --oauth-client-id
and --oauth-client-secret
.
This flag is mutually exclusive with --manifest
or --environment
.
--token <environment variable name>
API token environment variable. Required when using the flag --url
--oauth-client-id <environment variable name>
OAuth client ID environment variable. Required when using the flag --url
and connecting to a Dynatrace Platform environment.
--oauth-client-secret <environment variable name>
OAuth client secret environment variable. Required when using the flag --url
and connecting to a Dynatrace Platform environment.
Flags optional
In addition to the connection flags described above, several options exist that apply to both manifest-based and direct downloads.
Flag
Description
--output-folder <filepath>
or
-o <filepath>
Specify the name of the output folder in which downloaded configurations will be stored.
Default: a new folder will be created with the name 'download' and the current timestamp
--project <name>
or
-p <name>
The name of the project that will be generated containing all downloaded configurations.
Default: project
--api <name>
or
-a <name>
Download one or more classic configuration APIs, including deprecated ones. (Repeat flag or use comma-separated values)
--settings-schema <name>
or
-s <name>
Download settings 2.0 objects of one or more settings 2.0 schemas. (Repeat flag or use comma-separated values)
--only-apis
Download only classic configuration APIs. Deprecated configuration APIs will not be included.
--only-settings
Download only Settings 2.0 configuration objects. Classic configuration APIs will not be included.
--force
or
-f
Force overwrite any existing manifest.yaml
, rather than creating an additional manifest_{timestamp}.yaml.
In case of manifest-based download: Never append the source environment name to the project folder name.
Filtering
The download
command filters out several configurations by default.
Filtering possibilities range from excluding a configuration type completely to just excluding specific configuration objects.
Some types are excluded because the Dynatrace API does not return full information from them. Generally, these types contain secrets that can never be exported after creation:
aws-credentials
azure-credentials
kubernetes-credentials
credential-vault
extension
Specific configuration objects are filtered out if they are read-only configurations that can't be modified.
Deactivate filters
Dynatrace Monaco CLI version 2.2.0+
It's possible to deactivate filtering if you want to download
everything. Keep in mind that such a download
results in a project that can't be deployed
directly and that requires manual post-processing.
Filters can be controlled by the following environment variable flags:
MONACO_FEAT_DOWNLOAD_FILTER
false
, no filters are applied. This supersedes all other filtering flags.MONACO_FEAT_DOWNLOAD_FILTER_SETTINGS
false
, all settings are downloaded without filtering. This supersedes the MONACO_FEAT_DOWNLOAD_FILTER_SETTINGS_UNMODIFIABLE
flag.MONACO_FEAT_DOWNLOAD_FILTER_SETTINGS_UNMODIFIABLE
false
, settings that are marked as unmodifiable
by the API are downloaded.MONACO_FEAT_DOWNLOAD_FILTER_CLASSIC_CONFIGS
false
, all Config API configurations are downloaded without filtering.For example, assume we want to download
all classic Config API types without filtering and also include unmodifiable Settings 2.0 objects.
We can do this by setting two environment variables:
Concurrent downloads
To ensure that large configuration sets are downloaded as quickly as possible, the download
command makes several simultaneous API calls to Dynatrace.
You can set a MONACO_CONCURRENT_REQUESTS
environment variable to configure various values for concurrent requests:
By default, no more than five concurrent requests to Dynatrace are made. If you need faster downloads and your environment or network setup allows it, you can increase the number of concurrent requests.
If you notice problems with downloading configurations—for example, if the internal network setup is throttling and dropping requests—reduce the number of concurrent requests.
Dependency resolution
When downloading, the Dynatrace Monaco CLI resolves references between configurations to ensure that they can be re-uploaded in the correct order. To achieve this, all downloaded JSON templates are parsed and searched for the identifiers of all configurations.
The default version of dependency resolution is CPU intensive and can be slow if run on hardware or containers with limited CPU resources.
Monaco CLI version 2.0.2+ A fast resolver is available to speed this up, which trades off CPU requirements for an increased memory need. To activate it:
-
Make sure the machine has at least 16–32 GB of RAM and several hundred GB of storage available as swap space.
-
Set the
MONACO_FEAT_FAST_DEPENDENCY_RESOLVER
environment variable totrue
.
Delete command
The delete
command is a convenient way to remove configurations from Dynatrace environments.
Ideally, you will not want to delete long-lived configurations in your production environments, but sometimes it's necessary.
The Dynatrace Monaco CLI is also sometimes used to manage ephemeral configurations in development environments, in which case you can easily use Monaco to clean up those temporary configurations.
Usage
monaco delete [--manifest manifest.yaml] [--file delete.yaml] [FLAGS]
The delete command requires two YAML files:
- A manifest file that contains the list of Dynatrace environments from which to remove configuration
- A delete file that defines which configurations are to be removed
If you don't specify file names, the command tries to find a manifest.yaml
and a delete.yaml
file in the current folder.
Example
Suppose we have a deployment manifest file called deployment-file.yaml
with the structure below:
projects:- name: infrastructurepath: infrastructureenvironments:- group: developmententries:- name: developmenturl:type: valuevalue: "https://mytenant.live.dynatrace.com"auth:token:name: "TestIt"
And we have a delete.yaml
file with the following structure:
delete:- type: java-servicename: my-java-service-config
The following delete command will remove the my-java-service-config
configuration within the infrastructure
project from the development environment:
monaco delete --manifest deployment-file.yaml --file delete.yaml
Flags optional
Flag
Description
--manifest <filepath>
or
-m <filepath>
Delete configurations from environments defined in a specific manifest file.
Default: manifest.yaml
in the current folder.
--file <filepath>
Delete configurations defined in a specific delete file.
Default: delete.yaml
in the current folder.
--environment <name>
or
-e <name>
Specify one or more environments that configurations are deleted from. To set multiple environments, either repeat this flag or separate them using a comma (,
).
This flag is mutually exclusive with --group
.
- If neither
--group
nor--environment
is present, all environments are used.
--group <name>
or
-g <name>
Specify one or more environment groups that configurations are deleted from. To set multiple groups, either repeat this flag or separate them using a comma (,
).
This flag is mutually exclusive with --environment
.
- If neither
--group
nor--environment
is present, all environments are used.
Delete file delete.yaml
A delete file, by default named delete.yaml
, is a YAML document that lists the configurations that to be deleted by the delete command.
Each entry can reference a configuration directly via its Dynatrace object ID, or indirectly via coordinates.
Only objects created by or onboarded to Monaco can be deleted by indirectly referencing them via coordinates.
If you have downloaded existing configurations and you want to delete them using this method, you need to first deploy the downloaded project at least once to make sure these objects can be found for deletion.
A delete file may not contain entries for dashboard-share-settings
or openpipeline
configurations. These configurations can't be deleted.
Direct reference entry
To reference directly, type
and objectId
must be defined, where type
specifies the type of the config, and objectId
is the ID of the configuration from Dynatrace.
- type: management-zoneobjectId: origin-object-ID
Indirect reference entry
Depending on the type of configuration, the indirect reference differs slightly.
-
To create an API entry define the following:
name
: the name of the configurationtype
: one of supported API types
- name: my-mztype: management-zone -
To create a Settings entry, define the following:
project
: the project name of the configurationid
: the ID of the configuration entry inside theconfig.yaml
filetype
: one of the Settings 2.0 schema IDs
- project: my-projectid: my-auto-tagtype: builtin:auto.tagging -
Dynatrace Monaco CLI version 2.6.0+
To create an Automation entry, define the following:
project
: the project name of the configurationtype
: one of the following values:workflow
,scheduling-rule
orbusiness-calendar
id
: the ID of the config entry inside theconfig.yaml
file
- project: my-projecttype: workflowid: my-workflow -
Dynatrace Monaco CLI version 2.15.0+
To create a Document entry, define the following:
project
: the project name of the configurationtype
: is set todocument
id
: the ID of the config entry inside theconfig.yaml
file
- project: my-projecttype: documentid: monaco-config-id
- Using an indirect reference entry, Monaco can only delete documents originally created by it. Use a direct reference entry to delete documents created through other means.
Deprecated shorthand syntax deprecated
Monaco currently still supports an alternate syntax for delete file entries:
delete:- <api/name> OR <schema/config-id>- …
However, be aware that this syntax is deprecated and will no longer be supported in future releases. We recommend that you use the more structured format above.
Convert command
The monaco convert
command applies automatic conversion rules to help prepare configuration files that were written for Monitoring as Code version 1 to be used with Dynatrace Monaco CLI version 2. It produces a YAML manifest file that contains a list of environments and projects.
Usage
monaco convert <environments.yaml> <monaco-v1-project-directory> [flags]
Example
monaco convert environments.yaml my_example_Working --manifest my_manifest_example --output-folder rootfolder
Positional Arguments required
Argument
Description
<environments.yaml>
The v1 environments file to convert.
<monaco-v1-project-directory>
The path to a folder containing the v1 project(s) you wish to convert.
Flags optional
Flag
Description
--manifest <filepath>
or
-m <filepath>
Specify the name to be used for the manifest file produced by the convert command.
Default: manifest.yaml
.
--output-folder <filepath>
or
-o <filepath>
Specify the name of the output folder created by the convert command to store all converted configurations.
Default: a new folder will be created by appending -v2
to the name of input project directory: <monaco-v1-project-directory>-v2
--project <name>
or
-p <name>
Specify one or more projects for which to generate delete file entries. If not defined, all projects in the manifest are used.
Generate commands
The monaco generate
command offers several sub-commands that allow you to generate auxiliary files from your configuration.
Generate delete file
Dynatrace Monaco CLI version 2.6.0+
The monaco generate deletefile
command creates a delete configuration file for use with the delete command.
Usage
monaco generate deletefile <manifest.yaml> [flags]
Example
monaco generate deletefile my_manifest.yaml -o deletefiles --file my-projects-delete-file.yaml -p my_project
Positional Arguments required
Argument
Description
<manifest.yaml>
The manifest file for which a delete file is generated. An entry will be generated for each configuration defined in the manifest's projects.
Flags optional
Flag
Description
--file <filepath>
Specify the name of the generated delete file. If a file of this name already exists, a timestamp is appended (default: delete.yaml
).
--output-folder <filepath>
or
-o <filepath>
Specify the name of the output folder in which the delete file will be generated.
Default: the file is generated in the directory in which you run the command.
--project <name>
or
-p <name>
Specify one or more projects for which to generate delete file entries. If not defined, all projects in the manifest are used.
Generate dependency graph DOT file
Dynatrace Monaco CLI version 2.6.0+
The monaco generate graph
command creates DOT representations of the dependencies between configurations defined in a given manifest's projects.
The DOT format is a standardized text-based format for representing graphs. You can create visual representations with tools such as Graphviz.
Usage
monaco generate graph <manifest.yaml> [flags]
Example
monaco generate graph manifest.yaml -e dev-environment -o mygraphs_folder
Positional Arguments required
Argument
Description
<manifest.yaml>
The manifest file for which dependency graphs are generated. One DOT file is generated per environment for all configurations defined in the manifest's project.
Flags optional
Flag
Description
--output-folder <filepath>
or
-o <filepath>
Specify the name of the output folder in which to generate the DOT graph files.
Default: the file is generated in the directory in which you run the command.
--environment <name>
or
-e <name>
Specify one or more environments that should be used for creating dependency graphs. To set multiple environments, either repeat this flag or separate them using a comma (,
).
This flag is mutually exclusive with --group
.
- If this flag is specified, a dependency graph is generated for each specified environment.
- If neither
--group
nor--environment
is present, all environments are used.
--group <name>
or
-g <name>
Specify one or more environment groups to use for creating dependency graphs. To set multiple groups, either repeat this flag or separate them using a comma (,
).
This flag is mutually exclusive with --environment
.
- If this flag is specified, a dependency graph is generated for each environment within the specified groups.
- If neither
--group
nor--environment
is present, all environments are used.
--id-encoding [default,json]
Dynatrace Monaco CLI version 2.12.0+
Set to json
to generate a DOT file encoding each node's coordinate as JSON, instead of the default
string representation.
JSON encoding can be useful when processing generated DOT files automatically.
Generate JSON schemas for YAML files
Dynatrace Monaco CLI version 2.10.0+
The monaco generate schemas
command creates JSON schema files for Monaco's YAML files such as the manifest, configuration, and delete files.
These schema files can be integrated with most common IDEs and advanced editors directly or by using free plugins.
Usage
monaco generate schemas [flags]
Example
monaco generate schemas -o monaco_schema_folder
Using generated schema files with Visual Studio Code
Below we describe one recommended usage example using Visual Studio Code.
If you're using a different editor or IDE, follow the respective documentation for registering JSON schemas in your tool of choice.
Prerequisites:
- Monaco JSON schema files are generated, and the file paths are known
- The latest version of Visual Studio Code for your operating system is installed
- The YAML extension is installed in Visual Studio Code
Once the YAML extension is installed, you can associate specific schemas with Monaco files.
For general information on configuring the YAML extension, see the extension documentation.
We recommend the following configuration entry in your Visual Studio Code settings.json
:
"yaml.schemas": {"file:///<path-to-your-schema-folder>/monaco-config.schema.json": "**/*config*.yaml","file:///<path-to-your-schema-folder>/monaco-manifest.schema.json": "**/*manifest*.yaml","file:///<path-to-your-schema-folder>/monaco-delete-file.schema.json": "**/*delete*.yaml"}
In the example configuration above:
- You need to replace
<path-to-your-schema-folder>
with the path to the generated folder. We recommend using absolute paths. - We assume you follow the naming patterns that are used in this documentation and the generated files. If you use different naming patterns for your manifest, config, or delete YAML files, you need to adapt the configuration accordingly.
Because the format of manifest or configuration files may change between versions, regenerate the schema definitions with the current version of Monaco.
Flags optional
Flag
Description
--output-folder <filepath>
or
-o <filepath>
Specify the name of the output folder in which to generate the JSON schema files.
Default: the files are generated in a schemas/
directory under the directory in which you run the command.
Global Flags optional
The following optional flags can be used with all commands.
Flags
Description
--support-archive
Create a support archive.
--verbose
or
-v
Enable verbose debug logs.
Account management resources commands
Download account management resources command
Use the monaco account download
command to download the account management resources.
Usage
monaco account download [flags]
Examples
If you have a manifest.yaml
file, you can use the following command.
monaco account download --manifest manifest.yaml --account <account-name-defined-in-manifest> --project <project-defined-in-manifest>
If you don't have a manifest.yaml
file, use the following command to specify the account information via flags (--uuid
, --oauth-client-id
, --oauth-client-secret
).
./monaco account download --uuid abcdefg-abcd-abcd-abcd-abcdefghij --oauth-client-id=OAUTH_CLIENT_ID --oauth-client-secret=OAUTH_CLIENT_SECRET
Flags
Flag
Description
--account <name>
or
-a <name>
List of account names defined in the manifest to download from.
-f
, --force
Force overwrite of any existing manifest.yaml
, rather than creating an additional manifest_{timestamp}.yaml
.
-h
, --help
Help for download.
--manifest <filepath>
or
-m <filepath>
Name (and the path) to the manifest file. Default: manifest.yaml
in the current folder.
--oauth-client-id <environment variable name>
OAuth client ID environment variable. Required when using the --uuid
flag.
--oauth-client-secret <environment variable name>
OAuth client secret environment variable. Required when using the --uuid
flag.
--output-folder <filepath>
or
-o <filepath>
Folder to write downloaded resources to.
--uuid <account UUID>
or
-u <account UUID>
Account uuid
to use. Required when not using the --manifest
flag.
Deploy account management resources
Use the monaco account deploy
command to deploy the account management resources.
Usage
monaco account deploy [flags]
Example
monaco account deploy manifest.yaml --project my-project --account my-account
Flags
Flag
Description
--account <name>
or
-a <name>
Account name defined in the manifest to deploy to.
-d
, --dry-run
Validate the structure of your manifest, projects, and configurations. A dry run resolves all configuration parameters, but it can't verify if the Dynatrace APIs will accept the content.
-h
, --help
Help for deployment.
--manifest <filepath>
or
-m <filepath>
Name (and the path) to the manifest file. Default: manifest.yaml
in the current folder.
--project <name>
or
-p <name>
Project name defined in the manifest.
Delete account management resources
Account management resources are different from regular Monaco configurations. They are treated separately, with a dedicated Monaco account subcommand.
Use the monaco account delete
command to delete the account management resources.
Usage
monaco account delete [flags]
Example
In this example, we delete a user, group, and policy using respective entries in a delete.yaml
file.
delete:- type: useremail: the.user@dynatrace.com- type: groupname: My Group- type: policyname: My Policylevel:type: account
monaco account delete --manifest manifest.yaml --file delete.yaml --account my-account
Flags
Flag
Description
--account <name>
or
-a <name>
Specify one or more accounts from which to delete resources. To set multiple accounts, repeat this flag or separate them using a comma ,
.
- If this flag is specified, resources are deleted from the specified accounts.
- If it is not specified, resources are deleted from all accounts.
--file <filepath>
The delete file defines which configurations to remove. Default: delete.yaml
in the current folder.
-h
, --help
Help for delete.
--manifest <filepath>
or
-m <filepath>
The manifest defines the environments to delete from. Default: manifest.yaml
in the current folder.