Log ingest & process (Logs Classic)

Log Monitoring Classic

Dynatrace automatically collects log and event data from a vast array of technologies. With generic log ingestion, you can stream log records to a system and have Dynatrace transform the stream into meaningful log messages.

Dynatrace supports all major third-party platforms and architectures.

Log autodetection and custom log sources

You can rely on autodiscovered or manually added log sources for OneAgent. See OneAgent platform and capability support matrix.

LMC - OneAgent log ingestion and processing configurations at capture

Cloud providers

Log Monitoring includes native support for Red Hat OpenShift and Kubernetes logs and events for Kubernetes platforms, workloads, and applications running inside Kubernetes.

Log Monitoring has native support for multicloud environments, including:

Syslog

Syslog is a standard protocol for message logging and system logs management. Routers, printers, hosts, switches and other devices across platforms use syslog to log users' activity, system and software lifecycle events, status, or diagnostics.

Syslog logs are ingested via syslog receiver available on the Environment ActiveGate.

For more information, see Syslog ingestion (Logs Classic).

Open source

Dynatrace Log Monitoring supports open-source log data frameworks, including Fluentd and Logstash.

Generic log ingest

With generic log ingestion, you can stream log records to Dynatrace and have Dynatrace transform the stream into meaningful log messages. You can also use generic log ingestion to stream log records to Dynatrace using API.

LMC - Generic log ingestion API

Log processing

Dynatrace Log Monitoring incorporates reshaping the incoming log data into the form you may need for better understanding, analysis, or further processing of your log data by Dynatrace. Using Dynatrace Pattern Language (DPL), you can define patterns using matchers and create a set of rules that Log Monitoring applies to ingested log data.

LMC - Log processing pipeline