Smartscape - Core Entities

  • Reference
  • Published Feb 23, 2026

This section contains all entity types that are considered core entities.

smartscapeNodes {HOST, PROCESS, SERVICE, CONTAINER}

Application Observability Service

Smartscape node type: SERVICE

Representation of an Application Observability (AppObs) service entity.

Query

Find all service entities.

smartscapeNodes SERVICE

Count all service relationships, grouped by relationship type.

smartscapeEdges "*"
| filter source_type == "SERVICE"
| fields type, source_id, source_type, target_id, target_type, dt.system.edge_kind
| summarize count(), by:{type}

Count runs_on relationships from services, grouped by target entity type.

smartscapeEdges runs_on
| filter source_type == "SERVICE"
| summarize count(), by:{target_type}

Count belongs_to relationships from services, grouped by target entity type.

smartscapeEdges belongs_to
| filter source_type == "SERVICE"
| summarize count(), by:{target_type}

Traverse all service-to-service call relationships of a service.

smartscapeNodes SERVICE
| filter id == toSmartscapeId("SERCICE-0123456789ABCDEF")
| traverse {"calls"}, {"SERVICE"}, direction:"forward"

Query the average response time for all downstream services called by a specific service (identified by its ID).

timeseries avg(dt.service.request.response_time), filter:dt.smartscape.service in [
smartscapeEdges "calls"
| filter source_type == "SERVICE"
| filter source_id == toSmartscapeId("SERCICE-0123456789ABCDEF")
| fields target_id
], by:{dt.smartscape.service}

Query the 95th percentile response time for all downstream services called by a specific service (identified by its name).

timeseries responseTime_p95_timeseries = percentile(dt.service.request.response_time, 95), filter:dt.smartscape.service in [
smartscapeNodes "SERVICE"
| filter name == "checkout-service"
| traverse {"calls"}, {"SERVICE"}, direction:"forward"
| fields id
], by:{dt.smartscape.service}, nonempty: true
| fieldsAdd metricName = "Response time p95"

Fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples
idsmartscapeIdstable
The entity ID.
HOST-1234; K8S_POD-1234; SERVICE-1234
id_classicstringstable
The entity ID that was used in the classic entity store. This ID is present in old monitoring data.
HOST-1234; CLOUD_APPLICATION-1234; SERVICE-1234
namestringstable
The entity name.
localhost; easyTravel; product-catalog
typestringstable
The entity type.
HOST; K8S_POD; SERVICE
tagsarraystable
Contains a consolidated list of all entity tags. Tags provided by OneAgent can also be accessed via tags:agent_tags; custom tags can be accessed via tags:custom. Note that rule-based tags do not exist in the new model.
[]
lifetimetimeframestable
The lifetime of the entity. classicField: lifetime
{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }
dt.security_contextstring[]resource stable
The security context is used in access permissions to limit the visibility. Learn more about the Dynatrace permission model
Tags: permission
[]

Fields specific to services, available on every service entity.

AttributeTypeDescriptionExamples
dt.service_detection.versionlongstable
The version of the service detection mechanism used to identify the service. Either 1 for Service Detection Version 1 (SDv1) or 2 for Service Detection Version 2 (SDv2).
1; 2

Relationships

AttributeTypeDescriptionExamples
belongs_torecordstable
This is similar to an aggregation in UML. It is a many-to-many relationship without existential properties (the destination is not composed of the sources).

Relationships:
smartscapeId dt.smartscape.k8s_cluster
smartscapeId dt.smartscape.k8s_namespace
smartscapeId dt.smartscape.k8s_cronjob
smartscapeId dt.smartscape.k8s_daemonset
smartscapeId dt.smartscape.k8s_deployment
smartscapeId dt.smartscape.k8s_job
smartscapeId dt.smartscape.k8s_statefulset
SERVICE belongs_to K8S_CLUSTER; K8S_POD belongs_to K8S_NAMESPACE
callsrecordstable
Defines a "horizontal" relationship between two entities that "call" each other. The "calls" relation does not imply a parent/child or other strong structural relation but rather a dynamic communication association. Examples: Typical examples include services calling other services, but also services calling databases, queue brokers, or other infrastructure entities.

Relationships:
smartscapeId dt.smartscape.service
runs_onrecordstable
Defines a "vertical" relation of an entity running on some other entity. It does not imply any composition or aggregation but only a looser association between the entities. One entity can run on multiple other entities. Examples: Service running on a POD, a CONTAINER or a HOST.

Relationships:
smartscapeId dt.smartscape.process
smartscapeId dt.smartscape.host
smartscapeId dt.smartscape.container
smartscapeId dt.smartscape.k8s_pod

Container

Smartscape node type: CONTAINER

A container entity. Provides the core container fields plus potentially additional platform specific fields.

Query

Load all container entities from Smartscape and get their names.

smartscapeNodes "CONTAINER"
| fields name

Get all hosts that run containers in the "travel-advisor-demo" namespace.

smartscapeNodes CONTAINER
| filter k8s.namespace.name == "travel-advisor-demo"
| traverse runs_on, HOST

Get all containers with their IDs, names, namespace names, and Kubernetes labels.

smartscapeNodes CONTAINER
| fields id, name, k8s.namespace.name, k8s_labels = getNodeField(references[belongs_to.k8s_namespace][0], "tags:k8s.labels")

Fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples
idsmartscapeIdstable
The entity ID.
HOST-1234; K8S_POD-1234; SERVICE-1234
id_classicstringstable
The entity ID that was used in the classic entity store. This ID is present in old monitoring data.
HOST-1234; CLOUD_APPLICATION-1234; SERVICE-1234
namestringstable
The entity name.
localhost; easyTravel; product-catalog
typestringstable
The entity type.
HOST; K8S_POD; SERVICE
tagsarraystable
Contains a consolidated list of all entity tags. Tags provided by OneAgent can also be accessed via tags:agent_tags; custom tags can be accessed via tags:custom. Note that rule-based tags do not exist in the new model.
[]
lifetimetimeframestable
The lifetime of the entity. classicField: lifetime
{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }
dt.security_contextstring[]resource stable
The security context is used in access permissions to limit the visibility. Learn more about the Dynatrace permission model
Tags: permission
[]

Container fields

AttributeTypeDescriptionExamples
container.image.namestringresource experimental
Name of the image the container was built on.
gcr.io/opentelemetry/operator
container.image.versionstringresource experimental0.1
container.image.digeststringresource experimental
Immutable SHA‑256 hash of an image that uniquely identifies the exact image content in a registry.
sha256:aa1ed41571fa937da61b5bcd7cf842981c7f026b516c18655bc2f3a9362b1fa5
container.idstringresource experimental
Container ID. Usually a UUID, as for example used to identify Docker containers. The UUID might be abbreviated.
a3bf90e006b2

Optional fields only used for k8s containers

AttributeTypeDescriptionExamples
k8s.cluster.namestringresource stable
The user-defined name of the cluster in Dynatrace. Doesn't need to be unique or immutable.
Tags: permission primary-field
unguard-dev; acme-prod10
k8s.cluster.uidstringresource stable
A pseudo-ID for the cluster, by default set to the UID of the kube-system namespace.
1c7a24c7-ff51-46e0-bcc9-c52637ceec57
k8s.namespace.namestringresource stable
The name of the namespace that the pod is running in.
Tags: permission primary-field
default; kube-system
k8s.workload.namestringresource stable
The name of the workload.
checkoutservice
k8s.workload.kindstringresource stable
The type of the workload. The value is the Kubernetes object kind of the workload in lowercase.
deployment; statefulset; cronjob; job; daemonset; replicaset
k8s.node.namestringresource stable
Name of the node.
cluster-pool-1-c3c7423d-azth
k8s.pod.namestringresource stable
The name of the pod.
checkoutservice-7895755b94-mzs5m
k8s.pod.uidstringresource stable
The UID of the pod.
275ecb36-5aa8-4c2a-9c47-d8bb681b9aff
k8s.container.namestringresource stable
The name of the container from the pod specification; must be unique within a pod. Container runtime usually uses different globally unique name (container.name).
redis
k8s.container.typestringresource experimental
The type of the Kubernetes container.
app; init; sidecar; ephemeral

Relationships

AttributeTypeDescriptionExamples
belongs_torecordstable
This is similar to an aggregation in UML. It is a many-to-many relationship without existential properties (the destination is not composed of the sources).

Relationships:
smartscapeId dt.smartscape.k8s_cluster
smartscapeId dt.smartscape.k8s_namespace
SERVICE belongs_to K8S_CLUSTER; K8S_POD belongs_to K8S_NAMESPACE
is_part_ofrecordstable
Defines if the instance is part of a cluster, similar to a composition in UML. The source (child) cannot exist without the destination (parent).

Relationships:
smartscapeId dt.smartscape.k8s_cronjob
smartscapeId dt.smartscape.k8s_daemonset
smartscapeId dt.smartscape.k8s_deployment
smartscapeId dt.smartscape.k8s_job
smartscapeId dt.smartscape.k8s_pod
smartscapeId dt.smartscape.k8s_replicaset
smartscapeId dt.smartscape.k8s_statefulset
AWS_EC2_INSTANCE is_part_of AWS_AUTOSCALING_GROUP; K8S_POD is_part_of K8S_DEPLOYMENT
runs_onrecordstable
Defines a "vertical" relation of an entity running on some other entity. It does not imply any composition or aggregation but only a looser association between the entities. One entity can run on multiple other entities. Examples: Service running on a POD, a CONTAINER or a HOST.

Relationships:
smartscapeId dt.smartscape.host
smartscapeId dt.smartscape.k8s_node

Digital Experience Frontend

Smartscape node type: FRONTEND

Representation of a Digital Experience Monitoring (DEM) frontend entity.

Query

Load all FRONTEND entities.

smartscapeNodes FRONTEND

Fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples
idsmartscapeIdstable
The entity ID.
HOST-1234; K8S_POD-1234; SERVICE-1234
id_classicstringstable
The entity ID that was used in the classic entity store. This ID is present in old monitoring data.
HOST-1234; CLOUD_APPLICATION-1234; SERVICE-1234
namestringstable
The entity name.
localhost; easyTravel; product-catalog
typestringstable
The entity type.
HOST; K8S_POD; SERVICE
tagsarraystable
Contains a consolidated list of all entity tags. Tags provided by OneAgent can also be accessed via tags:agent_tags; custom tags can be accessed via tags:custom. Note that rule-based tags do not exist in the new model.
[]
lifetimetimeframestable
The lifetime of the entity. classicField: lifetime
{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }
dt.security_contextstring[]resource stable
The security context is used in access permissions to limit the visibility. Learn more about the Dynatrace permission model
Tags: permission
[]

Frontend fields

AttributeTypeDescriptionExamples
frontend.namestringstable
The frontend name determined at ingest.
Tags: permission
my_frontend

Relationships

AttributeTypeDescriptionExamples
callsrecordstable
Defines a "horizontal" relationship between two entities that "call" each other. The "calls" relation does not imply a parent/child or other strong structural relation but rather a dynamic communication association. Examples: Typical examples include services calling other services, but also services calling databases, queue brokers, or other infrastructure entities.

Relationships:
smartscapeId dt.smartscape.service

Disk

Smartscape node type: DISK

A disk entity. Represents a storage disk attached to a host.

Query

Load all disks and get the host groups of their parent hosts

smartscapeNodes DISK
| fieldsAdd dt.host_group.id = getNodeField(references[belongs_to.host][0], "dt.host_group.id")

Get all disks attached to the sap-hana-db host

smartscapeNodes HOST
| filter name == "sap-hana-db"
| traverse belongs_to, DISK, direction:backward

Fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples
idsmartscapeIdstable
The entity ID.
HOST-1234; K8S_POD-1234; SERVICE-1234
id_classicstringstable
The entity ID that was used in the classic entity store. This ID is present in old monitoring data.
HOST-1234; CLOUD_APPLICATION-1234; SERVICE-1234
namestringstable
The entity name.
localhost; easyTravel; product-catalog
typestringstable
The entity type.
HOST; K8S_POD; SERVICE
tagsarraystable
Contains a consolidated list of all entity tags. Tags provided by OneAgent can also be accessed via tags:agent_tags; custom tags can be accessed via tags:custom. Note that rule-based tags do not exist in the new model.
[]
lifetimetimeframestable
The lifetime of the entity. classicField: lifetime
{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }
dt.security_contextstring[]resource stable
The security context is used in access permissions to limit the visibility. Learn more about the Dynatrace permission model
Tags: permission
[]

Disk fields

AttributeTypeDescriptionExamples
disk.remote_disk_idlongresource stable
Unique identifier of remote disk
0; 16864135562327138441; 18446744073709551615

Relationships

AttributeTypeDescriptionExamples
belongs_torecordstable
This is similar to an aggregation in UML. It is a many-to-many relationship without existential properties (the destination is not composed of the sources).

Relationships:
smartscapeId dt.smartscape.host
SERVICE belongs_to K8S_CLUSTER; K8S_POD belongs_to K8S_NAMESPACE

Host

Smartscape node type: HOST

A Host entity. Represents either a virtual or physical machine. Provides the core view on given machine from the Operating System perspective.

Query

Find all hosts that belong to the discovery-mode-demo host group.

smartscapeNodes HOST
| filter dt.host_group.id == "discovery-mode-demo"

Find all hosts that belong to the demoability team.

smartscapeNodes HOST
| filter tags[dt_owner_team] == "team-demoability"

Find all resources of hosts that belong to the discovery-mode-demo host group.

smartscapeNodes HOST
| filter dt.host_group.id == "discovery-mode-demo"
| traverse {belongs_to}, {DISK, NETWORK_INTERFACE}, direction:backward

Find all EC2 instances that run hosts with x86 architecture and get their host group IDs.

smartscapeNodes HOST
| filter host.additional_system_info[system.architecture] == "x86"
| traverse runs_on, AWS_EC2_INSTANCE, fieldsKeep:dt.host_group.id
| fields id, name, dt.host_group.id = dt.traverse.history[-1][dt.host_group.id]

Fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples
idsmartscapeIdstable
The entity ID.
HOST-1234; K8S_POD-1234; SERVICE-1234
id_classicstringstable
The entity ID that was used in the classic entity store. This ID is present in old monitoring data.
HOST-1234; CLOUD_APPLICATION-1234; SERVICE-1234
namestringstable
The entity name.
localhost; easyTravel; product-catalog
typestringstable
The entity type.
HOST; K8S_POD; SERVICE
tagsarraystable
Contains a consolidated list of all entity tags. Tags provided by OneAgent can also be accessed via tags:agent_tags; custom tags can be accessed via tags:custom. Note that rule-based tags do not exist in the new model.
[]
lifetimetimeframestable
The lifetime of the entity. classicField: lifetime
{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }
dt.security_contextstring[]resource stable
The security context is used in access permissions to limit the visibility. Learn more about the Dynatrace permission model
Tags: permission
[]

Contains all fields that are provided by all resources running on AWS.

AttributeTypeDescriptionExamples
aws.objectstringstable
The full JSON content of any aws object: {"configuration":{ <describe_resource_output> }, "supplementary_configuration": { <supplementary_resource_configuration> }}
aws.properties.versionstringexperimental
The aws.object json content version
1.0
aws.regionstringresource stable
A specific geographical AWS Cloud location.
Tags: primary-field
us-east-1
aws.account.idstringresource stable
The 12-digit number, such as 123456789012, that uniquely identifies an AWS account.
Tags: permission primary-field
123456789012
aws.servicestringresource experimental
The service that identifies the AWS product.
s3
aws.resource.typestringresource experimental
The name of a resource type in CloudFormation format.
AWS::EC2::Instance; AWS::S3::Bucket; AWS::Lambda::Function
aws.resource.idstringresource stable
Unique, immutable, identifier assigned to the AWS cloud resource.
i-0922cda4579db3a45
aws.resource.namestringresource stable
Name of the resource for named resources, value of the "Name" tag in AWS for non-named resources (if unavailable, same as aws.resource.id).
my-ec2-instance
aws.arnstringresource stable
Amazon Resource Name (ARN).
arn:aws:lambda:us-east-1:478983378254:function:acceptanceWeatherBackend
cloud.providerstringresource stable
Name of the cloud provider.
alibaba_cloud

cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.

ValueDescription
alibaba_cloudAlibaba Cloud
awsAmazon Web Services
azureMicrosoft Azure
gcpGoogle Cloud Platform
herokuHeroku Platform as a Service
ibm_cloudIBM Cloud
tencent_cloudTencent Cloud

Contains all fields that are provided by all resorce running on Azure, including Azure, Core and K8s entities.

AttributeTypeDescriptionExamples
azure.subscriptionstringresource stable
An Azure subscription is a logical container used to provision resources in Azure.
Tags: permission primary-field
27e9b03f-04d2-2b69-b327-32f433f7ed21
azure.locationstringresource stable
A specific geographical location of Azure Cloud resource.
Tags: primary-field
westeurope
azure.availability_zonesstring[]resource experimental
Availability zones of Azure Cloud resource.
['1']
azure.resource.groupstringresource stable
A resource group is a container that holds related resources for an Azure solution.
Tags: permission primary-field
demo-backend-rg
azure.resource.idstringresource experimental
A unique, immutable identifier assigned to each Azure cloud resource.
/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks
azure.resource.namestringresource experimental
User-provided name of the Azure cloud resource.
demo-aks
azure.resource.typestringresource experimental
The name of a resource type in the format: {resource-provider}/{resource-type}.
Microsoft.ContainerService/managedClusters

Contains all fields that are provided by all GCP entities.

AttributeTypeDescriptionExamples
gcp.asset.typestringexperimental
The asset type available in Google Cloud Asset Inventory. These include resource types, policy types, and runtime information types.
sqladmin.googleapis.com/Instance; k8s.io/ServiceAccount; iam.googleapis.com/Role
gcp.regionstringresource stable
A region is a specific geographical location where you can host your resources.
Tags: primary-field
europe-west3
gcp.project.idstringresource stable
Identifier of the GCP project associated with this resource.
Tags: permission primary-field
dynatrace-gcp-extension
gcp.zonestringresource stable
A zone is a subset of a region. Each region has three or more zones.
europe-west3-c
gcp.locationstringresource stable
Region or zone where GCP resource instance is running.
europe-west3-c
gcp.resource.typestringresource stable
The name of a monitored resource type available in Google Cloud Monitoring and Logging.
cloudsql_database
gcp.resource.namestringresource stable
The globally unique resource name in Google Cloud Platform convention.
//cloudfunctions.googleapis.com/projects/gcp-example-project/locations/us-central1/functions/examplefunction
cloud.providerstringresource stable
Name of the cloud provider.
alibaba_cloud

cloud.provider has the following list of well-known values. If one of them applies, then the respective value MUST be used, otherwise a custom value MAY be used.

ValueDescription
alibaba_cloudAlibaba Cloud
awsAmazon Web Services
azureMicrosoft Azure
gcpGoogle Cloud Platform
herokuHeroku Platform as a Service
ibm_cloudIBM Cloud
tencent_cloudTencent Cloud

All fields that are provided by all virtual machine entities.

AttributeTypeDescriptionExamples
coresstringexperimental
Number of CPU cores on monitored host.
4
memorystringexperimental
Total memory of monitored host, expressed in bytes.
8141684736
skustringexperimental
TODO [smartscape]: add description
...
private_dns_namestringexperimental
Todo
...
private_ip_addressarrayexperimental
Todo
...
public_ip_addressarrayexperimental
Todo
...
statestringexperimental
TODO [smartscape]: add description
...

Host fields

AttributeTypeDescriptionExamples
host.additional_system_inforecordexperimental
Additional system information. Some attributes here are only available on certain systems (e.g. system.lpar exists only on AIX). Several attributes are numbered. E.g. attributes starting with system.processor_. will have the underscore programatically replaced with an index like [12], starting from [0]. Note that in these examples, a '_' is replaced with '[x]', where x is a number starting from 0.
custom_metadatarecordexperimental
A collection of additional metadata information imported to Dynatrace.
OperatorVersion:v0.9.0; cluster-name:ext-demo1
hypervisor.typestringresource experimental
Virtualization hypervisor identified. For physical machines, this value is empty.
KVM; VMWARE
host.logical.cpu.coreslongresource experimental
Logical CPU cores on the monitored host.
8
macstring[]experimental
A collection of MAC addresses that can be used to identify this entity.
['4C:03:4F:5B:E8:89']
os.architecturestringresource experimental
Architecture of the CPU, discovered from the operating system.
X86
os.typestringresource experimental
Type of discovered operating system.
LINUX; WINDOWS
os.versionstringresource stable
The complete OS version, including patch, build, and other information.
15.3.1; Ubuntu 16.04.7 LTS (Xenial Xerus) (kernel 4.15.0-206-generic); Windows Server 2022 Datacenter 21H2 2009, ver. 10.0.20348
host.physical.memorylongresource experimental
Physical memory of the monitored host, expressed in bytes. The value might be different than the total available memory, if features such as Active Memory Expansion are used.
8141684736
dt.host_group.idstringresource stable
See Organize your environment using host groups. Note that host groups are identified by their name, not by the entity ID of the host group entity. For details on the entity ID, see dt.entity.host_group.
Tags: permission primary-field
myHostGroup
ipipAddress[]experimental
A collection of IP addresses that may be used to identify this entity.
['192.168.0.1', '10.10.10.10']; ['10.10.10.10']; ['2001:0000:130F:0000:0000:09C0:876A:130B']

Fields specific to k8s node.

AttributeTypeDescriptionExamples
k8s.cluster.namestringresource stable
The user-defined name of the cluster in Dynatrace. Doesn't need to be unique or immutable.
Tags: permission primary-field
unguard-dev; acme-prod10
k8s.cluster.uidstringresource stable
A pseudo-ID for the cluster, by default set to the UID of the kube-system namespace.
1c7a24c7-ff51-46e0-bcc9-c52637ceec57
k8s.node.namestringresource stable
Name of the node.
cluster-pool-1-c3c7423d-azth

Fields specific to AIX Hosts.

AttributeTypeDescriptionExamples
host.virtual.cpuslongresource experimental
Number of virtual CPUs for AIX LPAR.
2
host.logical.cpuslongresource experimental
Logical CPUs on the monitored host. Applies to AIX LPARs.
8
host.simultaneous.multithreadinglongresource experimental
Number of threads for AIX Simultaneous Multithreading feature.
4

Fields specific to z/OS Hosts.

AttributeTypeDescriptionExamples
zos.lpar_namestringresource experimental
The name of the LPAR that the z/OS address space executes within.
S0W1; ABCD

Fields specific to BOSH Hosts.

AttributeTypeDescriptionExamples
bosh.namestringresource experimental
A unique identifier to a deployment or instance.
isolated_diego_cell_devima
bosh.instance_idstringresource experimental
A unique identifier assigned to each deployed instance.
af318409-9e9d-4a18-aca4-0fb52bbdc526
bosh.availability_zonestringresource experimental
A specific geographical BOSH location.
us-east-1a
bosh.deployment.idstringresource stable
BOSH depoloyment ID, retrievied from /var/vcap on monitored host.
cf-c32ffe771e4ad26b9711
bosh.instance.namestringresource stable
BOSH instance name, retrievied from /var/vcap on monitored host.
diego_database
bosh.stemcell.versionstringresource stable
Version of BOSH stemcell, retrievied from /var/vcap on monitored host.
621.448

Relationships

AttributeTypeDescriptionExamples
callsrecordstable
Defines a "horizontal" relationship between two entities that "call" each other. The "calls" relation does not imply a parent/child or other strong structural relation but rather a dynamic communication association. Examples: Typical examples include services calling other services, but also services calling databases, queue brokers, or other infrastructure entities.

Relationships:
smartscapeId dt.smartscape.host

Network interface

Smartscape node type: NETWORK_INTERFACE

A network interface entity. Represents a network interface attached to a host.

Query

Load all network interfaces and get the host name of their parent hosts

smartscapeNodes NETWORK_INTERFACE
| fieldsAdd host.name = getNodeName(references[belongs_to.host][0])

Find the host to which the network interface with the specified MAC address is attached.

smartscapeNodes NETWORK_INTERFACE
| filter mac == "16:FF:F1:39:CE:99"
| traverse belongs_to, HOST

Fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples
idsmartscapeIdstable
The entity ID.
HOST-1234; K8S_POD-1234; SERVICE-1234
id_classicstringstable
The entity ID that was used in the classic entity store. This ID is present in old monitoring data.
HOST-1234; CLOUD_APPLICATION-1234; SERVICE-1234
namestringstable
The entity name.
localhost; easyTravel; product-catalog
typestringstable
The entity type.
HOST; K8S_POD; SERVICE
tagsarraystable
Contains a consolidated list of all entity tags. Tags provided by OneAgent can also be accessed via tags:agent_tags; custom tags can be accessed via tags:custom. Note that rule-based tags do not exist in the new model.
[]
lifetimetimeframestable
The lifetime of the entity. classicField: lifetime
{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }
dt.security_contextstring[]resource stable
The security context is used in access permissions to limit the visibility. Learn more about the Dynatrace permission model
Tags: permission
[]

Network interface fields

AttributeTypeDescriptionExamples
macstring[]experimental
A collection of MAC addresses that can be used to identify this entity.
['4C:03:4F:5B:E8:89']
ipipAddress[]experimental
A collection of IP addresses that may be used to identify this entity.
['192.168.0.1', '10.10.10.10']; ['10.10.10.10']; ['2001:0000:130F:0000:0000:09C0:876A:130B']

Relationships

AttributeTypeDescriptionExamples
belongs_torecordstable
This is similar to an aggregation in UML. It is a many-to-many relationship without existential properties (the destination is not composed of the sources).

Relationships:
smartscapeId dt.smartscape.host
SERVICE belongs_to K8S_CLUSTER; K8S_POD belongs_to K8S_NAMESPACE

Process

Smartscape node type: PROCESS

The process entity represents a collection of similar processes executed on the same Operating System (native or containerized). The process entity represents a time and spatial aggregation of similar processes, ensuring data continuity between process restarts and grouping together multiple workers performing similar role. In classic Dynatrace corresponding entity is called Process Group Instance (PGI)

Query

Find all NodeJS processes.

smartscapeNodes PROCESS
| expand process.software_technologies
| filter process.software_technologies[type] == "NODE_JS"
| dedup id

Find all hosts that have processes listening on port 8080.

smartscapeNodes PROCESS
| filter in(port, 8080)
| traverse runs_on, HOST

Find all processes with command line arguments "java -jar app.jar".

smartscapeNodes PROCESS
| filter process.metadata[COMMAND_LINE_ARGS] == "java -jar app.jar"

Find all processes that call processes with executable name "java".

smartscapeNodes PROCESS
| filter process.metadata[EXE_NAME] == "java"
| traverse calls, PROCESS, direction:backward

Fields

The following base fields are used for all entities.

AttributeTypeDescriptionExamples
idsmartscapeIdstable
The entity ID.
HOST-1234; K8S_POD-1234; SERVICE-1234
id_classicstringstable
The entity ID that was used in the classic entity store. This ID is present in old monitoring data.
HOST-1234; CLOUD_APPLICATION-1234; SERVICE-1234
namestringstable
The entity name.
localhost; easyTravel; product-catalog
typestringstable
The entity type.
HOST; K8S_POD; SERVICE
tagsarraystable
Contains a consolidated list of all entity tags. Tags provided by OneAgent can also be accessed via tags:agent_tags; custom tags can be accessed via tags:custom. Note that rule-based tags do not exist in the new model.
[]
lifetimetimeframestable
The lifetime of the entity. classicField: lifetime
{ start: 2022-07-06T13:36:00.808Z, end: 2024-04-11T06:56:01.204Z }
dt.security_contextstring[]resource stable
The security context is used in access permissions to limit the visibility. Learn more about the Dynatrace permission model
Tags: permission
[]

Contains fields that share values for all entities belonging to a given process group.

AttributeTypeDescriptionExamples
dt.process_group.idstringresource experimental
The identifier shared by all entities belonging to a given process group.
PROCESS_GROUP-1234
dt.process_group.detected_namestringresource stable
The name of the process group as it was detect by the agent.
Apache Web Server httpd; Redis unguard-redis-* redis; Linux System

Process fields

AttributeTypeDescriptionExamples
process.containerizedbooleanresource experimental
True if given process is running inside container.
process.bitnessstringresource experimental
The architecture of the monitored entity in terms of how many bits compose a basic value.
64
custom_metadatarecordexperimental
A collection of additional metadata information imported to Dynatrace.
OperatorVersion:v0.9.0; cluster-name:ext-demo1
portlong[]experimental
A collection of layer 4 ports used to identify this entity.
[50000, 50001, 50002, 50003]
process.metadatarecordresource experimental
It contains a diagnostic collection of input parameters that were used or could have been used in assigning processes to the process entity.
NODE_JS_APP_BASE_DIRECTORY:C:/home/site/wwwroot

Optional fields only used for k8s processes

AttributeTypeDescriptionExamples
k8s.cluster.namestringresource stable
The user-defined name of the cluster in Dynatrace. Doesn't need to be unique or immutable.
Tags: permission primary-field
unguard-dev; acme-prod10

Relationships

AttributeTypeDescriptionExamples
callsrecordstable
Defines a "horizontal" relationship between two entities that "call" each other. The "calls" relation does not imply a parent/child or other strong structural relation but rather a dynamic communication association. Examples: Typical examples include services calling other services, but also services calling databases, queue brokers, or other infrastructure entities.

Relationships:
smartscapeId dt.smartscape.process
runs_onrecordstable
Defines a "vertical" relation of an entity running on some other entity. It does not imply any composition or aggregation but only a looser association between the entities. One entity can run on multiple other entities. Examples: Service running on a POD, a CONTAINER or a HOST.

Relationships:
smartscapeId dt.smartscape.container
smartscapeId dt.smartscape.host