Global field reference version 1.317

timestamp

timestamp

stableThe time (UNIX Epoch time in nanoseconds) when the event originated, typically when the source created it. If no original timestamp is available, it will be populated at ingest time and required for all events. In the case of a correlated event (for example, ITIL events), this time could be different from the event.start time, as this time represents the actual timestamp when the "update" for the event was created.

1649822520123123123

start_time

timestamp

stableStart time of a data point. Value is a UNIX Epoch time in nanoseconds and less or equal to the end_time.

1649822520123123123

duration

duration

stableThe difference of start_time and end_time in nanoseconds.

42

adobe.em.env_type

string

resource experimentalAdobe Experience Manager (AEM) environment type.

dev; stage; prod

adobe.em.service

string

resource experimentalAdobe Experience Manager (AEM) service. Contains the program and environment IDs the customer is exposed to.

aggregation.count

long

stableThe number of spans aggregated into this span. Because this span represents multiple spans, the value is >1.

3

aggregation.duration_min

duration

stableThe duration in nanoseconds for the shortest aggregated span.

42

aggregation.duration_sum

duration

stableThe duration sum in nanoseconds for all aggregated spans.

123

aggregation.parallel_execution

boolean

stabletrue indicates that aggregated spans may have been executed in parallel. Therefore, start_time + duration_sum may exceed end_time.

apache.tomcat.base

string

resource experimentalThe server's base directory. This is what usually is referred to as CATALINA_BASE.

/usr/share/tomcat6

apache.httpd.config.path

string

resource experimental

apache.spark.master.ip

string

resource experimental

app.bundle

string

resource stableThe name of the bundle, for example the bundle identifier on iOS or the applicationId on Android.

com.example.easytravel

app.short_version

string

resource stableThe application's publicly visible version number, as for example displayed in App Store or Google Play. Usually this is just the major and minor version with no patch number.

5.23

artifact.attestation.filename

string

experimentalThe provenance filename of the built attestation. It directly relates to the artifact.filename.

carts-service-amd64-0.1.1.tar.gz.intoto.json1

artifact.attestation.id

string

experimentalThe ID of the build software attestation.

1337

artifact.hash

string

experimentalThe full hash value of the software artifact. This value is used to verify the integrity of the software artifact.

6c323d126547f71fafb4bffa02cdc480fb284678644ef0b6c69029f051fe5137

artifact.name

string

experimentalThe human-readable name of the software artifact.

Carts service

artifact.version

string

experimentalThe version of the software artifact, typically in Semantic Versioning format.

0.1.1

aspnetcore.appl.path

string

resource experimental

audit.action

string

stableAudited action.

Access to Azure Resource Manager; New User Created; User added to Group

audit.result

string

stableResult of the audited action.

Succeeded; Failed

audit.time

timestamp

experimentalTimestamp of the audited action.

16/01/2025, 10:34 AM

authentication.client.id

string

experimentalThe OAuth2 client id if of type 'CLIENT_CREDENTIALS'.

dt0s02.UZCK6ENL.2YQ2A3DZUEISRJSUU5544J3SC3TMPXSEEMNA5HK7RW54SJ6XKLYGMWJNKL7B2DNH

authentication.token

string

experimentalThe public token identifier of authentication.type 'TOKEN'.

dt0c01.AM4SEYKIBROBEJ2N3HAXZ4IX

AUTHORIZATION_CODE

The OAuth 2.0 "Authorization Code" grant type

DEVOPSTOKEN

Authenticated via DevOps token

OAUTH2

The OAuth 2.0 authentication type grant type

availability.state

string

stableState of entity (host or PGI) availability.

up

available

[PGI] PGI is available and reported.

no_data_agent_inactive

[HOST] Host is working, agent inactive (disabled manually in configuration). No data are sent.

reboot_ungraceful

[HOST] Host has started after ungraceful shutdown.

unavailable

[PGI] PGI is unavailable and not reported.

unmonitored_agent_stopped

[HOST] Host is unmonitored because agent stopped.

unmonitored_agent_upgrade

[HOST] Host is unmonitored because agent is upgrading.

aws.account.id

string

resource stableThe 12-digit number, such as 123456789012, that uniquely identifies an AWS account.Tags: permission primary-field

123456789012

aws.alb.name

string

resource experimentalApplication load balancer name that instance is behind.

my-alb

aws.availability_zone

string

resource experimentalA specific availability zone or array of zones in given AWS region.

us‑east‑1a; us‑east‑1b

aws.cloudfront.detailed_result_type

string

resource experimentalExtends the aws.cloudfront.result_type with additional states. See full list under x-edge-detailed-result-type.

OriginShieldHit; MissGeneratedResponse; InvalidRequest

aws.cloudfront.result_type

string

resource experimentalHow the server classified the response after the last byte left the server.

Hit; Miss; LimitExceeded

aws.ecr.region

string

resource experimental

aws.ecs.container.arn

string

resource experimentalThe full Amazon Resource Name (ARN) of the container.

arn:aws:ecs:us-west-2:111122223333:container/05966557-f16c-49cb-9352-24b3a0dcd0e1

aws.ecs.docker.id

string

resource experimentalThe Docker ID for the container.

cd189a933e5849daa93386466019ab50-2495160603

aws.ecs.family

string

resource experimental

aws.ecs.task.arn

string

resource experimentalThe full Amazon Resource Name (ARN) of the task to which the container belongs.

arn:aws:ecs:us-west-2:111122223333:task/default/cd189a933e5849daa93386466019ab50

aws.fle.fields_number

long

resource experimentalThe number of field-level encryption fields that the server encrypted and forwarded to the origin.

12; 27

aws.lambda.function.name

string

resource experimental

aws.log_group

string

resource experimentalAmazon CloudWatch group of log streams that share the same retention, monitoring, and access control settings.

/aws/lambda/a-SomeFumction-1AWHD6W1QC5DH

aws.region

string

resource stableA specific geographical AWS Cloud location.Tags: primary-field

us-east-1

aws.resource.name

string

resource experimentalName of the resource (value of the "Name" tag in AWS).

my-ec2-instance

aws.service

string

resource experimentalThe service that identifies the AWS product.

s3

FieldLengthLimitClientError

A field that is configured to be encrypted exceeds the maximum length allowed.

ForwardedByContentType

The server forwarded the request to the origin without parsing or encryption because no content type was configured.

ForwardedDueToNoProfile

The server forwarded the request to the origin without parsing or encryption because no profile was specified in the configuration for field-level encryption.

MalformedInputClientError

The server rejected the request and returned an HTTP 400 status code to the viewer because the request body was in an invalid format.

Processed

The server successfully processed the request body, encrypted values in the specified fields, and forwarded the request to the origin.

RejectedByQueryArgs

The server rejected the request and returned an HTTP 400 status code to the viewer because no query argument was specified in the configuration for field-level encryption.

ServerError

The origin server returned an error.

on-demand

On demand

snap-start

SnapStart

aws.kinesis.arn

string

experimentalAmazon resource name (ARN) of a Kinesis stream or consumer.

arn:aws:kinesis:us-east-2:123456789012:stream/MyKinesisStream; arn:aws:kinesis:us-west-2:123456789012:stream/MyKinesisStream/consumer/MyKinesisConsumer:1616044553

aws.kinesis.consumer.name

string

experimentalName of a Kinesis consumer.

MyKinesisConsumer

aws.kinesis.stream.name

string

experimentalName of a Kinesis stream.

MyKinesisStream

aws.request_id

string

experimentalThe AWS request ID (e.g., value of x-amzn-requestid, x-amzn-request-id, or x-amz-request-id HTTP header, awsRequestId field in AWS lambda context object).

0e7bc729-a468-57e8-8143-98f2eec5c925

aws.s3.key

string

experimentalKey name of the object.

Development/Projects.xls; Finance/statement1.pdf; s3-dg.pdf

aws.s3.part_number

long

experimentalPart number in a multi-part upload.

3456

aws.s3.source.key

string

experimentalKey of the object to copy.

Finance/statement1.pdf

aws.s3.upload_id

string

experimentalUpload ID identifying the multipart upload targeted by an operation (abort/complete/upload/…).

dfRtDYWFbkRONycy.Yxwh66Yjlx.cph0gtNBtJ

azure.availability_zones

string[]

resource experimentalAvailability zones of Azure Cloud resource.

[1]

azure.event_hub_namespace.name

string

resource experimentalAzure Event Hub Namespace name.

my-event-hub

azure.management_group

string

resource experimentalA group of Azure subscriptions used for governance use cases.

Tenant Root Group; My Custom Group

azure.resource.id

string

resource experimentalA unique, immutable identifier assigned to each Azure cloud resource.

/subscriptions/27e9b03f-04d2-2b69-b327-32f433f7ed21/resourceGroups/demo-backend-rg/providers/Microsoft.ContainerService/managedClusters/demo-aks

azure.resource.type

string

resource experimentalThe name of a resource type in the format: {resource-provider}/{resource-type}.

Microsoft.ContainerService/managedClusters

azure.site_name

string

resource experimentalGlobally unique deployment information about an Azure function.

dt-function-scripted

azure.sql_server.name

string

resource experimentalAzure SQL Server name.

contoso-sql-server

azure.tags.__tag_key__

string

resource experimentalContains the value for the tag with the tag key named __tag_key__ defined in the tag enrichment configuration.

dt_owner_mail

azure.tenant.name

string

resource experimentalName assigned to the Azure tenant.

MyAzureTenant

azure.vm_scale_set.name

string

resource experimentalAzure Virtual Machine Scale Set name.

my-vmss

bizflow.id

string

experimentalInternal ID from the business flow configured in the Business Flow app.

bizflow.url

string

experimentalURL to explore the business flow in the Business Flow app from a result in a DQL query against Smartscape nodes.

bosh.availability_zone

string

resource experimentalA specific geographical BOSH location.

us-east-1a

bosh.instance.name

string

resource stableBOSH instance name, retrievied from /var/vcap on monitored host.

diego_database

bosh.name

string

resource experimentalA unique identifier to a deployment or instance.

isolated_diego_cell_devima

browser.frame.id

uid

experimentalA unique ID generated by RUM JavaScript to identify the browser frame. The browser.frame.id is an 8-byte ID and hex-encoded if shown as a string.

f76281848bd8288c

browser.tab.id

uid

experimentalA unique ID generated by RUM JavaScript to identify the browser tab. The browser.tab.id is an 8-byte ID and hex-encoded if shown as a string.

f76281848bd8288c

browser.window.width

long

experimentalThe browser window's width, in pixels.

2048

browser.name

string

resource stableThe browser name.

Mozilla

browser.user_agent

string

resource stableThe full user agent string as provided by the browser in the HTTP User-Agent request header.

Mozilla/5.0 (Windows NT 10.0; Win64; x64)

captured_attribute.__attribute_name__

array

stableContains the span scoped raw values that were captured under the name __attribute_name__ defined by the request attribute configuration. The values are mapped as an array according to the type of the captured attributes, so either boolean, double, long, or string. If the captured attributes have mixed types (e.g. long and string, or double and long, etc.), all attributes are converted to string and stored as string array.

[42]; ['Platinum']; [32, 16, 8]; ['Special Offer', '1702']; ['18.35', '16']

cassandra.cluster.name

string

resource experimental

cicd.pipeline.id

string

experimentalThe CI/CD pipeline's identifier, which is unique within one CI/CD system.

12345

cicd.pipeline.run.id

string

experimentalAn identifier for a pipeline run, which is unique within one CI/CD system.

9876

cicd.pipeline.run.url.full

string

experimentalThe URL pointing to one specific pipeline run.

https://github.com/ACME/ACME-repo/actions/runs/9876

cicd.upstream_pipeline.id

string

experimentalThe identifier of the upstream CI/CD pipeline. If a pipeline run was triggered by another pipeline, this attribute is used to reference the triggering pipeline.

12345

canceled

The pipeline run was canceled and did not complete.

failure

The pipeline run failed.

success

The pipeline run completed successfully.

warning

The pipeline run completed with at least one warning.

client.address

string

experimentalClient address - domain name if available without reverse DNS lookup; otherwise, IP address or Unix domain socket name.

client.example.com; 10.1.2.80; [local]

client.ip

ipAddress

experimentalThe IP address of the client that makes the request. This may be IPv4 or IPv6.Tags: sensitive-spans

194.232.104.141; 2a01:468:1000:9::140

client.isp

string

experimentalThe name of the Internet Service Provider (ISP) associated with the client's IP address.

Internet Service Provider Name

cloud.account.id

string

resource stableThe cloud account ID to which the resource is assigned.

111111111111; opentelemetry

cloud.platform

string

resource stableThe cloud platform in use. ¹

alibaba_cloud_ecs

cloud.region

string

resource stableIdentifier of the cloud vendor's data center geographic region.

us-east-1

alibaba_cloud_ecs

Alibaba Cloud Elastic Compute Service

alibaba_cloud_openshift

Red Hat OpenShift on Alibaba Cloud

aws_ec2

AWS Elastic Compute Cloud

aws_eks

AWS Elastic Kubernetes Service

aws_lambda

AWS Lambda

azure_aks

Azure Kubernetes Service

azure_container_instances

Azure Container Instances

azure_openshift

Azure Red Hat OpenShift

gcp_app_engine

Google Cloud App Engine (GAE)

gcp_cloud_run

Google Cloud Run

gcp_kubernetes_engine

Google Cloud Kubernetes Engine (GKE)

ibm_cloud_openshift

Red Hat OpenShift on IBM Cloud

tencent_cloud_eks

Tencent Cloud Elastic Kubernetes Service (EKS)

alibaba_cloud

Alibaba Cloud

azure

Microsoft Azure

heroku

Heroku Platform as a Service

tencent_cloud

Tencent Cloud

cloud.target.account.id

string

experimentalThe cloud account ID used to access a cloud resource.

111111111111; 984398786124

cloud.target.region

string

experimentalIdentifier of the cloud vendor's data center geographic region.

us-east-1

alibaba_cloud

Alibaba Cloud

azure

Microsoft Azure

heroku

Heroku Platform as a Service

tencent_cloud

Tencent Cloud

cloud.origin.account.id

string

experimentalThe cloud account ID used to access a cloud resource.

111111111111; 984398786124

cloud.origin.region

string

experimentalIdentifier of the cloud vendor's data center geographic region.

us-east-1

alibaba_cloud

Alibaba Cloud

azure

Microsoft Azure

heroku

Heroku Platform as a Service

tencent_cloud

Tencent Cloud

cloudfoundry.application.id

string

resource experimental

cloudfoundry.instance.index

string

resource experimental

cloudfoundry.space.name

string

resource experimental

code.call_stack

string

experimentalThe call stack of the code.function. The call stack starts with the code.function, and the stack frames are separated by a line feed.

com.example.SampleClass.doProcessing(SampleClass.java) com.example.SampleClass.doSomeWork(SampleClass.java) com.example.SampleClass.main(SampleClass.java)

code.function

string

experimentalThe method or function name, or equivalent (usually the rightmost part of the code unit's name). Represents the name of the function that is represented by this span.

serveRequest

code.invoked.function

string

experimentalLike code.function, only it represents the function that was active when a span has been started. Typically, it's the function that has been instrumented. The spans duration does not reflect the duration of this function execution. It should only be set if it differs from code.function.

invoke

code.line.number

long

experimentalThe line number within the source code file.

1337

coldfusion.jvm.config.file

string

resource experimental

compilation_timings.compilation_count

long

experimentalThe number of compilations contributing to compilation_timings.duration_sum.

7

compilation_timings.top_compilations

record

experimentalThe top N compilations contributing to compilation_timings.duration_sum, represented as map from compilation unit name to duration in nanoseconds spent.

{'/home/user/test/php/build/tmp/php-htdocs/memcached/memcachedCli.php': 1952, '/home/user/test/php/build/tmp/php-htdocs/curl_cli_uri_filtering.php': 1306}

container.id

string

resource experimentalContainer ID. Usually a UUID, as for example used to identify Docker containers. The UUID might be abbreviated.

a3bf90e006b2

container.image.version

string

resource experimental

0.1

ctg.request.call_type

long

experimentalInteger representing the call type of the CTG GatewayRequest. The set of possible values varies per request type. ¹

2

ctg.request.extend_mode

long

experimentalInteger representing the extended mode of the CTG GatewayRequest. Only set when the request type is ECI. ²

11

ctg.request.gateway_url

string

experimentalURL of the gateway. Only set on client-side spans.

tcp://1.2.3.4:5678/

ctg.request.server_id

string

experimentalID of the server. Not set for all request types.

IPICTEST

ctg.request.type

string

experimentalType of the CTG GatewayRequest.

BASE

ADMIN

Admin request.

BASE

Base. A base GatewayRequest without a further subtype. ¹

EPI

External Presentation Interface. Enables a user application to install a virtual IBM 3270 terminal into a CICS server. ³

XA

CICS Request Exit. It can be used for request retry, dynamic server selection, and rejecting non-valid requests. ⁵

custom_service.method

string

experimentalThe service method of a custom service. This field only exists if a custom service was created via Dynatrace OneAgent SDK.

startTask; run; authenticate

db.affected_item_count

long

experimentalThe number of items (rows, documents,…) affected.

32

db.connection_string

string

experimentalThe connection string for a database connection.Tags: sensitive-spans

jdbc:dynamodb:Access Key=XXX;Secret Key=XXX;Domain=amazonaws.com;Region

db.dynamodb.table_names

string[]

experimentalThe list of tables the request targets.

[Cats, Dogs]

db.operation.name

string

stableThe name of the operation or command executed, for example the MongoDB command name, SQL keyword, Redis command name,… ¹

drop; findAndModify; SELECT; PREPARE; GetItem; set; LPUSH; mutateIn; ReadItems

db.query.text

string

stableThe database query being executed. ²

SELECT * FROM wuser_table; SET mykey "WuValue"

db.result.duration_min

duration

experimentalThe minimum duration in nanoseconds used for fetching the result.

123

db.result.exception_count

long

experimentalThe number of exceptions encountered while fetching the result.

2

db.result.roundtrip_count

long

experimentalThe number of round-trips triggered by fetching the result.

2

adabas

Adabas (Adaptable Database System)

cassandra

Apache Cassandra

cloudscape

Cloudscape

coldfusion

ColdFusion IMQ

couchbase

Couchbase

db2

IBM Db2

dl/i

IBM DL/I

edb

EnterpriseDB

filemaker

FileMaker

firstsql

FirstSQL

h2

H2

hbase

Apache HBase

hsqldb

HyperSQL DataBase

ingres

Ingres

interbase

InterBase

maxdb

SAP MaxDB

mongodb

MongoDB

mssqlcompact

Microsoft SQL Server Compact

neo4j

Neo4j

opensearch

OpenSearch

other_sql

Some other SQL database. Fallback only. See notes.

pointbase

PointBase

progress

Progress Database

redshift

Amazon Redshift

sqlite

SQLite

teradata

Teradata

deployment.release_build_version

string

resource experimentalThe build version of the deployed product.

2021-03-24

deployment.release_stage

string

resource experimentalThe stage the product is deployed to.

production

device.battery.level

long

experimentalThe device's battery level in the range 0% (discharged) to 100% (fully charged).

100

landscape

The device was in landscape mode.

device.is_rooted

boolean

resource experimentalIf set to true, the device is rooted or jailbroken.

false

device.model.identifier

string

resource experimentalThe device model identifier.

iPhone3,4

device.screen.width

long

resource experimentalThe device's screen width in its natural orientation.

2048

disk.all_mountpoints

string[]

resource experimentalList of all mountpoints

[/mnt/storage, /home, /var/log]

disk.mountpoint

string

resource experimentalPrimary mountpoint

/mnt/storage

db.dli.pcb

string

experimentalThe name of the program communication block associated with this DL/I method.

3; MYPCBNAM

db.dli.processing_options

string

experimentalThe PCB processing options.

GR

db.dli.segment_name

string

experimentalThe name of the last segment that was matched or returned.

PARTROOT

db.dli.terminal_name

string

experimentalThe DL/I database or logical terminal name associated with this DL/I method.

HWSAM5ZD; 10505

DC

Data communications.

F/P

Fast Path.

dotnet.dll.file

string

resource experimentalFilename of main dotnet assembly.

dt.active_gate.group.name

string

resource experimentalThe name of a group that the ActiveGate instance belongs to.

GdanskLab

dt.active_gate.module_name

string

resource experimentalThe name of ActiveGate module

autoupdate

cluster

Cluster ActiveGate

environment

Environment ActiveGate

dt.active_gate.api_connector.config_id

string

resource experimentalConfig long id of the endpoint configuration as a string.

123; 9276

dt.active_gate.api_connector.pipeline_status

string

resource experimentalStatus of an api connector pipeline run

failed

failed

Pipeline execution failed

succeeded

Pipeline execution succeeded

dt.agent.module.id

uid

resource stableOneAgent module ID.

031f613871fab0b4; fc3cd1bb276f0bed

dt.agent.module.type

string

resource stableOneAgent module type

apache

dt.agent.module.version_short

string

resource experimentalOneAgent short module version, to be expected only on record types where dt.agent.module.version's cardinality would be a problem

1.269

apache

apache

dumpproc

dumpproc

go

go

java

java

net

net

nginx

nginx

opentracingnative

opentracingnative

php

php

process

process

remote_plugin

remote_plugin

sdk

sdk

updater

updater

wsmb

wsmb

DISCOVERY

Discovery monitoring mode provides basic metrics enabling you to discover your hosts and processes and learn the potential to extend your monitoring.

INFRASTRUCTURE

Infrastructure monitoring mode includes topology discovery, detailed health and performance monitoring of your host, and enables Network monitoring, Log monitoring and Extensions.

dt.automation_engine.action.app

string

experimentalThe app id of the app containing the executed action.

dynatrace.workflows

dt.automation_engine.action_execution.id

string

experimentalThe unique identifier of a action execution as UUID.

23e7b55a-884f-4497-8ad6-8d49d52b4348

dt.automation_engine.action_execution.retry.count

long

experimentalRetry count of the action execution.

dt.automation_engine.root_workflow_execution.id

string

experimentalThe unique identifier of the execution of the root workflow.

a641fb59-4627-44cd-abaf-b68d86455a5b

dt.automation_engine.state.is_final

boolean

experimentalIndicates if dt.automation_engine.state is a final and immutable state or if further processing will happen.

true; false

dt.automation_engine.task.name

string

experimentalThe identifier of a task within a workflow.

task_1

dt.automation_engine.workflow.id

string

experimentalThe unique identifier of a workflow as UUID.

26c0334e-a3e1-4585-8cd8-2d72742fe141

dt.automation_engine.workflow.type

string

experimentalWorkflow type, either SIMPLE or STANDARD, where SIMPLE comes with restrictions.

SIMPLE; STANDARD

dt.automation_engine.workflow_execution.trigger.type

string

experimentalThe identifier that describes the trigger of the workflow.

Schedule; Event; Workflow; Manual

dt.automation_engine.workflow_execution.trigger.workflow_execution.id

string

experimentalThe unique identifier of the workflow that triggered the workflow execution.

737a248b-d1cb-49a4-bf08-7d4c37dbfb1e

dt.da.aws.data_firehose.arn

string

experimentalARN of AWS Data Firehose signal is originating from.

arn:aws:firehose:us-east-1:111110000111:deliverystream/tenantId-http-endpoint-direct-firehose-stream

dt.da.aws.log_stream

string

experimentalName of the source Amazon CloudWatch Log stream

2025/02/18/[$LATEST]12312312313123123123123123123123

dt.da.aws.s3.key.name

string

experimentalName of S3 bucket name signal is originating from

AWSLogs/111110000111/CloudTrail/us-east-1/2025/02/18/111110000111_CloudTrail_us-east-1_20250218T0000Z.json.gz

dt.da.azure.event_hub.name

string

experimentalThe name of the Event Hub that the signal is originating from

logs-ingest-eventHub/logs-ingest

aws-log-ingest

aws-log-ingest

aws-metrics-ingest

aws-metrics-ingest

dt.davis.analysis_time_budget

long

stableThe time budget (in seconds) that the Davis® engine is granted before it must raise a problem. The analysis time budget can be set per event and controls the balance of sending out alerts early and granting the AI analysis enough time to finish its analysis. The trade-off of a short analysis budget is that the root cause and event merge analysis is limited or even skipped. For example, the time budget of 0 seconds means that the event raises a problem and sends the alert immediately, without any analysis.

dt.davis.is_entity_remapping_allowed

boolean

stableThis flag defines whether the remapping of the target entity is enabled (true) or disabled (false). If the remapping is enabled, Dynatrace can map the event to an entity extracted from the event metadata. If the remapping is disabled or the extraction is not possible, Dynatrace maps the event to the entity specified in the event configuration (for example, a specific host) or to the global environment entity.

dt.davis.is_merging_allowed

boolean

stableThis flag controls whether the Davis® engine is allowed to merge this event into a larger problem (true) or if a new problem must be created (false).

dt.davis.is_rootcause_relevant

boolean

stableThis flag controls whether the Davis® engine should include this event within the root cause analysis (true) or if it is not (false) relevant.

dt.davis.timeout

long

stableThe event timeout period (in minutes). Various event sources use this event property to keep an event active by regularly refreshing an initial event. The timeout defines how fast the event source must refresh an event to keep it active. To keep the event active, the event source must send the refresh within the timeout period. If no refresh is sent, the event is automatically closed by Dynatrace after the timeout period. Note that metric sources use their own configurable de-alerting windows to close events. Setting the timeout shorter than the de-alerting window will force events to close and increase the risk of false-positive alerts.

dt.davis.anomaly_detection.alert

long

stableBoolean time series of 0 and 1 showing whether a single timespan was alerted due to continuous violations.

dt.davis.anomaly_detection.lower

long

stableThe lower value range limit where any value below this point is considered abnormal.

dt.davis.forecast.lower

long

stableThe lower bound of the prediction interval of a given metric forecast.

dt.davis.forecast.upper

long

stableThe upper bound of the prediction interval of a given metric forecast.

dt.endpoint_detection.rule_id

uid

experimentalThe ID of the endpoint detection rule that was applied to that span.

4d76194c11a9426197a9062548f9e66e

dt.entity.application

string

resource stableThe ME ID of a web application.Tags: entity-id

APPLICATION-DC92E74A7A844E6E

dt.entity.azure_region

string

resource stableAn entity ID of an entity of type AZURE_REGIONTags: entity-id

AZURE_REGION-0DD5C79E4034F0AA

dt.entity.cloud_application

string

resource stableAn entity ID of an entity of type CLOUD_APPLICATION.Tags: entity-id

CLOUD_APPLICATION-3AB5BBF3E09A7942

dt.entity.cloud_application_namespace

string

resource stableAn entity ID of an entity of type CLOUD_APPLICATION_NAMESPACE. A CLOUD_APPLICATION_NAMESPACE is a Kubernetes namespace.Tags: entity-id

CLOUD_APPLICATION_NAMESPACE-C61324AA70F57BCB

dt.entity.container_group_instance

string

resource stableAn entity ID of an entity of type CONTAINER_GROUP_INSTANCE.Tags: entity-id

CONTAINER_GROUP_INSTANCE-F4A1347110826781

dt.entity.custom_device

string

resource stableAn entity ID of an entity of type CUSTOM_DEVICE.Tags: entity-id

CUSTOM_DEVICE-E0D8F94D9065F24F

dt.entity.ec2_instance

string

resource stableAn entity ID of an entity of type EC2_INSTANCETags: entity-id

EC2_INSTANCE-0004DD30F142D18C

dt.entity.external_synthetic_test_step

string

resource stableAn entity ID of an entity of type EXTERNAL_SYNTHETIC_TEST_STEP.Tags: entity-id

EXTERNAL_SYNTHETIC_TEST_STEP-A140F3B85BCCBD1A

dt.entity.host

string

resource stableAn entity ID of an entity of type HOST.Tags: entity-id

HOST-E0D8F94D9065F24F

dt.entity.http_check

string

resource stableAn entity ID of an entity of type HTTP_CHECK.Tags: entity-id

HTTP_CHECK-A140F3B85BCCBD1A

dt.entity.kubernetes_cluster

string

resource stableAn entity ID of an entity of type KUBERNETES_CLUSTER.Tags: entity-id

KUBERNETES_CLUSTER-E0D8F94D9065F24F

dt.entity.kubernetes_service

string

resource stableAn entity ID of an entity of type KUBERNETES_SERVICE.Tags: entity-id

KUBERNETES_SERVICE-FE6E75BB9DF02347

dt.entity.multiprotocol_monitor

string

resource stableAn entity ID of an entity of type MULTIPROTOCOL_MONITOR.Tags: entity-id

MULTIPROTOCOL_MONITOR-A140F3B85BCCBD1A

dt.entity.process_group

string

resource stableAn entity ID of an entity of type PROCESS_GROUP.Tags: entity-id

PROCESS_GROUP-E0D8F94D9065F24F

dt.entity.service

string

resource stableAn entity ID of an entity of type SERVICE.Tags: entity-id

SERVICE-57EC3CFC1FE72449

dt.entity.service_method_group

string

resource stableAn entity ID of an entity of type SERVICE_METHOD_GROUP.Tags: entity-id

SERVICE_METHOD_GROUP-02000E1DB1CDAF9F

dt.entity.synthetic_test

string

resource stableAn entity ID of an entity of type SYNTHETIC_TEST.Tags: entity-id

SYNTHETIC_TEST-A140F3B85BCCBD1A

dt.extension.config.id

string

resource experimentalExtension's monitoring configuration identifier.

vu9U3hXa3q0AAAABAAtleHQ6ZXh0LTA0MAAIYWdfZ3JvdXAAA0FHMQAkMjY2YTIyM2YtZDgxYi0zNTNjLThlYzctYzk2YzliZjg4OGQ3vu9U3hXa3q0

dt.extension.endpoint.hints

string[]

resource experimentalHints to provide for the cluster in order to find proper endpoint in task registry.

[nat-test.lab.dynatrace.org, 1521, orc]

dt.extension.status

string

resource experimentalThe status of the component reporting a self-monitoring event.

AUTHENTICATION_ERROR

AUTHENTICATION_ERROR

Unable to connect to EEC

EEC_CONNECTION_ERROR

Unable to connect to EEC

INVALID_ARGS_ERROR

Invalid arguments

OK

Extension works fine

dt.ingest.debug_messages

string[]

experimentalAn array of strings that represent debug messages that provide a detailed debugging information. That could include even variable parts, like which attribute was modified, or which processing rules were applied.

[MyATTribute mapped to myAttribute]

dt.ingest.size

long

stableThe size of the ingested data point in bytes.

2005

dtapi/json

JSON data ingested via the Dynatrace APIs or via EEC (Extension Execution Controller)

journald

Journald data ingested via OneAgent

otlp/protobuf

OpenTelemetry Protocol (OTLP) Protobuf data ingested via the Dynatrace APIs or via EEC (Extension Execution Controller)

syslog

Syslog data ingested via OneAgent

windowseventlog

Windows event log data ingested via OneAgent

content_trimmed

The content was trimmed, right after receiving it by Cluster/ActiveGate, because it exceeded the event content max byte size limit.

attr_count_trimmed

The number of attributes was trimmed, right after receiving it by Cluster/ActiveGate, because it exceeded the max number of attributes limit.

attr_key_case_mismatch

The attribute key is detected that matches the custom attribute key or the semantic attribute key, but there is the attribute key case mismatch.

attr_val_count_trimmed

At least one multi-value attribute had values number trimmed, right after receiving it by Cluster/ActiveGate, because it exceeded the max number of attributes limit.

attr_val_size_trimmed

At least one attribute had its value size trimmed, right after receiving it by Cluster/ActiveGate, because it exceeded the max value size in bytes limit.

timestamp_corrected

Timestamp was too far in the future and was corrected to current time.

processing_batch_timeout

Batch timeout occurred during processing pipeline.

processing_transformer_error

Execution error in one of processing transformers occurred during processing pipeline.

processing_output_record_conversion_error

Output conversion error occurred for some record during processing pipeline.

dt.cost.costcenter

string

resource stableCan be used to assign usage to a Cost Center.

Team A

dt.host_group.id

string

resource stablesee Organize your environment using host groups. Note that host groups are identified by their name. This is not the entity ID of Host Group Entity, for which see dt.entity.host_groupTags: permission primary-field

myHostGroup

dt.network_zone.id

string

resource experimentalThe ID of the network zone. See Dynatrace Documentation

vpc-123

dt.pg_detection.custom_entry

string

resource experimentalalso see Define metadata via environment variables

dt.pg_detection.environment.id

string

resource experimentalDT_ENVIRONMENT_ID environment variable

dt.process_group.detected_name

string

resource stableThe name of the process group as it was detect by the agent.

Apache Web Server httpd; Redis unguard-redis-* redis

dt.smartscape_source.id

string

resource experimentalThe ID of the entity considered the source of the signal. The string represents an entity ID of an entity that is stored in the Smartscape storage. ²Tags: smartscape-id

K8S_CLUSTER-E0D8F94D9065F24F; AWS_LAMBDA_FUNCTION-E0D8F94D9065F24F

dt.source_entity

string

resource stableThe ID of the entity considered the source of the signal. The string represents an entity ID of an entity that is stored in the classic entity storage. ³Tags: entity-id

HOST-E0D8F94D9065F24F; PROCESS_GROUP_INSTANCE-E0D8F94D9065F24F

dynatrace_codemodule

dynatrace_codemodule

dynatrace_osagent

OsAgent

oneagent_metric_api

OneAgentMetricAPI

statsd

StatsD

dt.maintenance_window_ids

array

experimentalUUIDs of maintenance windows.

c715d677-eb1b-3e1b-8dbc-db06cad5b8eb

dt.raw_data

string

experimentalThe complete content of the record as it was originally accepted by Dynatrace, stored as a string in JSON format. This field captures the unaltered data for reference, debugging, or auditing purposes

{"content": "example record content"}

dt.openpipeline.pipelines

string[]

resource experimentalCollects the identifiers of all pipelines through which a record has passed during the ingestion process in OpenPipeline, providing a complete trace of its journey.

[[logs:default], [logs:pipeline_haproxy_2656, bizevents:default]]

dt.openpipeline.source_type

string

resource experimentalIdentifies the source type used to ingest data in Dynatrace, for example, from OTLP and OneAgent.

otlp; oneagent

api

Logs ingested via one of the ActiveGate APIs

extension

Logs ingested via the EEC running on host

otlp

Logs ingested via the OpenTelemetry Protocol (OTLP)