How are new problems evaluated and raised?

Dynatrace continuously measures incoming traffic levels against defined thresholds to determine when a detected slowdown or error-rate increase justifies the generation of a new problem event. Rapidly increasing response-time degradations for applications and services are evaluated based on sliding 5-minute time intervals. Slowly degrading response-time degradations are evaluated based on 15-minute time intervals.

Note that newly detected anomalous events in your environment won't necessarily result in the immediate raising of a new problem. Raised problems always provide insight into the underlying root cause. To identify the root causes of problems, Dynatrace analyzes the correlation of events across time, processes, hosts, services, applications, and both vertical and horizontal topological monitoring perspectives. Only by correlating events across time and all these monitoring perspectives can Dynatrace pinpoint the root causes of problems. And only then will you be alerted to a detected problem. For more details, see automatic correlation of dependent topological incidents.

Understanding thresholds

Dynatrace utilizes three types of thresholds:

  • Automated baselines: Multidimensional baselining automatically detects individual reference values that adapt over time. Automated baseline reference values are used to cope with dynamic changes within your application or service response times, error rates, and load.
  • Built-in static thresholds: Dynatrace uses built-in static thresholds for all infrastructure events (for example, detecting high CPU, low disk space, or low memory).
  • User-defined static thresholds: With customizable anomaly detection settings (available at Settings > Anomaly detection), you can overwrite the default static thresholds for infrastructure events. You can also switch from automated baselining for application and service anomaly detection to static thresholds. With static thresholds, the detected baseline thresholds are overwritten by your custom static thresholds for individual dimensions.

The methodology used for raising events with automated baselining is completely different from that used for static thresholds. The following sections provide details about both methods: