Creating log metric

Dynatrace Log Management and Analytics gives you the ability not only to view and analyze logs but also to create metrics based on log data and use them throughout Dynatrace like any other metric. You can add them to your dashboard, include them in an analysis, and even create custom alerts.

Create connections refused metric

You need to count how many refused connections are recorded in your log data. For that, filter the correct logs and turn the number of occurrences into a log metric. By tracking the metric, you can track possible firewall, network connectivity or server configuration issues.

Build DQL query

To build and run your query:

1. In the Dynatrace menu, go to Logs.
2. On the Logs and events page, turn on Advanced mode.
3. Select copy for the code sample below.

   dqlcopydownload
   fetch logs
   | filter matchesPhrase(content, "Connection refused")
   | sort timestamp desc

4. Paste the query into the query edit box and select Run query.

This query performs the following actions:

• Retrieves logs with the Connection refused phrase found in the log content.
• Sorts the result in descending order according to the timestamp.

Create metric

1. Go to Settings > Log Monitoring > Metrics extraction and select Add log metric.
2. In Key, append the metric name to the log. metric key: log.conn_refused_count
3. Add Matcher.
   Use the DQL function for matching phrases, which is part of the Dynatrace Query Language (DQL):

   dqlcopydownload
   matchesPhrase(content, "Connection refused")

   This will filter the log data containing the phrase Connection refused.
4. For the Metrc measurement option, select Occurrence of log records.
   The metric will represent the count of occurrences of log records that contain Connection refused phrase.
5. Select Save changes to create the log metric.

View metric

View the result in data explorer:

1. In the Dynatrace menu, go to Data explorer.
2. Select log.conn_refused_count log key.
3. Select Run query.

Create log attribute metric

You need to monitor an attribute of your logs, and you need to keep an eye on the error levels reported in your logs from your K8s cluster. Find the correct logs from Grail, and use the filters to create a new metric for these. Turn your attention to add log status (error/warning/info) to your metric, which makes it easy to track these with metrics.

Build DQL query

To build and run your query:

1. In the Dynatrace menu, go to Logs.
2. On the Logs and events page, turn on Advanced mode.
3. Select copy for the code sample below.

   dqlcopydownload
   fetch logs
   | filter matchesValue(dt.entity.kubernetes_cluster, "KUBERNETES_CLUSTER-92233333")
   | summarize count(), by:status

4. Paste the query into the query edit box and select Run query.

This query performs the following actions:

• Retrieves log records with the dt.entity.kubernetes_cluster attribute containing KUBERNETES_CLUSTER-92233333 phrase in the log content.
• Counts the number of such log records and orders them by their status attribute.

Create metric

1. Go to Settings > Log Monitoring > Metrics extraction and select Add log metric.
2. In Key, append the metric name to the log. metric key: K8-92233333
3. Add Matcher.
   Use the DQL function for matching phrases, which is part of the Dynatrace Query Language (DQL):

   dqlcopydownload
   matchesValue(dt.entity.kubernetes_cluster, "KUBERNETES_CLUSTER-92233333")

4. For the Metrc measurement option, select Occurrence of log records.
   The metric will represent the count of occurrences of log records that contain KUBERNETES_CLUSTER-92233333 phrase.
5. Add a dimension status.
6. Select Save changes to create the log metric.

View metric

View the result in data explorer:

1. In the Dynatrace menu, go to Data explorer.
2. Select log.K8-92233333 log key and in the Split by add status.
3. Select Run query.