Azure Native Dynatrace Service

Azure Marketplace integration enables you to build a streamlined experience for purchasing, configuring, and managing the APM solution directly inside the Azure portal. After setting up the integration, Dynatrace appears as an Azure native service, and you can manage its configuration from Azure Portal.

Prerequisites

Activate the private plan for Azure Native Dynatrace Service

Register the Dynatrace resource provider

Set up permissions

Activate the private plan for Azure Native Dynatrace Service

The Azure Native Dynatrace Service is available via a private plan. To have Dynatrace create a private plan for you, contact Dynatrace. Once you accept the offer, the private plan for Azure Native Dynatrace Service will be accessible on Azure Marketplace.

Register the Dynatrace resource provider

To create and manage the Dynatrace resources using the Azure Portal, you need to register a Dynatrace resource provider named Dynatrace.Observability in your Azure subscription.

bashcopydownload
az provider register --namespace Dynatrace.Observability --subscription <subscription-id>

Set up permissions

General permissions

• You need a Contributor permission to the Azure subscription.

Note: The first user creating the first Dynatrace resource and environment in a subscription becomes the Dynatrace account owner of the Dynatrace account that is created during the integration deployment. For all subsequent Dynatrace resources and environments that are created in the same subscription by other users, the account owner will also have full permissions.

SSO permissions

If you use Azure Active Directory as your identity provider, you can establish single sign-on (SSO) from the Azure portal to Dynatrace. If you use a different identity provider or you don't want to establish SSO, you can skip this section.

• To enable single sign-on authentication for your Dynatrace resource, you need to set up SSO in Azure Active Directory.

  How to set up SSO

  1. On the Azure Portal, go to Azure Active Directory > Enterprise applications > New application.
  2. In the search field, enter Dynatrace.
  3. Select the Dynatrace application, and then select Create.
  4. After the application is created, go to the Dynatrace application and select Properties.
  5. Set Assignment required? to No, and then select Save.
  6. From the menu, select Single sign-on, and then select SAML.
  7. When prompted to Save single sign-on settings, select Yes.

Note: After setting up SSO in Active Directory, you can enable SSO during or after the Azure integration deployment.

Set up the integration

When you first deploy the Azure Native Dynatrace Service, a new Dynatrace environment hosted on a new Dynatrace resource is created.

• The Dynatrace resource is created in the Azure subscription and resource group that you select during the installation deployment. You can configure, manage, and troubleshoot issues on your Dynatrace resource from the Azure Portal.

• The Dynatrace environment is created in the same Azure region in which you create the Dynatrace resource. In this new environment:

  • After you install OneAgent, you can start monitoring metrics from your Azure resources. You can also collect metrics from the default services
  • You can collect logs from your Azure resources
  • You do not need an environment ActiveGate for this integration.

To set up the integration

1. Go to the Azure subscription where you want to create the Dynatrace resource.

2. Select Resources, and then select Create.

3. Search for Dynatrace. You get a message that You have private products available. Select View private products.

4. Select Dynatrace Software Intelligence Platform (SaaS), and then select Subscribe.

5. On Create a new Dynatrace environment, select Create.

6. In Basics, for Resource group, specify whether to create a new resource group or use an existing one.

   Note: A resource group is a container that holds related resources for an Azure solution. For more information, see Azure Resource Group overview.

7. Enter a Resource name for the Dynatrace resource, and then select a Region from the dropdown menu. The Dynatrace resource in Azure and the Dynatrace environment will be created in the selected region.

8. Select your Pricing plan, and then select Next: Metrics and Logs.

9. optional Select whether to Send subscription activity logs and/or Send Azure resource logs. For details, see Configure metrics and logs.

   Note: If you select Send Azure resource logs for all defined services, Azure resource logs are sent for all defined resources by default, which means logs are collected for all supported resources. To filter the specific set of Azure resources sending logs to Dynatrace, you can use Azure resource tags. Tag rules are:

   • Azure resources with Include tags send logs to Dynatrace.
   • Azure resources with Exclude tags don't send logs to Dynatrace.
   • If there's a conflict between inclusion and exclusion rules, exclusion takes priority.

10. Select Next: Single sign-on.

11. optional Choose whether to Enable SSO through Azure Active Directory.

    • If you don't want to enable this feature, select Next: Tags.
    • If you want to enable this feature, select it, select the Dynatrace application ID that is displayed, and then select Next: Tags.

12. optional Specify tags for the new Dynatrace resource, and then select Next: Review + create.

13. Verify if the information submitted is correct, and then select Create. When the deployment is complete, you can select Go to resource to navigate to the specific Dynatrace resource.

Link multiple Azure subscriptions to one Dynatrace environment optional

After deploying the Azure integration, you can:

• Link more Azure subscriptions to your newly created Dynatrace environment.
• Link more Dynatrace environments to a single Azure subscription.

Follow the steps below, making sure to repeat the procedure for every subscription that you want to link.

1. Go to your desired Azure subscription, select Resources, and then select Create.

2. Search for Dynatrace. You get a message that You have private products available. Select View private products.

3. Select Dynatrace Software Intelligence Platform (SaaS), and then select Subscribe.

4. On the option Link Azure subscription to an existing Dynatrace environment, select Create.

5. In Basics, for Resource group, specify whether to create a new resource group or use an existing one.

   Note: A resource group is a container that holds related resources for an Azure solution. For more information, see Azure Resource Group overview.

6. Enter a Resource name and then select a Region from the dropdown menu.

   Note: The Dynatrace environment to link and your new Dynatrace resource must be in the same region.

7. Select the Dynatrace environment to link to the Azure subscription, and then select Next: Metrics and Logs.

8. optional Select whether to Send subscription activity logs and/or Send Azure resource logs. For details, see Configure metrics and logs.

   Note: If you select Send Azure resource logs for all defined services, Azure resource logs are sent for all defined resources by default, which means that logs are collected for all supported resources. To filter the specific set of Azure resources sending logs to Dynatrace, you can use Azure resource tags. Tag rules are:

   • Azure resources with Include tags send logs to Dynatrace.
   • Azure resources with Exclude tags don't send logs to Dynatrace.
   • If there's a conflict between inclusion and exclusion rules, exclusion takes priority.

9. Skip Next: Single sign-on (you can only configure SSO after deployment) and then select Next: Tags.

10. optional Specify tags for the new Dynatrace resource, and then select Next: Review + create.

11. Verify if the information submitted is correct, and then select Create. When the deployment is complete, you can select Go to resource to navigate to the specific Dynatrace resource.

Access your Dynatrace environment

After you set up the integration, you can access your Dynatrace environment directly from Azure Portal.

In Azure Portal, go to your Dynatrace resource and select Overview. All details of your Dynatrace environment will appear there, including direct links to the following web UI pages:

• Dashboards - For details, see Dashboards Classic.
• Log Viewer - For details, see Log viewer (Logs Classic).
• Smartscape topology - For details, see Visualize your environment topology through Smartscape.

Configure metrics and logs

Metrics

• You can activate metrics after the Azure integration deployment.

Collect metrics from Virtual Machines and App Services

Collect metrics from cloud services

Collect metrics from Virtual Machines and App Services

To start collecting metrics from your Virtual Machines and App Services, you need to install Dynatrace OneAgent on these resources as an extension .

Collect metrics from cloud services

All services and metrics are enabled by default. You can disable them if needed by selecting the delete button from the list of services. After Dynatrace connects to your Azure environment, it immediately starts monitoring Azure's built-in services for the service principal you have defined. Default Azure metrics lists the metrics of Azure cloud services monitored by default.

Manage cloud services

All cloud services are monitored by default, but you can quickly disable them from the list or re-enable them as needed.

To add services to monitoring

1. In the Dynatrace menu, go to Settings and select Cloud and virtualization > Azure.
2. On the Azure overview page, find the connection that you want to change and select Edit in that row.
3. Under Services, select Manage services.
4. For each service that you want to add: select Add service, select the service from the list, and then select Add service.
5. Select Save changes to save your configuration.

After you select the cloud services and save your changes, monitoring of the newly added services starts automatically.

Logs

• You can activate logs either during the Azure integration deployment or after deployment.

You can set up two types of logs from Azure to Dynatrace: subscription activity logs and Azure resource logs.

Subscription activity logs

Subscription activity logs provide insights into the operations (PUT, POST, DELETE) performed on each Azure resource in your subscription (the management plane). For each Azure subscription, there's a single activity log.

Azure resource logs

Azure resource logs provide insights into operations that were performed within an Azure resource (the data plane), such as getting a secret from a key vault or making a request to a database. The content of resource logs varies by the Azure service and resource type.

For a list of Azure resource logs, see Supported categories for Azure Monitor resource logs.

How to activate logs after deployment

Create tags

• You can create tags either during the Azure integration deployment or after deployment.

You can apply tags to your Azure resources, resource groups, and subscriptions to logically organize them into a taxonomy. You can specify tags for the new Dynatrace resource in Azure by adding custom key/value pairs:

• For Name, enter the name of the tag corresponding to the Azure Dynatrace resource (for example, owner).
• For Value, enter the value of the tag corresponding to the Azure Dynatrace resource (for example, the owner's email account).

Note: If you don't set any tags, all logs from the monitored resources on your Azure subscription are sent to Dynatrace.

How to create tags after deployment

In the Azure Portal, go to your new Dynatrace resource, and then select Tags. Alternatively, you can select Monitored resources, and then select Edit tags for the desired resources.

Manage monitored resources in Azure Portal

After deploying the Azure Native Dynatrace Service, you can view, manage, and monitor your Azure resources, and you can install OneAgent on your Azure Virtual Machines and Azure App Services.

To view your list of resources, in the Azure Portal, go to your Dynatrace resource and select Monitored resources. You can filter the list of resources displayed by Resource name (Azure resource name), Resource type (Azure resource type), Resource group (resource group name for the Azure resource), Region (location of the Azure resource), and Logs to Dynatrace (whether the resource is sending logs to Dynatrace).

Note: To debug why a resource isn't sending logs, see Troubleshoot.

Deploy OneAgent on Azure Virtual Machines and Azure App Services

• You can deploy OneAgent after the Azure integration deployment.

To monitor your Azure Virtual Machines or Azure App Services, you can install Dynatrace OneAgent on these resources as an extension.

Uninstall the Azure Native Dynatrace Service

To uninstall the Azure Native Dynatrace Service, you need to delete the Dynatrace resource. When the Dynatrace resource is deleted from Azure, logs and metrics are no longer sent to Dynatrace and all billing for Dynatrace through Azure Marketplace stops.

To delete the Dynatrace resource

1. In the Azure Portal, go to your Dynatrace resource and select Overview.
2. Select Delete.
3. Enter the name of the application you want to delete, then select Delete.

Troubleshoot

Log ingest FAQ