Azure Native Dynatrace Service
Azure Marketplace integration enables you to build a streamlined experience for purchasing, configuring, and managing the APM solution directly inside the Azure portal. After setting up the integration, Dynatrace appears as an Azure native service, and you can manage its configuration from Azure Portal.
Prerequisites
Activate the private plan for Azure Native Dynatrace Service
Register the Dynatrace resource provider
Set up permissions
Activate the private plan for Azure Native Dynatrace Service
The Azure Native Dynatrace Service is available via a private plan. To have Dynatrace create a private plan for you, contact Dynatrace. Once you accept the offer, the private plan for Azure Native Dynatrace Service will be accessible on Azure Marketplace.
Register the Dynatrace resource provider
To create and manage the Dynatrace resources using the Azure Portal, you need to register a Dynatrace resource provider named Dynatrace.Observability
in your Azure subscription.
Set up permissions
General permissions
- You need a
Contributor
permission to the Azure subscription.
The first user creating the first Dynatrace resource and environment in a subscription becomes the Dynatrace account owner of the Dynatrace account that is created during the integration deployment. For all subsequent Dynatrace resources and environments that are created in the same subscription by other users, the account owner will also have full permissions.
SSO permissions
If you use Azure Active Directory as your identity provider, you can establish single sign-on (SSO) from the Azure portal to Dynatrace. If you use a different identity provider or you don't want to establish SSO, you can skip this section.
-
To enable single sign-on authentication for your Dynatrace resource, you need to set up SSO in Azure Active Directory.
After setting up SSO in Active Directory, you can enable SSO during or after the Azure integration deployment.
Set up the integration
When you first deploy the Azure Native Dynatrace Service, a new Dynatrace environment hosted on a new Dynatrace resource is created.
-
The Dynatrace resource is created in the Azure subscription and resource group that you select during the installation deployment. You can configure, manage, and troubleshoot issues on your Dynatrace resource from the Azure Portal.
-
The Dynatrace environment is created in the same Azure region in which you create the Dynatrace resource. In this new environment:
- After you install OneAgent, you can start monitoring metrics from your Azure resources. You can also collect metrics from the default services
- You can collect logs from your Azure resources
- You do not need an environment ActiveGate for this integration.
To set up the integration
-
Go to the Azure subscription where you want to create the Dynatrace resource.
-
Select Resources, and then select Create.
-
Search for
Azure Native Dynatrace Service
. You should see the message that a private product is available. -
Select the tile Azure Native Dynatrace Service.
-
In the list for choosing a plan, select the private plan that you accepted in Activate the private plan for Azure Native Dynatrace Service and then select Subscribe.
-
On Create a new Dynatrace environment, select Create.
-
In Basics, for Resource group, specify whether to create a new resource group or use an existing one.
A resource group is a container that holds related resources for an Azure solution. For more information, see Azure Resource Group overview.
-
Enter a Resource name for the Dynatrace resource, and then select a Region from the dropdown menu. The Dynatrace resource in Azure and the Dynatrace environment will be created in the selected region.
-
Select your Pricing plan, and then select Next: Metrics and Logs.
-
optional Select whether to Send subscription activity logs and/or Send Azure resource logs. For details, see Configure metrics and logs.
If you select Send Azure resource logs for all defined services, Azure resource logs are sent for all defined resources by default, which means logs are collected for all supported resources. To filter the specific set of Azure resources sending logs to Dynatrace, you can use Azure resource tags. Tag rules are:
- Azure resources with
Include
tags send logs to Dynatrace. - Azure resources with
Exclude
tags don't send logs to Dynatrace. - If there's a conflict between inclusion and exclusion rules, exclusion takes priority.
- Azure resources with
-
Select Next: Single sign-on.
-
optional Choose whether to Enable SSO through Azure Active Directory.
- If you don't want to enable this feature, select Next: Tags.
- If you want to enable this feature, select it, select the Dynatrace application ID that is displayed, and then select Next: Tags.
-
optional Specify tags for the new Dynatrace resource, and then select Next: Review + create.
-
Verify if the information submitted is correct, and then select Create. When the deployment is complete, you can select Go to resource to navigate to the specific Dynatrace resource.
Link multiple Azure subscriptions to one Dynatrace environment optional
After deploying the Azure integration, you can:
- Link more Azure subscriptions to your newly created Dynatrace environment.
- Link more Dynatrace environments to a single Azure subscription.
Follow the steps below, making sure to repeat the procedure for every subscription that you want to link.
-
Go to your desired Azure subscription, select Resources, and then select Create.
-
Search for
Azure Native Dynatrace Service
. You should see the message that a private product is available. -
Select the tile Azure Native Dynatrace Service.
-
In the list for choosing a plan, select the private plan that you accepted in Activate the private plan for Azure Native Dynatrace Service and then select Subscribe.
-
On the option Link Azure subscription to an existing Dynatrace environment, select Create.
-
In Basics, for Resource group, specify whether to create a new resource group or use an existing one.
A resource group is a container that holds related resources for an Azure solution. For more information, see Azure Resource Group overview.
-
Enter a Resource name and then select a Region from the dropdown menu.
The Dynatrace environment to link and your new Dynatrace resource must be in the same region.
-
Select the Dynatrace environment to link to the Azure subscription, and then select Next: Metrics and Logs.
-
optional Select whether to Send subscription activity logs and/or Send Azure resource logs. For details, see Configure metrics and logs.
If you select Send Azure resource logs for all defined services, Azure resource logs are sent for all defined resources by default, which means that logs are collected for all supported resources. To filter the specific set of Azure resources sending logs to Dynatrace, you can use Azure resource tags. Tag rules are:
- Azure resources with
Include
tags send logs to Dynatrace. - Azure resources with
Exclude
tags don't send logs to Dynatrace. - If there's a conflict between inclusion and exclusion rules, exclusion takes priority.
- Azure resources with
-
Skip Next: Single sign-on (you can only configure SSO after deployment) and then select Next: Tags.
-
optional Specify tags for the new Dynatrace resource, and then select Next: Review + create.
-
Verify if the information submitted is correct, and then select Create. When the deployment is complete, you can select Go to resource to navigate to the specific Dynatrace resource.
Access your Dynatrace environment
After you set up the integration, you can access your Dynatrace environment directly from Azure Portal.
In Azure Portal, go to your Dynatrace resource and select Overview. All details of your Dynatrace environment will appear there, including direct links to the following web UI pages:
- Dashboards - For details, see Dashboards Classic.
- Log Viewer - For details, see Log viewer (Logs Classic).
- Smartscape topology - For details, see Visualize your environment topology through Smartscape.
Configure metrics and logs
Metrics
- You can activate metrics after the Azure integration deployment.
Collect metrics from Virtual Machines and App Services
Collect metrics from cloud services
Collect metrics from Virtual Machines and App Services
To start collecting metrics from your Virtual Machines and App Services, you need to install Dynatrace OneAgent on these resources as an extension .
Collect metrics from cloud services
All services and metrics are enabled by default. You can disable them if needed by selecting the delete button from the list of services. After Dynatrace connects to your Azure environment, it immediately starts monitoring Azure's built-in services for the service principal you have defined. Default Azure metrics lists the metrics of Azure cloud services monitored by default.
Manage cloud services
All cloud services are monitored by default, but you can quickly disable them from the list or re-enable them as needed.
To add services to monitoring
- In the Dynatrace menu, go to Settings and select Cloud and virtualization > Azure.
- On the Azure overview page, find the connection that you want to change and select Edit
in that row.
- Under Services, select Manage services.
- For each service that you want to add: select Add service, select the service from the list, and then select Add service.
- Select Save changes to save your configuration.
After you select the cloud services and save your changes, monitoring of the newly added services starts automatically.
Logs
- You can activate logs either during the Azure integration deployment or after deployment.
You can set up two types of logs from Azure to Dynatrace: subscription activity logs and Azure resource logs.
Subscription activity logs
Subscription activity logs provide insights into the operations (PUT, POST, DELETE) performed on each Azure resource in your subscription (the management plane). For each Azure subscription, there's a single activity log.
Azure resource logs
Azure resource logs provide insights into operations that were performed within an Azure resource (the data plane), such as getting a secret from a key vault or making a request to a database. The content of resource logs varies by the Azure service and resource type.
For a list of Azure resource logs, see Supported categories for Azure Monitor resource logs.
How to activate logs after deployment
- In the Azure Portal, go to your Dynatrace resource and select Metrics and logs.
- Select Send subscription activity logs.
- Select Save.
-
In the Azure Portal, go to your Dynatrace resource and select Metrics and logs.
-
Select Send Azure resource logs for all defined sources.
When selecting this option, Azure resource logs are sent for all defined resources by default, which means that logs are collected for all supported resources.
-
optional If you want to filter the specific set of Azure resources sending logs to Dynatrace, you can use Azure resource tags. Tag rules are:
- Azure resources with
Include
tags send logs to Dynatrace. - Azure resources with
Exclude
tags don't send logs to Dynatrace. - If there's a conflict between inclusion and exclusion rules, exclusion takes priority.
- Azure resources with
-
Select Save.
Create tags
- You can create tags either during the Azure integration deployment or after deployment.
You can apply tags to your Azure resources, resource groups, and subscriptions to logically organize them into a taxonomy. You can specify tags for the new Dynatrace resource in Azure by adding custom key/value pairs:
- For Name, enter the name of the tag corresponding to the Azure Dynatrace resource (for example,
owner
). - For Value, enter the value of the tag corresponding to the Azure Dynatrace resource (for example, the owner's email account).
If you don't set any tags, all logs from the monitored resources on your Azure subscription are sent to Dynatrace.
How to create tags after deployment
In the Azure Portal, go to your new Dynatrace resource, and then select Tags. Alternatively, you can select Monitored resources, and then select Edit tags for the desired resources.
Manage monitored resources in Azure Portal
After deploying the Azure Native Dynatrace Service, you can view, manage, and monitor your Azure resources, and you can install OneAgent on your Azure Virtual Machines and Azure App Services.
To view your list of resources, in the Azure Portal, go to your Dynatrace resource and select Monitored resources. You can filter the list of resources displayed by Resource name (Azure resource name), Resource type (Azure resource type), Resource group (resource group name for the Azure resource), Region (location of the Azure resource), and Logs to Dynatrace (whether the resource is sending logs to Dynatrace).
To debug why a resource isn't sending logs, see Troubleshoot.
Deploy OneAgent on Azure Virtual Machines and Azure App Services
- You can deploy OneAgent after the Azure integration deployment.
To monitor your Azure Virtual Machines or Azure App Services, you can install Dynatrace OneAgent on these resources as an extension.
- On the Azure Portal, go to your Dynatrace resource and select Virtual Machines.
- Select a Virtual Machine from the list, on which you want to install the OneAgent extension.
- Select Install extension.
- optional Select whether to enable log analytics.
- optional Provide a host group for OneAgent.
- Select OK to start the installation process.
- When the installation is complete, the OneAgent status for the selected Virtual Machine displays Installed.
- To see details about the installed OneAgent, select your Virtual Machine and go to Extensions.
- To uninstall OneAgent, select your Virtual Machine, and then select Uninstall extension.
- On the Azure Portal, go to your Dynatrace resource and select App Services.
- From the list, select the App Service on which you want to install the OneAgent extension.
- Select Install extension.
- optional Select whether to enable log analytics.
- optional Provide a host group for OneAgent.
- Select OK to start the installation process.
- When the installation is complete, the OneAgent status for the selected Virtual Machine displays Installed.
- To see details about the installed OneAgent, select your App Service and go to Extensions.
- To uninstall OneAgent, select your App Service, and then select Uninstall extension.
Uninstall the Azure Native Dynatrace Service
To uninstall the Azure Native Dynatrace Service, you need to delete the Dynatrace resource. When the Dynatrace resource is deleted from Azure, logs and metrics are no longer sent to Dynatrace and all billing for Dynatrace through Azure Marketplace stops.
To delete the Dynatrace resource
- In the Azure Portal, go to your Dynatrace resource and select Overview.
- Select Delete.
- Enter the name of the application you want to delete, then select Delete.