Event analysis and correlation — Dynatrace Docs

What is the primary engine responsible for event analysis in Dynatrace?

The Davis AI engine.

How does Dynatrace define 'Correlation' in the context of events?

The process of linking multiple event occurrences together to identify a single problem based on timing and topology.

What is the relationship between events and a 'Problem'?

A problem is a set of one or more correlated events that represent an incident affecting services or users.

What tool provided by Dynatrace maps the dependencies used for event correlation?

Smartscape topology.

What is 'Vertical Correlation'?

The analysis of events across different layers of the technology stack within a single entity.

What is 'Horizontal Correlation'?

The analysis of events across different architectural components and services based on their dependencies.

What is the goal of automated 'Root Cause Analysis'?

To identify the specific underlying fault that triggered a series of correlated events.

How does 'OneAgent' contribute to event correlation?

It automatically collects the metric, trace, and entity relationship data required for Davis to correlate events.

How does automated correlation reduce 'Alert Fatigue'?

By merging hundreds of related event notifications into a single, comprehensive problem alert.

What is 'Anomaly Detection' in event analysis?

The automated process of identifying performance deviations that trigger event notifications.

Define 'Baselines' as used in Dynatrace event analysis.

A reference of normal performance levels used to determine if a current metric value should trigger an event.

What is 'Automatic Baselining'?

The AI-driven capability to dynamically adjust alerting thresholds based on learned seasonal performance patterns.

What occurs during a 'Failure Rate' event?

Davis detects that the percentage of failed interactions or errors has significantly exceeded the established baseline.

What characterizes a 'Service Slowdown' event?

An event triggered when the response time of a service increases beyond its normal performance range.

What is 'Impact Analysis' in the Dynatrace event correlation workflow?

The determination of how many users and which business transactions are impacted by a detected problem.

How does the platform handle third-party 'External Events'?

They can be ingested via the API and correlated alongside native Dynatrace events by the Davis engine.

What do 'Management Zones' provide for event analysis?

A way to filter and partition problem and event data based on specific organizational or technical scopes.

What is the purpose of 'Event Severity' levels?

To categorize the urgency of an incident, such as distinguishing between an 'Error' and a 'Warning'.

How are 'Log Events' integrated into correlation?

Textual log signatures are analyzed and linked to performance problems to provide diagnostic evidence.

What is 'Temporal Correlation'?

Grouping events that occur within the same time window across different system components.

Define 'Entity Relationship mapping'.

The logic used to correlate events by understanding how one component depends on or interacts with another.

How is the 'Root Cause' presented in Dynatrace?

As the specific entity and metric identified by Davis as the origin of the correlated problem.

What are 'Metric-based events'?

Events created when a monitored metric satisfies a user-defined or AI-defined mathematical condition.

What is 'Deduplication' in the context of event analysis?

The suppression of redundant, identical event notifications from a single source to maintain data clarity.

What is a 'Problem Notification'?

The final alert sent to integrated communication channels after Davis has analyzed and correlated all relevant events.