Export Logs for SIEM Forwarding
A 2-step recipe with Dynatrace. We can help you get access.
Recipe · 2 steps
Export Logs for SIEM Forwarding
with Dynatrace · Observability Management
Size a log export with aggregation, then bulk-export the records.
- Aggregate the matching logs grouped by the supplied fields to estimate the volume that the export will produce.
- Export the first page of matching log records using the slice-based bulk export endpoint, returning the cursor for continued pagination.
What you'll need to have ready
- exportQuery: DQL query selecting the logs to export.
- groupBy: Comma-separated fields to aggregate by when sizing the export.
- from: Start of the queried time range (e.g. now-24h).
- to: End of the queried time range (e.g. now).
For your developer
Arazzo workflow dynatrace:export-logs-for-siem, 2 operations: aggregateLogs → exportLogs. Specs on APIs.io.