Dynatrace Runtime Vulnerabilities V3
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
| Attribute | Value |
|---|---|
| Connector ID | DTRunVulnV3CCPDefinition |
| Publisher | Dynatrace |
| Used in Solutions | Dynatrace |
| Collection Method | CCF |
| Connector Definition Files | Connector_Dynatrace_RuntimeVulnerabilities_Definition.json |
| DCR Definition Files | Connector_Dynatrace_RuntimeVulnerabilities_DCR.json |
This connector uses the Dynatrace DQL Storage Query API to ingest detected runtime vulnerabilities into Microsoft Sentinel Log Analytics.
Tables Ingested
This connector ingests data into the following tables:
| Table | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|
DynatraceSecurityProblemsV3Raw_CL |
? | ✓ | ? |
DynatraceSecurityProblemsV3_CL |
? | ✓ | ? |
💡 Tip: Tables with Ingestion API support allow data ingestion via the Azure Monitor Data Collector API, which also enables custom transformations during ingestion.
Permissions
Resource Provider Permissions:
- Workspace (Workspace): read and write permissions are required.
Custom Permissions:
- Dynatrace SaaS environment (ex. xyz.apps.dynatrace.com): You need a Dynatrace SaaS environment (xxx.apps.dynatrace.com) with Application Security enabled. Classic Dynatrace environments (xxx.live.dynatrace.com) are not supported.
- Dynatrace Platform Token: You need a Dynatrace platform token with the storage:buckets:read and storage:security.events:read scopes. See Dynatrace platform tokens for instructions.
Setup Instructions
⚠️ Note: These instructions were automatically generated from the connector's user interface definition file using AI and may not be fully accurate. Please verify all configuration steps in the Microsoft Sentinel portal.
1. Dynatrace Vulnerabilities Events to Microsoft Sentinel
Configure and Enable Dynatrace Application Security.
- Create a platform token with the storage:buckets:read and storage:security.events:read scopes following these instructions.
- Use your Dynatrace SaaS environment URL in the format xyz.apps.dynatrace.com.
- In Microsoft Sentinel → Content Hub, find the Dynatrace solution and enable the Consolidate Dynatrace Runtime Vulnerabilities summary rule. This is required to consolidate raw vulnerability events into the table used by analytics rules and the parser.
- Dynatrace environment (ex. xyz.apps.dynatrace.com): {{dynatraceEnvironmentUrl}}
- Dynatrace Platform Token: (password field)
- Click 'connect' to establish connection
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊