Get in touch
← Sentinel Explorer
↳ GitHub sourceConnector

Dynatrace Audit Logs V3

View on GitHub ↗Original file ↗

Description

This connector uses the [Dynatrace DQL Storage Query API](https://docs.dynatrace.com/docs/platform/grail/dynatrace-query-language) to ingest tenant audit log events into Microsoft Sentinel Log Analytics.
Declared status
1
Declared author / publisher
Dynatrace

Declared sources

Metadata from the source file. No dependencies inferred from KQL.

Data types

{{graphQueriesTableName}}

Declared permissions

read and write permissions are required.
Workspace
Workspace
Dynatrace SaaS environment (ex. xyz.apps.dynatrace.com)
You need a Dynatrace SaaS environment (xxx.apps.dynatrace.com). Classic Dynatrace environments (xxx.live.dynatrace.com) are not supported.
Dynatrace Platform Token
You need a Dynatrace platform token with the ***storage:buckets:read*** and ***storage:system:read*** scopes. See [Dynatrace platform tokens](https://docs.dynatrace.com/docs/manage/identity-access-management/access-tokens-and-oauth-clients/platform-tokens) for instructions.

Connector instructions

Content published in the repository. Refer to the original file for all parameters.

Dynatrace Audit Log Events to Microsoft Sentinel
Enable Dynatrace Audit [Logging](https://docs.dynatrace.com/docs/shortlink/audit-logs#enable-audit-logging). 1. Create a platform token with the ***storage:buckets:read*** and ***storage:system:read*** scopes following [these instructions](https://docs.dynatrace.com/docs/manage/identity-access-management/access-tokens-and-oauth-clients/platform-tokens). 2. Use your Dynatrace SaaS environment URL in the format ***xyz.apps.dynatrace.com***. Classic Dynatrace environments (***xxx.live.dynatrace.com***) are not supported.
Dynatrace environment (ex. xyz.apps.dynatrace.com)
Dynatrace Platform Token

Related content

Links established from declared identifiers and solution manifests.

Solutions1

Source provenance

GitHub

Displayed values come from files in Azure/Azure-Sentinel. They describe the published template, not your workspace configuration.

Source identifier
DTAuditLogsV3CCPDefinition
Additional source files 2Solutions/Dynatrace/Data Connectors/DynatraceAuditLogsV3/Connector_Dynatrace_AuditLogs_Definition.jsonsource ↗Solutions/Dynatrace/Data/Solution_Dynatrace.jsonsolution-membership ↗
GSTEP / CATALOG TRACKING

Added to catalog : 16 Sept 2026 · 05:49 UTC
Last change observed : 16 Sept 2026 · 05:49 UTC

GSTEP sync dates, separate from the source content’s publication dates.