Dynatrace

Dynatrace is a software intelligence platform providing application performance management and cloud infrastructure monitoring.

Use Cases the Adapter Solves

• Maintain Cloud Infrastructure Inventory: Track all Dynatrace-monitored entities — including hosts, containers, databases, and load balancers — in Axonius to maintain a complete and current inventory of your cloud and on-premises assets.
• Identify and Prioritize Security Vulnerabilities: Leverage Dynatrace security problem data enriched with CVE details, Davis risk scores, and exposure information to prioritize remediation across your monitored infrastructure.

Asset Types Fetched

• Devices, Aggregated Security Findings, Users, SaaS Applications, Compute Services, Load Balancers, Databases, Containers, Object Storage

Data Retrieved through the Adapter

Devices - Fields such as Hostname, IP Addresses, OS Type, OS Version,

Users - Fields such as User ID, Email, First Name, Last Name, Country

Containers - Fields such as Name, Cloud Provider, PaaS Vendor Type,

Compute Services - Fields such as Name, Detected Name, IP Addresses

Databases - Fields such as Name, Detected Name, Region

Load Balancers - Fields such as Name, Detected Name, Region, Last Seen

Object Storage - Fields such as Name, Detected Name, Region, Last Seen, First Seen

Aggregated Security Findings - Fields such as CVE IDs, Security Problem ID, Davis Risk Score

Before You Begin

Required Ports

• TCP port 80/443

Authentication Methods

• API Key

APIs

Axonius uses the Dynatrace API. The following endpoints are called:

API v1 (default):

• GET /api/v1/entity/infrastructure/hosts — Retrieves the host entity list
• GET /api/v1/userSessionQueryLanguage/table — Retrieves user session data (requires the Fetch users advanced setting)

API v2:

• GET /api/v2/entities — Retrieves entities of the selected types (hosts, containers, databases, load balancers, object storage)
• GET /api/v2/entities/{entityId} — Retrieves individual entity details for process group instances
• GET /api/v2/securityProblems — Retrieves security vulnerability data (requires the Fetch vulnerabilities advanced setting)
• GET /api/v2/securityProblems/{securityProblemId} — Retrieves detailed security problem information (requires the Fetch 'Security problems' extra info advanced setting)

Users with Account UUID:

• GET https://api.dynatrace.com/iam/v1/accounts/{account_uuid}/users — Retrieves users with extended data and group membership (requires the Account UUID connection parameter)

Required Permissions

• To execute user requests, the User sessions (DTAQLAccess) permission must be assigned to an API token.

• To execute entity requests, the Read entities (entities.read) permission must be assigned to an API token.

In addition
(DataExport), which is "Access problems and event feed, metrics and topology" permissions are required.

To learn how to obtain tokens and use them, see Dynatrace API - Tokens and Authentication.

Connecting the Adapter in Axonius

To connect the adapter in Axonius, provide the following parameters:

Required Parameters

1. Dynatrace Domain (for On-Premise) (required for on-prem or FedRAMP environments) - If you are operating your own Dynatrace Managed installation or Dynatrace for Government (FedRAMP), you must specify your Dynatrace domain. This is optional if you are using the commercial SaaS instance of Dynatrace.
2. Environment ID - Specify the desired environment ID. Each environment that you monitor with Dynatrace is identified with a unique character string (Environment ID).

   • Within Dynatrace SaaS, your Dynatrace environment ID (otherwise known as a tenant ID), is included at the beginning of your Dynatrace environment´s URL:

     

   • If you are operating your own Dynatrace Managed installation, you can find your environment ID within your custom domain path after the /e/ subpath (see highlight in image below).

     

   • You can also find your environment ID listed on your Dynatrace account page along with your licensing details. To find this page, click the User button in the upper-right corner of the menu bar and select Account settings.

3. API Key - Specify the API token that you have created. For more details, see Dynatrace API - Authentication.
4. API Version (default: v1) - Select whether to use API v1 or v2.

Optional Parameters

1. Account UUID - Enter an account UUID in order to fetch the users from a different API endpoint that includes more data and user groups. Find the account UUID on the Account > Account management API page, during creation of an OAuth client.
2. Verify SSL - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.
3. HTTPS Proxy (optional) - Connect the adapter to a proxy instead of directly connecting it to the domain.

To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.

Advanced Settings

1. Fetch users - Select this option to fetch users.

2. Fetch vulnerabilities - Toggle on this option to fetch vulnerabilities.
3. Fetch 'Security problems' extra info - Select this option to fetch additional information about Dynatrace 'Security problems', including exposure, data assets, Davis risk score, Davis risk level, vulnerable components, and vulnerable functions. This option is only available if you toggle on Fetch vulnerabilities.
4. Fetch process group instances - Select this option to fetch Process Group instances.
5. Categorize devices as compute services assets - Select this option to categorize devices under different asset types.
6. Recategorize PaaS HOST entities as Container assets (default: Disabled) - Select this option to recategorize Dynatrace HOST entities that are PaaS platforms (Kubernetes, OpenShift, AWS ECS Fargate) as Container assets instead of Devices or Compute Services. This provides more accurate asset categorization for containerized infrastructure managed by Dynatrace. This setting takes precedence over Categorize devices as compute services assets for matching entities.
7. List of types to fetch - From the dropdown select one or more entity types to fetch.

Related Enforcement Actions

• Dynatrace - Add Custom Tag