Troubleshoot the Dynatrace Integration
Grail Bucket Issues
Section titled “Grail Bucket Issues”No data in ms_teams bucket
Section titled “No data in ms_teams bucket”If collector-side checks are green, focus on Grail storage.
Checks
- Confirm
ms_teamsbucket exists and is active. - Confirm retention settings and write permissions are valid.
- Confirm collector export target tenant is correct.
- Query recent logs in Grail to verify ingestion timestamps.
Dynatrace API Authentication
Section titled “Dynatrace API Authentication”401 Unauthorized or 403 Forbidden on export
Section titled “401 Unauthorized or 403 Forbidden on export”If collector-side checks are green, the Dynatrace token or tenant settings are the likely cause.
Checks
- Confirm
dynatrace_api_tokenis valid and not expired. - Confirm the token has
logs.ingestscope. - Confirm
dynatrace_tenant_idmatches the target tenant URL. - Re-test with one collector cycle after token rotation.
OpenPipeline Processing
Section titled “OpenPipeline Processing”Logs arrive but metrics are missing or routed incorrectly
Section titled “Logs arrive but metrics are missing or routed incorrectly”If collector-side checks are green, the issue is in OpenPipeline processing.
Checks
- Confirm the Teams pipeline is active.
- Confirm routing pattern matches
MSTeams_*. - Confirm storage assignment points to
ms_teams. - Check OpenPipeline diagnostics for step-level errors.
Application Live Mode
Section titled “Application Live Mode”App dashboards remain empty
Section titled “App dashboards remain empty”If collector-side checks are green, verify app configuration and data visibility.
Checks
- Confirm Live mode is enabled in Installation and Configuration.
- Confirm Credential Vault reference is valid and accessible to the app.
- Confirm recent records exist in the
ms_teamsbucket. - Wait at least one full collector cycle after any app configuration change.
Credential Vault or Save Errors
Section titled “Credential Vault or Save Errors”Configuration save fails in app UI
Section titled “Configuration save fails in app UI”If collector-side checks are green, check Dynatrace app prerequisites and permissions.
Checks
- Confirm app has permission to read the selected credential.
- Confirm license is valid and tenant initialization completed.
- Confirm outbound host allowlist includes required Microsoft endpoints.
- Retry save after correcting access rights.
Outbound Allowlist
Section titled “Outbound Allowlist”Dynatrace app cannot reach Microsoft endpoints
Section titled “Dynatrace app cannot reach Microsoft endpoints”If collector-side checks are green, validate Dynatrace outbound settings.
Checks
- In Settings -> Preferences -> Outbound connections, allow:
graph.microsoft.comlogin.microsoftonline.com
- Add
ip-api.comonly when geolocation enrichment is enabled.
If you run multi-output (for example Dynatrace plus Grafana Cloud or Datadog via OTLP), validate each backend independently to isolate platform-specific failures.