Skip to content

Troubleshoot the Dynatrace Integration

If collector-side checks are green, focus on Grail storage.

Checks

  1. Confirm ms_teams bucket exists and is active.
  2. Confirm retention settings and write permissions are valid.
  3. Confirm collector export target tenant is correct.
  4. Query recent logs in Grail to verify ingestion timestamps.

401 Unauthorized or 403 Forbidden on export

Section titled “401 Unauthorized or 403 Forbidden on export”

If collector-side checks are green, the Dynatrace token or tenant settings are the likely cause.

Checks

  1. Confirm dynatrace_api_token is valid and not expired.
  2. Confirm the token has logs.ingest scope.
  3. Confirm dynatrace_tenant_id matches the target tenant URL.
  4. Re-test with one collector cycle after token rotation.

Logs arrive but metrics are missing or routed incorrectly

Section titled “Logs arrive but metrics are missing or routed incorrectly”

If collector-side checks are green, the issue is in OpenPipeline processing.

Checks

  1. Confirm the Teams pipeline is active.
  2. Confirm routing pattern matches MSTeams_*.
  3. Confirm storage assignment points to ms_teams.
  4. Check OpenPipeline diagnostics for step-level errors.

If collector-side checks are green, verify app configuration and data visibility.

Checks

  1. Confirm Live mode is enabled in Installation and Configuration.
  2. Confirm Credential Vault reference is valid and accessible to the app.
  3. Confirm recent records exist in the ms_teams bucket.
  4. Wait at least one full collector cycle after any app configuration change.

If collector-side checks are green, check Dynatrace app prerequisites and permissions.

Checks

  1. Confirm app has permission to read the selected credential.
  2. Confirm license is valid and tenant initialization completed.
  3. Confirm outbound host allowlist includes required Microsoft endpoints.
  4. Retry save after correcting access rights.

Dynatrace app cannot reach Microsoft endpoints

Section titled “Dynatrace app cannot reach Microsoft endpoints”

If collector-side checks are green, validate Dynatrace outbound settings.

Checks

  1. In Settings -> Preferences -> Outbound connections, allow:
    • graph.microsoft.com
    • login.microsoftonline.com
  2. Add ip-api.com only when geolocation enrichment is enabled.

If you run multi-output (for example Dynatrace plus Grafana Cloud or Datadog via OTLP), validate each backend independently to isolate platform-specific failures.