Dynatrace - ResolveAI

This guide explains how to connect ResolveAI with Dynatrace. Resolve uses this connection to ingest metrics, logs, dashboards, and problems for incident investigations.

1. Create Tokens

Dynatrace exposes two API surfaces — the classic Environment API and the newer Platform (Grail) API. Resolve needs a token for each.

Access Token (classic Environment API)

In Dynatrace, open Apps → Access Tokens
Click Generate new token
Name it resolve-access-token
Select the following scopes:
- metrics.read
- entities.read
- problems.read
- events.read
- settings.read
Click Generate token and copy the value

Platform Token (Grail / Documents API)

In Dynatrace, open Account Management → Identity & access management → Platform tokens
Click Generate new token
Name it resolve-platform-token
Select the following scopes:
- storage:buckets:read
- storage:bucket-definitions:read
- storage:logs:read
- storage:metrics:read
- storage:spans:read
- storage:events:read
- storage:entities:read
- storage:smartscape:read
- storage:system:read
- document:documents:read
Click Generate token and copy the value

Security Best Practice: Never store credentials in plaintext in configuration files or source control. Treat both tokens as secrets and rotate them on a regular cadence.

2. Find Your Environment URLs

Resolve needs the base URL for each Dynatrace API surface. Both can be found in your Dynatrace tenant URL:

Classic API URL (apiUrl): https://<tenant-id>.live.dynatrace.com
Platform API URL (appUrl): https://<tenant-id>.apps.dynatrace.com

Where <tenant-id> is the alphanumeric identifier for your environment (e.g. abc12345).

3. Connect Dynatrace

Set up the integration either in the Resolve UI or in the Satellite configuration.

Resolve UI
Satellite

Connect Via Resolve UI

Open Dynatrace Integration in Resolve
Click Add Connection
Enter a name (ex. Dynatrace-Main)
Set the Environment that matches the data this connection will ingest (ex. production)
Paste the Access token from Step 1 (Access Token)
Paste the Platform token from Step 1 (Platform Token)
Enter your API URL (ex. https://abc12345.live.dynatrace.com)
Enter your App URL (ex. https://abc12345.apps.dynatrace.com)
(Optional) Enable Sensitive Data Redaction
Click Save

Connect Via Satellite

Save the Dynatrace Access token and Platform token in a Kubernetes secret, then update the Resolve Satellite to use this secret.

1. Create Kubernetes Secret

Create a Kubernetes secret using this structure.

secret creation

apiVersion: v1
kind: Secret
type: Opaque
metadata:
  name: dynatrace-resolve-token
stringData:
  apiToken: "<your access token>"
  appToken: "<your platform token>"

Security Best Practice: Never store credentials in plaintext in configuration files or source control. Always use Kubernetes secrets and encrypt etcd or use enterprise secret management systems. See Secret Management for detailed guidance.

Apply the secret.

apply secret

kubectl apply -f dynatrace-resolve-token.yml

2. Update Values File

Add the Dynatrace integration to resolve-values.yaml.

resolve-values.yaml

integrations:
  dynatrace:
    type: "dynatrace"
    create: true
    secretName: "dynatrace-resolve-token"
    connection:
      apiUrl: https://abc12345.live.dynatrace.com
      appUrl: https://abc12345.apps.dynatrace.com

(Optional) Add sensitive data redaction with redactionConfig.

resolve-values.yaml

integrations:
  dynatrace:
    type: "dynatrace"
    create: true
    secretName: "dynatrace-resolve-token"
    connection:
      apiUrl: https://abc12345.live.dynatrace.com
      appUrl: https://abc12345.apps.dynatrace.com
      redactionConfig:
        enabled: true

3. Apply Changes

Update the satellite with the new resolve-values.yaml file.

helm upgrade --install resolve-satellite \
  oci://registry-1.docker.io/resolveaihq/satellite-chart \
  --values resolve-values.yaml

4. Verify Integration

Open Dynatrace Integration and check the connection.

What Resolve Ingests

Once connected, Resolve continuously ingests the following from Dynatrace:

Infrastructure entities — hosts, services, processes, and Smartscape topology used to build the service map
Alert rules — Dynatrace metric events and problem patterns
Problems — open and historical Dynatrace problems, used as alerts during investigations
Logs — queried on demand via Grail using the Dynatrace Query Language (DQL)
Metrics — queried on demand using the Dynatrace Metric Selector language
Dashboards — Platform dashboards (Documents API) are loaded for chart-level context during investigations

​1. Create Tokens

​2. Find Your Environment URLs

​3. Connect Dynatrace

​Connect Via Resolve UI

​Connect Via Satellite

​1. Create Kubernetes Secret

​2. Update Values File

​3. Apply Changes

​4. Verify Integration

​What Resolve Ingests

1. Create Tokens

2. Find Your Environment URLs

3. Connect Dynatrace

Connect Via Resolve UI

Connect Via Satellite

1. Create Kubernetes Secret

2. Update Values File

3. Apply Changes

4. Verify Integration

What Resolve Ingests