multi-step or API ingestion question

[scornell2]

We have the app installed on our environment however looking at the data coming into Splunk from Dynatrace it appears that it is only ingesting single web page interactions and not ingesting data for multi-step or api interactions. Is there a process that needs enabled on Dynatrace or Splunk or is this a feature of the app that is missing?

[jpcdt]

Good day...as a current Dynatracer who spent a long time working in the Splunk world, I would suggest you look to move away from the Splunk App for Dynatrace based on a few factors:

• The App is not available for Splunk 8
• You deal with troubleshooting issues like these where you're asking questions of an app you need to understand but didn't write.

I recommend using the REST API Modular Input to pull data from the Dynatrace API. You can validate your API calls
and results using something like Postman and then move them over the Modular input rather easily. The REST API Modular input is a long-time and well tested app in the Splunk community which is actively maintained. The only caveat is if you use Splunk Cloud, you will need to use the REST API modular input on a Heavy Forwarder to execute the API calls, and then have it send the data to your proper index on Splunk cloud.