Dynatrace Log Ingestion Filters: Balancing Coverage and Cost for Low-Traffic Workloads

Feature Overview

Dynatrace allows fine‑grained control of data ingestion through log filters, optional module disabling, and retention policy adjustments. These levers can lower the volume of data sent to the SaaS platform, especially on hosts that experience minimal traffic.

Unresolved Decision

When a production environment is low‑traffic, the question becomes how aggressively to prune ingestion without losing critical visibility. Reducing log levels or disabling features such as OneAgent profiling can cut costs, but they also risk overlooking intermittent performance issues or security events that only surface under rare traffic spikes.

• Which log ingestion filters provide the best cost‑benefit ratio for a given low‑traffic workload?
• How should retention periods be adjusted to keep essential data while minimizing storage costs?
• What host‑group tagging strategy ensures idle or auto‑scaled hosts do not inflate licensing usage?