Network Devices Skill

Analyze SNMP-monitored network infrastructure in Dynatrace — switches, routers, firewalls, load balancers, access points, and any other device polled by a network device extension (the SNMP-generic and vendor SNMP extensions). This skill covers the device and interface data model and routes each question to the right reference file. All DQL lives in the reference files and was validated against a live tenant with dtctl query.

What Network Device Monitoring Tells You

SNMP extensions poll network hardware and expose it in Dynatrace as three layers:

• Topology — an inventory of devices and their interfaces as Smartscape nodes (EXT_NETWORK_DEVICE, EXT_NETWORK_INTERFACE), with attributes (vendor, model, OS/firmware, location, contact, IPs, MACs, link speed) and relationships (which interface belongs to which device; which devices are neighbors via LLDP/CDP).
• Metrics — time series for device health (CPU, memory, uptime) and per-interface health (operational/admin status, in/out throughput, errors, discards, packet mix), under the com.dynatrace.extension.network_device.* namespace.
• Logs — event-driven records: SNMP traps (link-up/down, hardware faults), syslog messages (config changes, authentication, interface events), and auto-discovery activity (devices and neighbors found per poll cycle).

This answers questions such as: Which interfaces are down? Which links are saturated? Is this router's CPU pegged? Which devices rebooted? What is connected to this switch? What traps has this device sent? What syslog errors are recurring?

The Three Layers (and how they join)