June 2022 Summaries

Site reliability engineering (SRE) has become crucial as companies increasingly rely on cloud automation and digital transformation to enhance business operations, necessitating a team effort to effectively implement service-level objectives (SLOs). SLOs enable site reliability engineers to set goals aligned with business priorities, yet categorizing service levels and consolidating monitoring data pose significant challenges due to siloed data and tool overload. A single observability platform can provide consistent visibility, but it must include native SLO capabilities and agreed-upon tools before deployment. Additionally, correlating performance metrics with user experience is vital to understanding user interactions and identifying potential issues, while a data-driven approach helps set realistic SLO targets. The ownership of SLOs varies by context, often involving development teams for non-production applications and SRE teams for broader environments, with the ultimate aim of enhancing customer experience and aligning IT efforts with business objectives.

Hybrid cloud architecture, utilized by over 90% of enterprises, combines public and private cloud resources to provide flexible and innovative digital services. This architecture facilitates seamless integration and orchestration of data and applications between public cloud services, which are shared by multiple organizations, and private clouds, dedicated to a single organization. The hybrid model offers enhanced storage, analysis capabilities, and security by keeping sensitive data in-house while leveraging the scalability of public clouds for less critical resources. Key benefits include improved redundancy, resilience, and performance optimization, while challenges involve managing security, migration, and integration complexities. To address these challenges, full-stack observability, as exemplified by Dynatrace, offers real-time insights into application and infrastructure performance, enabling precise root-cause analysis and proactive problem resolution.

The OneAgent release notes for version 1.243, published on June 29, 2022, detail various enhancements, new features, and resolved issues across different platforms and technologies. Key updates include added support for several Java, Node.js, and serverless technologies, alongside improved tracing for Azure Functions and z/OS systems. The release also introduces enhanced log monitoring on Windows and marks end-of-support notices for certain Android, Linux, and Windows operating systems by 2026. Several cumulative updates address issues related to the AI causation engine, .NET, Go, and other modules, resolving vulnerabilities and stability concerns. Additionally, the release includes improved CPU calculation precision for z/OS and updates to OneAgent's mobile and JavaScript functionalities, enhancing user experience and system reliability.

A Dynatrace customer successfully enhanced their mobile application's performance by leveraging mobile analytics, ensuring a crash-free, five-star user experience. As mobile apps become crucial for businesses to maintain direct customer engagement and drive revenue, organizations must prioritize user experience to prevent negative reviews and diminished trust. The customer addressed app crashes, identified as the main cause of negative reviews, by assembling a dedicated team to analyze data, validate mobile analytics, and set performance targets. They implemented steps such as defining KPIs for crash-affected users and developing an action plan, resulting in a 50% reduction in crash-affected users and a 30% drop in negative reviews within a year. By continuously monitoring and responding to KPI trends through dashboards and alerts, they maintained improved app performance and reduced issue cycle times. This approach underscores the importance of connecting business outcomes with IT metrics, utilizing advanced tools like Dynatrace for proactive performance optimization and customer satisfaction.

Dynatrace's integration of synthetic monitoring with automatic release validation offers a comprehensive approach to enhancing software development lifecycle (SDLC) processes by providing continuous quality assurance across environments. Utilizing Davis ® AI, Dynatrace identifies root causes of issues early in the development cycle, thereby accelerating release cycles, reducing costs, and minimizing disruptions. This method enables DevOps and SRE teams to incorporate on-demand synthetic monitoring as a metrics provider, enhancing the efficiency of continuous integration and continuous delivery (CI/CD) pipelines without requiring additional external tools. By simulating user journeys and API requests, Dynatrace offers a 360-degree view into application performance, ensuring adherence to service-level objectives (SLOs) and enabling seamless navigation between synthetic and real-user journeys. The platform facilitates monitoring configuration as code, allowing for better management alongside application source code, and offers powerful dashboards for system visualization. With capabilities like cloud automation, session replay, and integration with Real User Monitoring for various deployment strategies, Dynatrace enhances the speed and quality of software delivery while maintaining rigorous validation standards.

In the competitive business environment, understanding how users interact with applications is crucial for delivering seamless user experiences that foster customer loyalty. Synthetic monitoring and real user monitoring (RUM) are two essential tools that, while different, serve complementary purposes in achieving this goal. RUM focuses on collecting real-time data on actual user interactions, providing insights into user behaviors and performance metrics like page load times, but requires real user traffic to be effective and can produce overwhelming amounts of data. Synthetic monitoring, on the other hand, uses scripts to simulate user interactions in a controlled environment, allowing for consistent testing of specific scenarios and geographic performance without relying on real users. While synthetic monitoring can miss real-world unpredictability, together with RUM, it provides a comprehensive approach to identifying, troubleshooting, and resolving performance issues. By integrating the strengths of both tools, organizations can ensure optimal application performance and user satisfaction, as each method informs and enhances the other, creating a robust monitoring strategy.

Dynatrace's SaaS release version 1.245 introduces significant updates, including the deprecation of the classic User sessions page in favor of a more advanced session segmentation tool, alongside enhancements in mobile app monitoring and log processing. The update allows a movie-like replay of Android app crashes for frontend developers and extends the capabilities of Dynatrace Log Monitoring with new pattern matching and log transformation features. Additionally, it provides options to disable Service insights at a host level and supports Prometheus Summary metric type, while expanding the maximum payload size for log ingest API to 5 MB. Memory profiling now defaults to a flame graph visualization, and access to the credential vault is streamlined. A series of resolved issues improve memory performance, synchronization in log viewers, and user interface behavior, with cumulative updates addressing various functional fixes across cluster management, cloud automation, and application security components.

In 2021, Juneteenth, commemorating the day in 1865 when enslaved people in Galveston, Texas, learned of their freedom, was recognized as a federal holiday in the United States. The day holds deep significance for African Americans, marking a moment of reflection and celebration of freedom, while acknowledging the ongoing struggles against systemic inequalities rooted in history. Although the Emancipation Proclamation was signed in 1863, it took more than two years for its message to reach all enslaved people, highlighting the slow dissemination of freedom. The personal narrative shared in the text emphasizes Juneteenth as both a day of celebration and a reminder of the long history of racial oppression that persists in various forms today, including economic inequality and underrepresentation in industries. It serves as an opportunity for collective reflection and a call to action for all individuals to address and rectify these enduring injustices, underscoring the importance of education and awareness in striving for a more equitable society.

In 2022, Dynatrace was identified as a Leader in Gartner's Magic Quadrant for Application Performance Monitoring (APM) and Observability, particularly noted for its Completeness of Vision, as well as securing the highest scores in four out of six use cases in the associated Critical Capabilities report. This recognition marks the first year Gartner included observability in the Magic Quadrant, reflecting the evolving importance of cloud observability. Dynatrace's platform is praised for its ability to deliver precise answers and intelligent automation, helping users manage the increasing complexity of modern hybrid and multicloud environments. Customers have also recognized Dynatrace as a Customer's Choice in the Gartner Peer Insights Voice of the Customer report, highlighting its role in simplifying cloud complexity, enhancing digital transformation, and supporting high-quality innovation and speed in software development. Complimentary copies of the reports are available on Dynatrace's website, and Gartner clarifies that its endorsements and research publications are based on user opinions and should not be seen as definitive fact or an endorsement of any vendor.

As organizations transition to cloud environments and adopt DevSecOps practices, they achieve increased speed and flexibility in software development but also face new challenges such as application security vulnerabilities and digital experience issues. Open-source software, while enhancing feature richness and scalability, introduces complexities and potential threat vectors exemplified by vulnerabilities like Log4Shell, which exposed many applications to exploitation. To address these challenges, a culture of security by design is essential, requiring collaboration between developers, security teams, and IT operations to enhance business resilience. This approach involves identifying vulnerabilities early in development and monitoring them in production, emphasizing the importance of both "shifting left" and "shifting right" strategies. The use of software intelligence and automation tools, like Dynatrace, aids in managing vulnerabilities by providing real-time visibility and prioritizing remediation efforts based on business impact. As security teams navigate this complex landscape, they are critical to maintaining organizational resilience against the backdrop of increasing cyberattacks and IT complexity.

Infrastructure as code (IAC) is an automation practice that streamlines the provisioning and management of IT infrastructure by converting it into software code, thereby enhancing deployment speed, consistency, and cross-team collaboration while reducing manual processes and complexity. This approach is crucial for handling complex environments in large organizations, as it allows developers to define infrastructure requirements in code, leading to improved efficiency and reduced human error. IAC can be implemented using two main approaches—imperative, which specifies step-by-step commands, and declarative, which defines the desired end state—each utilizing different programming languages. Best practices for IAC include regular testing, maintaining a single source of truth, deploying version management, and ensuring robust monitoring to maintain visibility and control. Various tools, such as Chef, Ansible, Terraform, and Puppet, are available to facilitate IAC deployment, with their suitability depending on organizational needs and goals. Dynatrace enhances IAC effectiveness by integrating intelligent observability and monitoring-as-code solutions, enabling proactive issue identification and remediation to optimize IT environments and support DevOps initiatives.

Microsoft Azure is utilized by over 95% of Fortune 500 companies and provides a wide array of cloud services, but the complexity of managing and monitoring these services in hybrid and multicloud environments highlights the importance of Azure observability. Observability refers to the ability to understand a system's operations through metrics, logs, and traces, and it is crucial for effective monitoring and troubleshooting of cloud-native applications. Microsoft's Cloud Adoption Framework emphasizes observability as a key strategy, enabling companies to develop alerts, dashboards, and evaluate AIOps solutions to ensure optimal performance and meet business expectations. Dynatrace, a Microsoft gold partner, offers a platform that enhances Azure observability by unifying application and infrastructure monitoring, automating operations, and supporting end-to-end tracing, thereby reducing mean time to resolution and fostering innovation. By integrating with Azure services, Dynatrace provides a comprehensive view of the IT stack, which helps organizations optimize continuous integration and delivery pipelines and improve digital experiences.

The OneAgent release notes for version 1.241, published on June 8, 2022, detail a variety of updates and enhancements across different platforms and technologies. Key updates include new support for Java environments like Apache HttpClient 5.0 and various Java Virtual Machines, as well as PHP serverless environments and Azure, AWS, and GCP functions. The release also introduces enhancements for z/OS, including automatic tracing support for JMS messaging and deeper insights into IBM DB2 database calls. In terms of operating systems, support has been added for Rocky Linux 8, while future support for several Linux and Windows versions will be phased out starting in 2025. Additionally, the release includes multiple resolved issues, addressing vulnerabilities and improving the stability and functionality of components like OpenTracing Java, Apache, NGINX, and infrastructure monitoring, among others.

Modern observability platforms play a crucial role in addressing IT complexities and security vulnerabilities that arise from digital transformation, particularly in cloud-native environments. These platforms facilitate "shifting left" by enabling developers to detect code issues early in the development process and "shifting right" by identifying and prioritizing vulnerabilities in live applications. The Log4Shell vulnerability exemplifies the need for improved security measures, highlighting gaps in current practices. Daniel Kaar from Dynatrace explains that integrating observability with AIOps allows for precise analysis of security threats, helping DevSecOps teams efficiently manage and remediate issues. This comprehensive approach to observability not only improves security posture but also enhances operational efficiency by saving time and reducing manual effort.

Service level objectives (SLOs) are crucial tools in setting and maintaining service levels in cloud environments, serving as guidance for site reliability engineers (SREs) and DevOps teams to enhance both CI/CD and production processes. Despite their importance, creating effective SLOs poses challenges, as highlighted by the 2022 State of SRE Report, which noted that 99% of SREs face difficulties in this area. A structured approach is recommended for implementing SLOs, beginning with understanding service level agreements (SLAs) and aligning them with business goals and stakeholder needs. Prioritizing critical services, identifying internal stakeholders, and determining key metrics are essential steps before defining SLOs with realistic thresholds. Establishing error budgets and ensuring proactive monitoring and alerting further support the effectiveness of SLOs. Dynatrace, with its AI-powered observability, offers native SLO monitoring that allows organizations to gain insightful views into their services' performance, helping teams visualize SLIs and automate monitoring processes.

Dynatrace Managed release 1.244, published on June 3, 2022, introduces specific changes and enhancements to the platform, including updates to operating system support, improved notifications, and the adoption of JRE 8u332 for certain cluster components. Notably, support will be phased out for several Linux versions, with the last compatible update being version 1.244, and future changes will affect Red Hat Enterprise Linux and Amazon Linux 2. The release also resolves numerous issues across various components, including Application Security, Cluster Management Console, and Infrastructure Monitoring, addressing vulnerabilities, UI errors, and configuration problems. Key fixes improve email notifications, web UI content, and the functioning of application security overview metrics, while operational enhancements include updating commons-configuration for security improvements and resolving service detection and log upload issues.

Dynatrace's SaaS release version 1.244 introduces several updates and enhancements across different functionalities. The classic User sessions page is being replaced with a more advanced session segmentation page. A new feature, Attack Protection, is added to Application Security, allowing real-time detection and blocking of attacks through code-level insights and transaction analysis. The release also includes enhancements in Synthetic Monitoring, such as on-demand execution of browser and HTTP monitors for CI/CD integration, and improved vault integration for token credentials. The Data Explorer now supports CSV exports and unit visualization settings, while the new Service-level objectives (SLO) indicator aids in assessing service performance. Web UI requirements have been updated, discontinuing support for older browser versions, and span attributes can now be masked to protect sensitive data. Improved problem analysis is available on unified analysis pages with visual highlights of problem events. The release resolves 26 issues, including those related to AWS monitoring, queue analysis, and custom event page crashes, enhancing overall platform stability and user experience.

Monitoring as Code is a concept that involves defining relevant metrics for applications and infrastructure, and its implementation, known as "Performance Signature," was developed by Thomas Steinmaurer, Matthias Fichtner, and Raphael Pionke. The Performance Signature, stored in a JSON or YAML file, acts as an automated quality gate during the Continuous Delivery Pipeline, ensuring validation at various stages and production deployments. Matthias and Raphael have released a Jenkins Plugin for integrating Performance Signature with Dynatrace, which allows developers to validate metrics like response time and throughput across different stages of the pipeline. This integration provides benefits such as decoupling data capturing from analysis, versioning of performance signatures, and real-time feedback on production environments. The approach has been adopted by organizations moving towards cloud-native delivery pipelines. The implementation guide for the Jenkins plugin details steps like installing Dynatrace OneAgents, configuring the Jenkins Plugin, and wrapping deployment and testing processes to automatically capture and evaluate performance data. The setup allows for monitoring feedback as a service and facilitates root cause analysis by comparing builds, thus enhancing the reliability and performance of applications.

Site reliability engineering (SRE) is gaining traction as organizations adopt hybrid cloud strategies and scale IT automation, applying software engineering principles to operations and infrastructure to streamline processes. The Dynatrace State of SRE Report: 2022 Edition reveals that 88% of surveyed SREs believe their role is more strategically recognized now than three years ago, highlighting the discipline's growing importance in DevOps and agile practices. However, challenges persist, such as the need for more efficient automation approaches and the integration of SRE-driven engineering, which focuses on reliability, resiliency, and security. Security is increasingly central to SRE roles, especially with the rise of third-party code libraries, while the freedom to experiment and prioritize strategic work remains crucial for delivering business value. Organizations are beginning to recognize and reward SRE teams through initiatives like hackathons, fostering a culture of experimentation and innovation. These trends underscore the necessity for SREs to collaborate with DevOps teams and architects to ensure software is resilient and automatable, ultimately enhancing strategic business outcomes.

Organizations are accelerating code releases to remain competitive, but these rapid cycles exacerbate runtime vulnerability management challenges, especially within cloud-native environments. The complexity of multicloud architectures, which include containers and microservices, makes it difficult for cybersecurity tools to effectively monitor vulnerabilities, as highlighted by the Dynatrace 2022 CISO Report, where 69% of surveyed CISOs noted increased difficulty in vulnerability management. The Log4Shell vulnerability underscored these risks, with many CISOs acknowledging a lack of real-time visibility and confidence in resolving such issues. Automation and artificial intelligence are seen as essential to improving vulnerability management, with 79% of CISOs advocating for continuous runtime vulnerability management. Despite a move towards DevSecOps practices, only a small percentage of organizations have fully integrated security across their software development lifecycle, although DevSecOps adoption is reportedly increasing. These practices promise to enhance both the speed and reliability of code deployment, as organizations strive to fill existing security gaps and manage vulnerabilities more effectively.