August 2022 Summaries

Dynatrace was recognized as the top global observability platform in the 2022 Vendor Selection Matrix by Research in Action (RIA), a German research and consulting firm, based on feedback from over 1,500 IT decision-makers from large revenue-generating companies. This accolade emphasizes the company's leadership in the field, with users highlighting its comprehensive AI-powered platform that integrates all telemetry data for effective observability. The survey by RIA identified three key trends: the necessity of comprehensive access to metrics, traces, and logs for effective observability; the rising adoption of OpenTelemetry as a standard for gathering observability signals, with Dynatrace providing substantial support; and the increasing complexity in modern environments necessitating advanced observability solutions. Dynatrace, noted for its automatic all-in-one approach, excels in managing complex hybrid cloud environments and is lauded for its strategy and execution, making it a recommended choice for managing complex cloud environments with AI and automation.

The Dynatrace Managed release version 1.248 introduces several updates and enhancements, primarily focusing on security and usability improvements. One of the significant changes includes the implementation of a cipher auto-update feature in the installer, which is enabled by default for new clusters to ensure updated cipher suites and protocols following each upgrade. The release also outlines future changes in operating system support, with certain Linux distributions losing support by late 2025 and early 2026. Additionally, the release resolves numerous issues across various components, such as cloud automation, cluster management, and application security, addressing problems like session replay accuracy, service context retention, and metric selector limitations. Cumulative updates within the release further address specific bugs, including those affecting remote environment tracing and alert configurations, enhancing overall system reliability and performance.

Dynatrace's SaaS release version 1.250, published on August 26, 2022, introduces several new features and enhancements aimed at improving automation, security, and user experience. Among the key updates are the automation of quality improvements through SLO violation prediction and problem analysis, the detection of third-party vulnerabilities in Go applications, and a new default host page for AIX hosts. Additional enhancements include improved filtering options for Kubernetes pods, the ability to create private Synthetic locations more flexibly, and enhancements to the Data Explorer layout and workflow. The release also simplifies user authentication by allowing sign-in through corporate Microsoft accounts and resolves various issues across different components such as cluster, application security, and cloud automation.

Vulnerability management is a critical component of securing IT operations, yet it presents challenges due to the vast number of potential vulnerabilities and the rapid pace of modern software delivery. Many organizations struggle to maintain an accurate, real-time inventory of applications and code libraries, with only a quarter of security teams achieving this according to a 2022 research report. Managing vulnerabilities involves identifying and addressing weaknesses in applications and IT infrastructure to prevent unauthorized access and data breaches, a task made more complex by the abundance of known vulnerabilities, as highlighted by the U.S. National Vulnerability Database. Effective vulnerability management should encompass the entire software development lifecycle, incorporating static analysis during development and runtime scans to catch vulnerabilities that appear in production environments. Automation and AI can enhance this process by enabling timely detection and prioritization of vulnerabilities without compromising system performance. Tools like Dynatrace Application Security leverage AI to provide real-time risk assessments and automated scanning, helping organizations manage vulnerabilities efficiently across their tech stacks. The importance of such practices has been underscored by incidents like Log4Shell, which revealed the critical need for comprehensive vulnerability detection and management strategies.

Dynatrace Log Monitoring has been enhanced with advanced processing capabilities, allowing users to unlock actionable insights from log data, thereby completing the observability picture on the Dynatrace platform. This new functionality enables users to extract, transform, and filter log data easily using pattern matching, making it possible to analyze and alert based on extracted attributes without the need for additional preprocessing tools. The system supports various log formats, such as single or multi-line logs, key-value pairs, arrays, nested JSON, and CSVs, ensuring that log data is readily actionable. Built-in processing rules facilitate quick adoption and integration with common technologies like NGINX, HAProxy, Elasticsearch, and Cassandra, without incurring additional costs for Dynatrace SaaS and Managed customers. The platform now allows for the extraction of log-based metrics, filtering to reduce noise, masking for compliance, and conditional transformations, all of which aim to make log data more coherent and useful for analysis. Users are encouraged to leverage these capabilities to enhance their observability efforts and provide feedback through the Dynatrace Community.

Dynatrace has introduced a new brand identity focused on simplifying and enhancing cloud experiences, which they call "Cloud done right," to match their innovative platform designed to manage dynamic multicloud environments. Recognizing the increasing complexity of cloud data, Dynatrace emphasizes the need for precise answers and intelligent automation over mere dashboards, promoting comprehensive observability powered by AI, automation, and application security. Their refreshed brand, featuring new colors and a tagline, aims to embody simplicity, openness, and relentless innovation, advocating for cloud work to be a joyful, insightful, and efficient process, rather than one marked by silos and frustration. This initiative is part of a broader effort to bring clarity and beauty to cloud operations, with promises of further announcements and innovations in the coming months, including engagement opportunities at events like their annual conference, Dynatrace Perform, in Las Vegas.

A new report by Dynatrace reveals significant challenges faced by the retail industry in managing software vulnerabilities amid increasing reliance on dynamic multicloud environments, cloud-native architectures, and open-source code. The 2022 CISO Research Report indicates that while these technological advances enhance digital agility and customer experiences, they also complicate risk management and security. Nearly two-thirds of retail CISOs report difficulty in vulnerability management due to accelerated digital transformation, despite employing multilayered cybersecurity strategies. The reliance on open-source code introduces further risks, as evidenced by the widespread exposure to the Log4Shell vulnerability, which affected 97% of retail organizations. The report highlights the need for a cultural shift towards more agile practices, such as DevSecOps, and emphasizes the importance of integrating observability with security and enhancing strategies with AI and automation to effectively manage threats and protect ecommerce and supply chain operations.

Dynatrace's SaaS release notes for version 1.249, published on August 12, 2022, highlight several breaking changes, new features, enhancements, and resolved issues. A significant update includes improved detection of DynamoDB requests, which are now accurately identified instead of being labeled as opaque web requests. Users can now export data to CSV files from various analysis pages, and heatmaps have gained threshold-setting capabilities. The dashboard subscription workflow has been refined for better security, and a new navigation panel has been implemented for unified analysis pages, enhancing user experience by reorganizing content for easier access and viewing. The release also introduces extended vulnerability tracking for application security and provides on-the-fly validation for service-level objectives. Infrastructure monitoring has been enhanced with a new host page design and updates to the Dynatrace Hub, while several resolved issues address problems with event filters, alert baselining, null pointer exceptions, and more, ensuring improved functionality and user experience.

Dynatrace has expanded its Runtime Vulnerability Analysis to include Go, complementing its existing analysis for Java, .NET, Node.js, and PHP, which helps SecOps, DevOps, and operations teams collaborate more effectively by providing automatic vulnerability detection and AI-powered risk assessment. This enhancement addresses the challenges of modern application stacks, which introduce increased complexity and security risks, by offering full-stack visibility and automatic analysis of vulnerabilities across the entire application stack in cloud-native environments. Dynatrace's approach provides actionable insights that facilitate collaboration among teams to assess risks, prioritize issues, and remediate threats efficiently, leveraging the Dynatrace Davis AI engine to aggregate vulnerability data and recommend security actions based on runtime observability. Additionally, Dynatrace extends its analysis to language runtimes like JVM and .NET CLR and includes automatic vulnerability detection for Kubernetes platforms, further enhancing security across dynamic multicloud environments.

The text discusses the role of Site Reliability Engineers (SREs) in maintaining infrastructure and applications, emphasizing their constant vigilance due to continuous alerts about potential issues. To facilitate this, the Dynatrace mobile app version 3.0, available on Android and iOS, offers real-time notifications and AIOps capabilities through its Davis AI engine, enabling SREs to manage incidents on the go, thereby reducing incident response times. The app provides a comprehensive overview of system notifications, critical outages, and incident impact, allowing for efficient problem triage and resolution without needing to be at a desktop. It supports multiple monitoring environments, reducing alert fatigue by filtering irrelevant notifications, and aims to enhance user experience with upcoming features like personalized push notifications and security risk visibility. The text also notes the transition strategy from the old to the new app version and encourages user feedback for ongoing improvements.

As organizations increasingly adopt multicloud environments, they face heightened complexity and security risks that traditional security approaches struggle to manage, leading to a shift towards DevSecOps automation. DevSecOps integrates security into every phase of the software development lifecycle, promoting collaboration among development, security, and operations teams to enhance application security and align with the rapid pace of software delivery. This methodology addresses the challenges of operational complexities, third-party code vulnerabilities, and zero-day threats by encouraging proactive security practices and automation. However, adopting DevSecOps can be challenging due to the limitations of traditional security tools, siloed team structures, and compliance constraints. AI-driven platforms like Dynatrace help overcome these hurdles by automating vulnerability analysis and enhancing observability, allowing teams to act swiftly and efficiently on security concerns. DevSecOps thus transforms the software release process into a more secure, efficient, and collaborative endeavor.

In a rapidly evolving digital landscape, zero-day vulnerabilities pose a significant threat to organizations as they exploit unknown flaws in software, leaving minimal time for mitigation. These vulnerabilities can become endemic, persisting as chronic issues over time. Traditional detection methods, such as behavior-based and statistics-based monitoring, often fall short in identifying new threats, which can lead to false positives or negatives. High-profile incidents like Log4Shell and Spring4Shell highlight the critical impact of zero-day vulnerabilities, as seen in the widespread exploitation attempts following their discovery. While conventional tools like web application firewalls and runtime application security protection have limitations, solutions like Dynatrace Application Security offer real-time protection by detecting and blocking attacks with code-level insights and transaction analysis. This approach ensures high accuracy and minimal false positives, providing a robust defense against these elusive threats.

Dynatrace SaaS release version 1.247 introduces several new features and enhancements, including the integration of attack notifications for improved application security and the addition of a Process group overview card for third-party vulnerabilities, which shows remediation progress. The release supports installing Synthetic-enabled ActiveGate on Ubuntu 22.04 and adds a new public synthetic monitoring location in Madrid on Google Cloud. The update also includes numerous resolved issues across various components such as Cluster, ActiveGate, Cloud Automation, and Log Monitoring, addressing problems like permission restrictions, notification order preservation, and memory leaks. Additionally, there are enhancements to the Dynatrace API, including increased character limits for metric selectors and improved sorting in SLO evaluations.

Zero-day attacks, where vulnerabilities are exploited before developers are aware of them, pose significant challenges to organizations' IT security, as evidenced by a surge in such exploits, accounting for 40% of attacks in the past decade as of 2021. Highlighted at the Black Hat 2022 conference, these attacks underscore the need for improved strategies to both prevent and respond to breaches in live applications, exemplified by the Log4Shell vulnerability. As software development accelerates, integrating security into DevOps through DevSecOps is becoming essential to address vulnerabilities more efficiently and early in the development lifecycle. This integration, alongside advanced observability tools, is crucial in identifying and mitigating zero-day vulnerabilities, especially in complex cloud-native and multicloud environments where traditional security measures fall short. The convergence of observability and runtime application security is vital for protecting sensitive data and software supply chains, as organizations face increased risks from cyberattacks in an increasingly digital world.

Kubernetes, originally designed for stateless workloads, is increasingly used for stateful applications like databases and data caches, which require persistent storage. A scenario illustrating the challenges of managing persistent volume claims (PVCs) in Kubernetes highlights the importance of monitoring and alerting to avoid outages and optimize storage utilization. Dynatrace offers a solution with its PVC extension, providing insights into storage utilization, growth rates, and proactive alerts to prevent overprovisioning and unexpected storage shortages. By integrating with Prometheus metrics, Dynatrace enhances analysis through its AI capabilities, ensuring efficient resource use and system reliability. Additionally, Dynatrace plans to simplify the configuration of Kubernetes alerts, making it easier for organizations to manage their clusters. The company's 2023 Kubernetes survey provides insights into how businesses are utilizing Kubernetes in production, emphasizing the importance of maintaining secure and high-performing clusters.