March 2023 Summaries

Dynatrace has introduced a new Operating System Services monitoring solution tailored for extensive IT environments, which incorporates an advanced AI-powered alerting system capable of providing last known state information and optional availability metrics. This tool is designed to enhance system efficiency and security while minimizing the resources required for maintenance and monitoring tasks. The capability supports both Windows and Linux hosts and aims to optimize system performance by promptly addressing potential issues. The monitoring system automatically tracks all OS Services and offers flexible alerting options through a comprehensive detection rule engine, enabling administrators to set up custom rules for specific service requirements. The new detection rule builder allows for the creation of powerful alerting rules, adaptable to various scopes from individual hosts to entire environments, ensuring precise and proactive system management.

Dynatrace has announced its achievement of the Google Cloud Ready – AlloyDB designation, which supports extended integration with Google Cloud's AlloyDB for PostgreSQL, a fully managed, PostgreSQL-compatible database service designed for demanding enterprise workloads. This designation highlights Dynatrace's capability to ingest metrics from AlloyDB, providing users with enhanced real-time insights into their Google Cloud infrastructure through AI-powered analytics, thus facilitating automated business and cloud operations decisions. Recognized as part of Google Cloud's technology partner ecosystem, Dynatrace ensures seamless integration with AlloyDB, offering users a comprehensive view of data stored across various platforms. As enterprises increasingly adopt cloud-native services, the superior performance of AlloyDB, which is significantly faster than standard PostgreSQL, becomes crucial. Dynatrace's integration enables organizations to visualize database metrics in real-time, ensuring efficient service performance within cloud-native environments, while also supporting a range of other Google Cloud services to enhance application modernization efforts.

Dynatrace has introduced an automation feature designed to enhance DevSecOps collaboration by associating ownership information with monitored services, thereby reducing mean-time-to-restore (MTTR). This feature addresses challenges in large and complex software environments where identifying responsible teams for specific services can be time-consuming, especially during critical security vulnerabilities. By providing immediate access to ownership details, such as team contacts and responsibilities, Dynatrace facilitates faster incident response, improving transparency and collaboration. The system allows for integration through Configuration as Code, API calls, or the Dynatrace web UI, and supports automated notifications and ITSM ticket creation. This enhancement, available in the latest Dynatrace SaaS and Managed versions, aims to streamline incident management and ensure that the right teams are quickly informed and can act promptly, while also supporting continuous enrichment of contextual information within the software development process.

Application vulnerabilities are a common challenge in modern software development, particularly within complex multicloud environments, but the OWASP Top 10 provides essential guidance for mitigating these security risks. The growing use of agile development, microservices, and serverless computing contributes to the increased potential for security vulnerabilities, with web app attacks being a rapidly expanding threat. DevSecOps automation offers a solution by integrating AIOps, risk prioritization, and runtime context throughout the software development lifecycle. Understanding and prioritizing prevalent vulnerabilities, such as those outlined in the OWASP Top 10, is crucial for effective prevention and mitigation. Additionally, leveraging platforms like Dynatrace Application Security, which uses AI and automation for vulnerability detection and management, helps DevSecOps teams distinguish and prioritize risks accurately. These tools enhance application security and build a robust DevSecOps culture by providing comprehensive coverage across traditional hosts, cloud workloads, and containers.

Dynatrace Managed version 1.262 introduces several changes and enhancements, including a new branding logo for all Managed deployments and an updated version 1.7.0 of the Dynatrace Self-Monitoring extension/dashboard, which addresses an issue with RUM user session tiles. The release also adds support for Oracle Linux versions 8.7, 9.0, 9.1, and Rocky Linux 9.0 while announcing the future discontinuation of support for certain Linux versions, including Red Hat Enterprise Linux 8.8 and 9.2 starting December 2025. The release resolves a range of issues across different components such as Application Security, Autonomous Cloud, Cluster, and Synthetic Monitoring, with improvements like enhanced error handling, log query support, and metric event alerting. Notably, the release includes several cumulative updates addressing vulnerabilities, API configuration issues, and operating system compatibility, ensuring a more stable and secure environment for users.

OneAgent version 1.261 introduces several enhancements, new features, and resolved issues across various modules and platforms, with a rollout starting on March 14, 2023. Key updates include enhanced technology support for Spring Web Services 4 and Java Servlet 5.0, improved SQL statement handling in IBM z/OS, and the detection of Python data source processes. Infrastructure monitoring has been enhanced with host availability state reporting and an upgraded Npcap version, although installation issues persist on older Windows servers. The release also allows simultaneous use of OneAgent and OpenTelemetry exporters for multiple programming languages without interference. Numerous bug fixes address issues in infrastructure monitoring, .NET, Java, and other modules, improving stability and performance, such as timestamp synchronization in the Python SDK and improved handling of HTTP headers in .NET applications. Additionally, the update marks an end to support for Java versions 8, 9, and 10 for Android, requiring a minimum of Java 11.

The Dynatrace SaaS version 1.262 release, rolled out starting March 14, 2023, introduces several new features and enhancements across various domains, including application security, cloud automation, infrastructure monitoring, digital experience, and cross solutions. Key updates include improved management zone filtering for vulnerabilities, allowing service level objectives (SLOs) to be defined before metrics are monitored, and enhanced Kubernetes infrastructure monitoring with multi-filtering capabilities and out-of-the-box alerts for persistent volume claims. The release also includes a new DQL command for joining tables, refined OneAgent update management, and synchronization of credentials with CyberArk Vault. Additionally, synthetic monitoring now supports multiple on-demand executions and script parameter overrides, while resolved issues address cluster performance, application security validation, and autonomous cloud deployment enhancements. This release emphasizes increased flexibility, improved integration, and enhanced monitoring capabilities across cloud environments.

The Log4Shell vulnerability in 2021 exposed significant challenges in zero-day vulnerability management, prompting IT security professionals to rethink their approaches to handling cybersecurity threats. This incident highlighted the limitations of traditional manual methods in quickly addressing vulnerabilities, as evidenced by lengthy response times that risk exploitation. At the Dynatrace Perform 2023 conference, experts Amit Shah and Daniel Kaar emphasized the need for proactive and automated solutions, showcasing how tools like Dynatrace's Application Security can enhance response times and preparedness by using automated scanning and AI-driven threat ranking. These modernized approaches not only improve security posture but also help organizations reduce security debt and enhance visibility into their environments, ensuring more effective detection and mitigation of threats like Log4Shell. The evolution in security practices underscores the importance of embracing automation and AI to navigate the increasingly complex landscape of cyber threats.

Dynatrace has partnered with AWS to support Amazon Linux 2023 (AL2023), a new general-purpose Linux designed for secure and high-performance cloud application environments. The Dynatrace Software Intelligence Platform offers full-stack observability and AI-driven insights to optimize cloud application resilience and achieve service-level objectives with automated intelligence. Available on the AWS Marketplace, Dynatrace provides rapid server metrics monitoring and automatically discovers and visualizes dependencies to enhance user experience by identifying and resolving issues promptly. The platform enables comprehensive end-to-end observability and security management, reducing manual effort and improving operational efficiency with the Davis AI engine, which analyzes vast amounts of data in real time. Additionally, Dynatrace seamlessly integrates with various AWS services, offering intelligent automation and ensuring optimal performance even during peak times.

In the context of digital transformation, answer-driven DevOps automation is becoming increasingly crucial for organizations to manage complex multicloud environments effectively and reduce manual processes. As companies invest heavily in automation, they face challenges in maturity levels and still spend a significant portion of time on manual tasks, despite substantial investments. The session at Perform 2023 highlighted the benefits and challenges of DevOps automation, emphasizing the need for organizations to move from basic automation to more sophisticated, answer-driven models that enhance decision-making. Key strategies include starting simple and scaling, prioritizing automation of critical processes, and implementing frameworks that provide contextual insights. Effective automation can help DevOps teams and site reliability engineers (SREs) improve software delivery speed, reliability, and security while mitigating issues like downtime and manual troubleshooting. The article also discusses specific use cases, such as targeted notifications, closed-loop remediation, and progressive delivery orchestration, which demonstrate how automation can streamline operations and enhance software quality and reliability.

The Log4Shell vulnerability, identified in December 2021, is a critical security flaw in the widely used Apache Log4j 2 Java library, which allows remote attackers to execute arbitrary code on affected systems. This vulnerability, known as CVE-2021-44228, poses a significant threat due to the prevalence of Log4j in various applications and services, including major platforms like AWS and VMware. Despite Apache's efforts to patch the issue with multiple updates, the vulnerability remains a serious concern due to its ease of exploitation and the complexity of patching interdependent systems. Attackers can leverage this flaw to take control of systems, execute ransomware, and access sensitive data, making it imperative for organizations to swiftly apply the latest patches and employ tools like Dynatrace Application Security to monitor and protect vulnerable systems in real-time. Consumers are advised to stay informed about updates from service providers and ensure their devices are secure, while IT security teams must prioritize immediate updates to mitigate this ongoing threat.

At Dynatrace's Perform 2023 conference, Kelsey Hightower and Andreas Grabner discussed the evolving role of AI in cloud environments and its impact on IT culture. Hightower emphasized the importance of focusing on fundamentals to manage the constant influx of new technologies, drawing parallels between modern observability and ancient practices of vigilance. He argued that while technology can aid humans, it cannot replace personal connections and insights. Hightower also highlighted the necessity of establishing beneficial boundaries in tech environments, such as those provided by Kubernetes, to avoid overwhelming developers with limitless options. He suggested that encoding operational best practices into platforms can save future developers from having to relearn expertise. Furthermore, Hightower noted that the convergence of roles like SRE, security, and performance engineering into data science reflects the growing importance of data in modern IT. He concluded by proposing that AI advancements should set new standards for human tasks, allowing people to focus on creativity and relationship-building rather than routine activities like writing business emails.

As organizations increasingly migrate to the cloud, they face new challenges in managing the complexity and scale of hybrid and multicloud architectures, which can introduce security vulnerabilities like the widespread Log4Shell incident in the Apache Log4j 2 library. To address these issues, companies are adopting cloud observability technologies that provide visibility into IT environments, enabling them to identify and resolve application performance and security vulnerabilities more efficiently. The convergence of observability and security data is becoming essential, allowing developers to better navigate security challenges and streamline the development process. Modern observability platforms, such as Dynatrace, utilize automation and AI to unify siloed data and identify root causes of application issues, reducing the need for traditional war-room scenarios and facilitating collaboration among development, operations, and security teams. This approach not only mitigates risks but also creates value by enhancing software reliability and protecting sensitive data, illustrating that risk mitigation can simultaneously drive value creation for organizations.