July 2023 Summaries

Dynatrace has announced its intention to acquire Rookout, a company specializing in debugging actively running code in cloud-native applications hosted on Kubernetes, with the aim of enhancing developer productivity and innovation. The acquisition will integrate Rookout's capabilities into the Dynatrace platform, allowing developers to gain increased code-level observability in production environments, thus minimizing the disruption typically associated with traditional debugging methods. This integration is expected to facilitate better collaboration among development, IT, and security teams, while also supporting the shift-left and shift-right approaches that demand enhanced observability and security capabilities throughout the software lifecycle. The transaction, expected to close by September 30, 2023, aims to leverage Dynatrace's artificial intelligence and automation features to streamline debugging processes, ultimately allowing developers to focus more on delivering business value rather than on maintenance activities. The acquisition is not anticipated to materially affect Dynatrace's fiscal year 2024 financials and will be funded from existing cash reserves.

DevOps monitoring tools play a crucial role in automating the collection and analysis of data to support agile software development, driven by the increasing demand for rapid innovation in digital services. These tools provide real-time insights into applications, services, and infrastructure, helping teams detect and respond to issues before they impact users. The use of continuous monitoring across application performance, infrastructure, network, and user experience ensures that development and operations teams can maintain system performance, meet service-level agreements, and improve site reliability. Despite challenges such as data silos and varied toolsets, effective DevOps monitoring fosters collaboration, enhances software quality, and supports security through a unified view of operations, which is critical for organizations aiming to keep pace with the accelerating digital transformation. Advanced observability platforms like Dynatrace leverage AI and intelligent automation to integrate toolchains, enabling proactive issue identification and improving delivery speed, code quality, and DevOps throughput.

Dynatrace SaaS version 1.271, released on July 28, 2023, introduced several enhancements and new features, including the general availability of Java Code-level Vulnerability Analytics and Application Protection. This release added new DQL commands and functions such as fieldsKeep, describe, and various timestamp and IP-related functions, which enhance data querying capabilities. The platform now supports preset patterns for popular technologies like AWS and GCP, while the monitoring mode settings schema for infrastructure monitoring has been updated, replacing the fullStack property with a new monitoringMode property. Additionally, Linux ARM64 support has been extended to the OneAgent log module, and new metrics have been introduced to analyze Dynatrace Platform Subscription usage. The release also included updates addressing security vulnerabilities and usability improvements, such as refined alerting profile property filters and the addition of event markers in unified service screens.

Modern observability platforms, like the enhanced Dynatrace platform, are pivotal for organizations navigating the complexities of cloud-native and multicloud environments, as they centralize data and facilitate collaboration across IT, development, security, and business teams. These platforms address the challenges posed by data silos, cloud dependencies, and traditional monitoring limitations by leveraging causal AI to provide real-time, precise insights into application and infrastructure issues. The integration of a data lakehouse technology, such as Dynatrace Grail, allows for cost-effective, centralized data storage without the need for predefined schemas, enabling teams to quickly access and analyze data across various contexts. By offering advanced analytics capabilities, intuitive interfaces, and automation tools, modern observability platforms enable organizations to automate processes, make informed data-driven decisions, and improve their overall operational efficiency and security posture. Dynatrace's recent updates, showcased at Perform 2023, exemplify these advancements with features like new user interfaces, data exploration tools, and no-code/low-code automation, all designed to empower teams to derive actionable insights and build custom applications for enhanced decision-making.

Dynatrace Grail is a causational data lakehouse designed to transform log analysis by efficiently handling the vast amounts of data generated by modern cloud environments, enabling IT teams to gain precise insights into infrastructure and application issues. Traditional log management struggles with the sheer volume of data, but Grail addresses these challenges by combining the storage capabilities of a data lake with the fast query functions of a data warehouse, allowing for real-time, cost-efficient analytics without the need for indexing or schema definitions. The platform uses the Dynatrace Query Language (DQL) to enhance data exploration and transformation, supporting cross-team collaboration by dissolving data silos and providing a unified view of observability data. This approach allows organizations, such as a large U.K.-based financial services company, to manage their digital environments efficiently, balancing the cost and value of data processing while ensuring compliance and security. The integration of AI-driven insights through Dynatrace's software intelligence platform further empowers teams to make informed decisions, optimize operations, and scale their cloud-native architectures effectively.

Dynatrace has introduced Davis CoPilot, an expansion of its Davis AI platform, marking it as the first hypermodal AI in the industry, integrating predictive, causal, and generative AI capabilities. This enhancement aims to significantly boost productivity across various sectors, including operations, security, development, and business teams, by leveraging AI to offer precise predictions, accurate determinations, and meaningful insights. Davis CoPilot enables users to create queries, dashboards, and data notebooks using natural language and provides coding suggestions for workflow automation, tailored to each customer's unique hybrid and multicloud ecosystem. The hypermodal AI approach intelligently combines multiple AI techniques to address BizDevSecOps use cases, offering a comprehensive solution for observability and security with precise outcomes. By utilizing large language models (LLMs) and a combination of AI methods, Dynatrace's platform can handle a wide range of data types and modalities, providing reliable automation and enriched generative AI prompts. This results in effective and precise responses that enhance productivity and support automated workflows, security analysis, and visual analytics. Davis AI's predictive and causal capabilities are already available to all Dynatrace customers, while Davis CoPilot is set to launch in 2024, promising to further streamline and enhance platform use and onboarding processes, making AI more accessible and effective for organizations.

Since the emergence of DevOps in the late 2000s, DevOps automation has evolved significantly, now advancing from event-driven automation to answer-driven automation powered by causal AI. This shift addresses the need for efficiency and scalability in DevOps and SRE by moving beyond passive observations to proactive and precise actions based on comprehensive data analysis. Event-driven automation, which reacts to specific triggers like shopping cart abandonment or cybersecurity threats, laid the groundwork by providing real-time, rule-based responses. However, answer-driven automation, enhanced by AI, offers a more nuanced approach by analyzing context and delivering intelligent, business-value-oriented actions. This includes optimizing online shopping experiences, improving threat detection, managing progressive software delivery, remediating incidents, and safeguarding production environments. Platforms like Dynatrace, which integrate observability, causal AI, and predictive AI, exemplify how organizations can harness these capabilities to deliver better software, faster and more securely, marking a new frontier in DevOps automation.

Dynatrace's Configuration as Code is a pivotal tool for automating the setup and management of observability, security, and alerting within software development lifecycles, accommodating diverse environments and increasing release frequencies. This innovative approach allows developers to manage configurations using familiar tools such as IDEs and Git repositories, ensuring that configurations are easily reusable, versioned, and shared among teams. The platform supports self-service configuration through simple YAML files, enabling efficient and consistent management of various software lifecycle components while minimizing complexity. By integrating with existing workflows and leveraging automation, Dynatrace ensures rapid problem detection and remediation, making it an essential solution for modern software development challenges, particularly in complex microservice architectures. The platform's CLI and Terraform provider extend its capabilities to support seamless configuration management at scale, enhancing productivity and reliability across development teams.

Dynatrace Managed version 1.270, released on July 12, 2023, includes significant upgrades and new features across various components. Major updates involve enhancements to internal components such as JREs, Elasticsearch, and Cassandra, along with the discontinuation of support for custom charts in favor of Data Explorer charts, which offer ongoing improvements and editing capabilities. New security features include displaying entry point information for code-level vulnerabilities and an expanded vulnerability evolution event list. The update also introduces infrastructure monitoring enhancements for Kubernetes, including init container support and extended alerting conditions. Service and database overview pages received a design overhaul for improved troubleshooting, while a new authentication method for credential synchronization with CyberArk Vault was implemented. Additionally, the release addresses numerous resolved issues across application security, synthetic monitoring, and user interface components, along with operating system support updates, ensuring compatibility with Oracle Linux 8.8, Red Hat Enterprise Linux 9.2, Oracle Linux 9.2, and Rocky Linux 9.2, while planning future support changes for other systems.

The MOVEit vulnerability, identified as CVE-2023-34362, is a critical SQL injection flaw in the MOVEit Transfer web application that allows attackers to execute remote code and access sensitive database information. Discovered in 2023, and potentially exploited since 2021, it has been targeted by the ransomware group Cl0p. Organizations investigating this vulnerability face challenges due to insufficient log data from the default settings of MOVEit software, which often lack detailed evidence of exploitation activities. Observability data, such as traces and spans, can complement these logs to provide deeper insights into potential compromises. Tools like Dynatrace offer the ability to query observability data using DQL, enabling the detection of exploitation activity indicated by unusual patterns, such as the presence of the web shell human2.aspx. Despite the limitations of traditional logs, the integration of observability data enhances the ability to trace and understand the extent of exploitation, offering a more comprehensive approach to cybersecurity investigations.

The OneAgent release notes for version 1.269, published on July 3, 2023, detail a variety of updates, enhancements, and resolved issues across multiple components, including Java, .NET, PHP, Node.js, and others. This release introduces improved attack detection for command and JNDI injections, and provides detailed entry points for code-level vulnerabilities, benefiting developers and security engineers in assessing and fixing issues. The update also enables event ingestion on the OneAgent localhost interface for enhanced infrastructure monitoring. Significant bug fixes include the temporary disabling of the JavaScript module's signature check to reduce network traffic, improvements in CPU usage for hosts with high network activity, and resolving a memory leak in the Node.js code module. Additionally, the release encompasses several cumulative updates that include further fixes, such as .NET Core version detection improvements and the resolution of a priority inversion issue in OneAgent for iOS.