August 2024 Summaries

Dynatrace Managed version 1.300, with its release rollout starting on September 16, 2024, and updated on December 5, 2024, introduces several new features and enhancements, notably the ability to sort the "Assign environment permissions to user groups" table by column in the CMC and enhancements to Kubernetes events fields for Classic Events. The update also improves the handling of metric selector events, resolves high CPU issues in some Cassandra deployments, and includes a series of resolved issues, such as fixing duplicate problem references and improving notification email handling. Additionally, the release includes changes to operating system support, with several Linux versions being phased out over the coming years, and cumulative updates that address issues in previous builds, including adjustments to accommodate new Firewalld settings in Red Hat Enterprise Linux 9.5.

Dynatrace's SaaS release version 1.300, updated in October 2024, introduces several enhancements and features aimed at improving user experience and functionality. Key updates include enhanced visualization customization options and unified UI controls for Dashboards and Notebooks, alongside improved filtering capabilities that allow logical operators and value suggestions directly in the web UI. The introduction of launchpads enables users to create custom start pages, while enhancements in anomaly detection baselining and metric events enrich semantic fields for Kubernetes and cloud services. The OpenTelemetry metrics ingest API now supports histograms, and platform tokens offer a new way for users to integrate with Dynatrace services. Several cumulative updates in this release address various resolved issues, including improved billing accuracy and session replay optimizations, with some updates specifically enhancing the management of Dynatrace clusters and session replay functionalities.

Dynatrace is committed to fostering a strong and positive workplace culture that unites top talent, aligns with diverse needs, and enhances the employee experience. The company has developed a Culture Code to succinctly express its core values, mission, purpose, and vision, aiming to unify its global team and attract individuals who resonate with these principles. This Culture Code, while new, builds on existing elements within Dynatrace and serves as a guide for decision-making and interactions, ensuring a sense of belonging and inclusivity. It is integrated into all aspects of the employee experience, from recruitment to performance management, to maintain a vibrant culture that supports the company's ongoing transformation journey. By clearly defining and communicating its culture, Dynatrace seeks to sustain growth and innovation, ensuring that every team member contributes to the overarching goal of delivering excellence in software performance globally.

In a data-driven world, industries such as agriculture, mining, and aviation are increasingly utilizing the Internet of Things (IoT) to enhance operational efficiency and innovation. This transformation is facilitated by integrating IoT metrics with advanced observability solutions like Dynatrace, which offers tools such as the Dynatrace OneAgent and an agentless approach leveraging OpenTelemetry for edge-IoT applications. The text delves into how IoT is used in aviation through Automatic Dependent Surveillance-Broadcast (ADS-B) transponders, which transmit flight data in real-time for tracking and monitoring purposes. The document discusses the technical setup of using a Raspberry Pi with a software-defined radio receiver to collect ADS-B data, which is then processed and ingested into Dynatrace for advanced analytics and visualization. By employing the Dynatrace Query Language (DQL), users can parse and analyze data, leading to insights such as flight tracking, aircraft categorization, and distance calculations using the Haversine formula. The integration of IoT data with Dynatrace not only improves real-time monitoring capabilities but also provides actionable insights across various sectors, demonstrating the potential of IoT in driving business value and decision-making.

In May 2024, Tenable Research disclosed a critical SQL injection vulnerability in FileCatalyst Workflow, prompting Dynatrace to investigate further and discover another SQL injection vulnerability identified as CVE-2024-6632. This vulnerability allows an authenticated user during the setup process to exploit form submissions lacking proper input validation, thereby enabling unauthorized database modifications. While less critical and harder to exploit than the previously disclosed vulnerability, it still poses potential risks, especially if an attacker can modify information beyond their permitted access. Dynatrace discovered this vulnerability using its OneAgent, which automatically detects such issues, and it remains present even in versions that addressed the earlier vulnerability, urging users to upgrade to version 5.1.7 for mitigation. The discovery and disclosure process involved collaboration with Fortra, following a timeline of coordination to ensure proper communication and resolution.

The Digital Operational Resilience Act (DORA), adopted by the EU, aims to enhance the digital and cybersecurity resilience of financial institutions, presenting challenges as organizations navigate complex digital ecosystems, third-party risk management, and resource constraints. Compliance with DORA requires seamless integration with existing processes and involves passing annual audits, which can be facilitated by observability and security platforms like Dynatrace. These platforms automate checks for DORA compliance, improve application security, and leverage AI for effective ICT risk management, providing real-time exposure management and runtime application protection. Dynatrace's approach includes using AI to map technical requirements from various frameworks to DORA, prioritizing threat detection and response, and automating business impact analysis to ensure continuous operational resilience. Additionally, Dynatrace assists in understanding third-party ICT risks and supports continuous digital resilience testing, helping organizations proactively maintain software quality and minimize downtime.

Over the past decade, the shift towards cloud-native technologies, particularly Kubernetes, has been significant, but it comes with its challenges, especially during deployment. This text highlights three major mistakes to avoid when transitioning to Kubernetes. Firstly, relying too heavily on the command line tool kubectl for cluster management instead of adopting a configuration-as-code approach using Git repositories and automated pipelines is discouraged. Secondly, neglecting to set proper resource requests and limits can lead to inefficient resource allocation, causing issues like resource starvation or excessive usage. Finally, failing to engage developers in the transition process can hinder successful Kubernetes adoption, as developers often face challenges in building, testing, and debugging their code within cloud environments due to reduced visibility and access. To ensure a smooth transition, it's essential to adopt the right tools and practices that align both operational and developer needs.

In late 2018, Dynatrace introduced the Dynatrace Operator, which is built on the open-source Operator Framework and facilitates the deployment, configuration, maintenance, and upgrade of Dynatrace's full stack observability within Kubernetes and Red Hat OpenShift clusters. Recently, Dynatrace partnered with IBM to extend these capabilities to Red Hat OpenShift on the IBM Power architecture, enhancing the ability to modernize applications and increase operational efficiencies through comprehensive visibility from hardware to application processes. The Dynatrace platform offers infrastructure health monitoring, full stack observability, Smartscape topology mapping, and intelligent root cause analysis using Davis AI, all designed to seamlessly integrate with cloud-native technologies. The Dynatrace Operator automates the deployment and management of monitoring components like OneAgent and ActiveGate, ensuring efficient and secure lifecycle management without manual code changes. This collaboration enables users to optimize resource utilization and take full advantage of containerized workloads on IBM Power, streamlining the modernization process to hybrid cloud environments.

The OneAgent 1.299 release introduces multiple updates and new features, including enhanced monitoring for Java 23 processes and support for Apache Kafka message monitoring using the IBM/sarama library. Java virtual threads can now be opted into, providing improved context-propagation and CPU profiling within distributed traces. This release also resolves various issues across different components such as .NET, network, and OS modules, addressing problems like memory leaks, incorrect metric intervals, and log instrumentation errors. Notably, the support for Java 19 has been discontinued, requiring users to update their Java versions or stick to older OneAgent versions. Additionally, cumulative updates in builds 1.299.45, 1.299.50, and 1.299.73 address specific bugs and enhance performance in areas including mainframe agent balancing, network module stability, and OS module logging functionality. The release also touches on technology support version schemas and highlights changes in the support of various Java and OneAgent versions, emphasizing the need for updates to maintain compatibility and functionality.

The Digital Operational Resilience Act (DORA) is a regulation implemented by the European Union to enhance the cybersecurity and operational resilience of its financial sector, officially effective from January 2023, with mandatory compliance by January 2025. DORA mandates comprehensive Information Communication Technology (ICT) risk management, harmonizing cybersecurity guidelines across financial institutions, including banks, insurers, and ICT service providers, to prevent and recover from cyber incidents. The regulation encompasses five pillars: ICT risk management, ICT incident management, digital operational resilience testing, managing ICT third-party risk, and information sharing arrangements. It urges financial entities to adopt a risk-based approach to application security, emphasizing continuous monitoring, threat detection, and response to maintain a resilient IT environment. DORA also stresses the importance of managing third-party risks and encourages information sharing to enhance collective understanding and preparedness for cyber threats. Dynatrace offers solutions to aid organizations in achieving DORA compliance by leveraging its observability and security platform equipped with AI capabilities.

Dynatrace has expanded its capabilities to enhance observability of SAP systems through its partnership with SoftwareOne's PowerConnect, allowing SAP customers to leverage AI-based analytics for optimized operations. This integration enables comprehensive monitoring of SAP systems, addressing challenges such as service availability, performance, user experience, cloud migration, and security compliance. PowerConnect facilitates data collection from SAP systems, which is then analyzed on the Dynatrace platform, providing insights into system performance and dependencies. This integration supports SAP Basis teams in managing complex, mission-critical environments by offering customizable dashboards and prebuilt views for deep insights into SAP and non-SAP systems. The platform enables unified observability, simplifying troubleshooting across integrated domains and aiding in cloud migration and upgrade processes. Dynatrace's AI-powered capabilities allow for real-time performance monitoring, root-cause analysis, and accelerated issue detection, enhancing operational efficiency and business performance across SAP landscapes.

Dynatrace has been recognized in Constellation’s annual ShortList™ for its leadership in Observability, AIOps, and Digital Performance Management, highlighting its role in driving digital transformation with its comprehensive observability platform. The Constellation ShortList™ is a curated selection of technology solutions that align with digital transformation goals, chosen based on extensive research and evaluation. Dynatrace's platform stands out for providing significant visibility into complex cloud environments and leveraging AI techniques to reduce incidents and enhance business resiliency. It is among the top vendors for its ability to connect application performance with business outcomes, thereby enhancing user experience and impacting critical KPIs like conversions and revenue. This recognition underscores Dynatrace's commitment to empowering organizations globally to deliver exceptional digital experiences in an evolving digital landscape.

Dynatrace has introduced case sharing in the Security Investigator app, revolutionizing collaborative security investigations by enabling professionals to share their investigations with teammates immediately. This feature offers various sharing modes, allowing for personal, group, or link sharing with options for read-only or edit privileges. The system identifies shared cases with icons, and users can view details by hovering over these icons. While multiple users can have edit privileges, only one can edit at a time to maintain case integrity, with others being notified when the case is locked. The case owner retains control over sharing permissions and can revoke or recreate shared links if necessary. This enhancement aims to streamline threat-hunting activities and improve team collaboration in security investigations.

The blog post emphasizes the importance of reliability in software releases, highlighting the challenges and practices of chaos engineering to ensure robust system performance. It discusses the Reliability metric introduced by DORA as a fifth metric to address the oversight of reliability in organizations that focus on faster release times, often ignoring real-world conditions. The post explores how Dynatrace's comprehensive observability tools aid in creating informed hypotheses for chaos engineering experiments by offering visibility across the entire system, which helps identify interdependencies and potential failure points. It also highlights the risks of conducting these experiments in production environments, where incorrect hypotheses can lead to prolonged outages, and suggests using Dynatrace to mitigate these risks by limiting the scope of tests, known as the "blast radius," and gradually expanding it. The role of Dynatrace's AI-based alerting in transitioning from correlation to causation analysis is discussed, enabling teams to understand and address cascading problems effectively. The ultimate goal is to improve build reliability, allowing SREs and operations teams to preemptively resolve issues and ensure seamless application performance, thereby maximizing the return on investments made during incident resolutions.

Managing attack surfaces is essential for enhancing digital resilience, and Dynatrace provides a comprehensive solution to monitor third-party vulnerabilities in software packages. By matching detected package identifiers with known vulnerabilities and common vulnerabilities and exposures (CVEs), Dynatrace offers insights into susceptible software components. Furthermore, it provides detailed information about vulnerable functions within the source code, allowing teams to evaluate the risk and prioritize remediation based on the actual usage of these functions. For example, a process group not accessing a vulnerable function may indicate a lower risk, whereas active usage suggests higher exploitation potential. Dynatrace's feature enables continuous monitoring of function usage to detect any changes that might indicate an exploit in progress. With coverage extending across numerous software packages, Dynatrace collaborates with Snyk to continuously enhance its vulnerability feeds, offering users the ability to focus on real risks by prioritizing CVEs that impact their specific environment.

Dynatrace is a platform designed to enhance business operations by providing executives with real-time insights through advanced observability and contextual analytics. It enables IT, security, and development teams to maintain comprehensive visibility into digital services, allowing for flawless and secure digital interactions. The platform addresses the challenges of traditional business intelligence systems that struggle with data silos, latency, and lack of contextual analysis by integrating AI-powered analytics and a natural language interface. This empowers executives to make data-driven decisions swiftly, optimize business processes, and improve customer satisfaction. By unifying diverse data types and treating business processes as observable assets, Dynatrace facilitates better alignment across departments and enhances the ability to predict risks and automate processes. The platform's unique approach integrates data capture, storage, and analysis into a single interface, promoting a more data-driven enterprise and enabling executives to drive growth and innovation effectively.

Dynatrace's SaaS release 1.299 introduces new features and enhancements to improve user experience and functionality, particularly for Kubernetes users, with customizable dashboards for easier troubleshooting and optimization. The release also includes a significant change in branding for Microsoft Azure services, now rebranded as Azure AI Services. Enhancements in the platform cover visualization improvements across Dashboards and Notebooks, refined IP allowlisting for security, enhanced root cause analysis exportation to Grail, and improved metric selector events handling. Additionally, the release addresses various resolved issues, including those related to ActiveGate and Dynatrace Cluster, such as improved storage capacity metrics, problem notification email handling, and data integrity in AWS monitoring configurations.

Dynatrace CEO Rick McConnell highlighted the company's strategic advantage of being rooted in Central Europe, which he referred to as "the Silicon Valley of Europe," due to its access to top-tier universities and technology talent, allowing the company to conduct over 95% of its R&D there. This geographical positioning has enabled Dynatrace to innovate and maintain a competitive edge in the tech industry, particularly in delivering reliable software solutions. McConnell also addressed the recent CrowdStrike outage, underlining the importance of resilient IT systems and the need for technology solutions that minimize manual intervention and eliminate blind spots. He emphasized Dynatrace's 'power of 3' AI approach, which integrates causal, predictive, and generative AI to continuously analyze vast amounts of data, helping customers swiftly respond to disruptions and maintain business continuity. During the CrowdStrike incident, organizations using Dynatrace's comprehensive platform experienced faster recovery times compared to others, demonstrating the effectiveness of their technology in ensuring operational resilience.

Dynatrace emphasizes the importance of securing production environment resilience, particularly following widespread outages due to a routine software update in July 2024. The company’s OneAgent solution, a unified monitoring tool, is designed to automatically discover and monitor IT environments, providing comprehensive access to hosts, processes, services, and applications. Their approach to minimizing risks involves rigorous safety measures throughout the software development lifecycle, including dependency management, extensive testing, a month-long hardening phase, and a controlled, phased rollout process. OneAgent ensures continuous monitoring and security by injecting monitoring code without manual configuration, and it employs artifact signing to prevent unauthorized changes. Furthermore, Dynatrace implements 24/7 automated monitoring, real-time health insights, and proactive analysis to address potential issues swiftly and maintain system stability, thereby enhancing the reliability and security of IT environments.

The text discusses the importance of business resilience plans in preventing and recovering from software outages, which are a significant risk in the digital age due to increasing reliance on software and cloud infrastructure. It outlines various causes of outages, including software bugs, cyberattacks, high demand, backup process failures, network issues, and human error, and suggests strategies to mitigate them. These include implementing thorough testing, robust security measures, scalable infrastructure, regular backup tests, and comprehensive training programs. The text emphasizes the role of an observability platform in providing a complete view of applications and services to proactively identify and resolve issues, thereby minimizing the impact of outages and enhancing technology reliability and resilience. The overall message is that while software outages are common, understanding their causes and implementing effective tools and strategies can maintain business continuity and trust.

Dynatrace Managed version 1.298, updated in December 2024, introduces several enhancements and new features, particularly in the realm of infrastructure observability and digital experience. Notable updates include new built-in metrics for persistent volume claims in Kubernetes, improved root cause analysis for Kubernetes workload events, and a new Cluster REST API endpoint. The release also includes a new Session Replay extension for Chrome, supporting better session playback, and introduces the Interaction to Next Paint metric to assess web page responsiveness. Additionally, the update enhances problem notifications with oAuth2 authentication and adds new fields for problem event information in the REST API. Support for ARM architecture in the ActiveGate host-based installer is announced, while certain operating systems will see support phased out by 2026. The update addresses 24 resolved issues, including improvements in application security, cluster maintenance, and synthetic monitoring, alongside a new matcher for log source origins and adjustments to Cassandra CPU usage in select deployments.

Dynatrace enhances container security management by providing a unified platform that integrates findings from various DevSecOps tools and offers runtime context-based prioritization. By using its OpenPipeline™ technology, Dynatrace consolidates container security findings and reduces alert noise across the Software Development Lifecycle (SDLC), enabling developers and cloud architects to efficiently address vulnerabilities. The platform's generic ingest security endpoint allows for the integration of data from any third-party security tool, ensuring comprehensive visibility and systematic management of security findings. Dynatrace's Semantic Dictionary standardizes the analysis and prioritization of vulnerability data, supporting automated notifications and seamless integration with existing security workflows. This approach addresses the challenges of multicloud environments, where container images and security findings are often scattered, by providing a consolidated view that streamlines response times and reduces manual efforts.

Automated business processes are crucial for modern organizations, and the latest enhancements in Dynatrace, including business events powered by Grail™, make it easier to access and monitor business data flowing through IT systems. Business process monitoring, facilitated by business events, allows IT and business teams to collaborate effectively by treating processes as assets with measurable KPIs, which align towards shared business goals and improve customer satisfaction. The Business Flow app, built with AppEngine, simplifies the monitoring and analysis of business processes by defining each process step or milestone using business events and correlation IDs, enabling real-time tracking and anomaly detection. The Dynatrace Query Language (DQL) provides additional customization for monitoring complex processes, such as order fulfillment or payment delays, by correlating different business events. Service level objectives (SLOs) and workflow automation further enhance process management by formalizing performance goals and automating responses to missed targets, ensuring efficient process execution and alignment with business outcomes.

The OneAgent 1.297 release, set to begin rollout on August 13, 2024, offers various enhancements and resolves multiple issues across different components. The release details the oldest supported versions for standard and enterprise support, introducing new technology support such as Apache Tomcat access log enrichment and improved log monitoring for IBM CICS regions. Notable deprecations include the end of Puppet installation support in version 1.293. Key improvements include enhanced network agent packet reading that reduces CPU usage, support for Zone.js and Angular 17 SSR, and refined infrastructure observability for Podman containers. Several issues have been resolved, including crashes in the OS module and Apache log instrumentation, problems with the .NET Business Events feature, and memory leaks in the network module. The update also addresses issues with NFS shares detection on Linux and enhances the OneAgent for Android and iOS with improved auto action duration calculation and Swift package instrumentation.

The Dynatrace SaaS version 1.298 introduces several new features and enhancements aimed at improving data monitoring and security functionalities, including expanded aggregation functions for the DQL makeTimeseries command and the ability to base code-level vulnerability and attack monitoring rules on resource attributes instead of process group IDs. This release also facilitates the ingestion of AWS Elastic Container Registry vulnerability findings using Amazon Inspector, enhances problem notification webhooks with OAuth2 support, and adds new fields for Kubernetes-related data in problem REST API queries. Additionally, the update includes infrastructure observability improvements, such as offering an ActiveGate host-based installer for ARM architecture and including a new metric for assessing web page responsiveness. Several resolved issues are addressed in cumulative updates, refining features like custom metric-based disk event merging and Azure Load Balancer monitoring.