February 2025 Summaries

A critical vulnerability in Apache Struts, noted as CVE-2024-53677, was publicly disclosed on December 11, 2024, affecting its file upload mechanism and potentially allowing path traversal and remote code execution. This flaw poses significant risks to enterprises using the popular Java-based web application framework. Early detection and analysis of such vulnerabilities are crucial to mitigating their impact, as demonstrated by research that identified indicators of CVE-2024-53677 through social media, blogs, and forums before its official disclosure. The complexity of the file upload mechanism in Apache Struts, combined with a focus on maintaining compatibility, delayed addressing this vulnerability despite initial warnings on platforms like Jira. By leveraging language models and multi-agent frameworks, the research provided a comprehensive analysis, connecting CVE-2024-53677 to previous vulnerabilities and emphasizing the importance of early vigilance in ensuring software security.

The text discusses the evolving role of OpenTelemetry as a crucial tool in modern software ecosystems, emphasizing its importance in creating observable and resilient systems. As the second largest project under the Cloud Native Computing Foundation, OpenTelemetry is becoming the standard for collecting and exporting telemetry data across various technologies and platforms. The text highlights the growing trends in OpenTelemetry for 2025, such as the stabilization of Semantic Conventions for consistent data interpretation, the impending release of OpenTelemetry Collector version 1.0 to streamline data management, advancements in profiling technology, and enhancements for generative AI observability. These developments reflect a maturing ecosystem with detailed specifications and improved implementations, promising significant improvements in the ability to turn raw telemetry data into actionable insights.

In the complex digital landscape of modern hybrid clouds and cloud-native applications, monitoring and securing business-critical applications is crucial to maintaining performance and mitigating cyber threats. Dynatrace addresses these challenges with its Hub, which offers over 700 ready-made apps and integrations for automated full-stack monitoring, simplifying onboarding and enhancing user experience. The Hub serves as a central platform for discovering, learning, and activating monitoring tools, with features to explore technologies supported by OneAgent and open standards like OpenTelemetry. Users can integrate data, automate workflows, and access in-depth resources through detailed Hub pages, while guided onboarding and partner services provide additional support. The Hub also facilitates staying updated with new features and offers a Partner Finder to customize and extend Dynatrace based on specific business needs, ensuring comprehensive coverage and maximized investment in monitoring solutions.

Apache Struts 2, a popular Java framework for web applications, has a history of critical security vulnerabilities, notably in its file upload mechanism, which can lead to remote code execution if exploited. The framework's vulnerability CVE-2024-53677, published in December 2024, highlights flaws that allow attackers to manipulate file upload parameters for unauthorized file placement. While Struts version 6.4.0 introduced a new file upload mechanism called ActionFileUploadInterceptor, complete mitigation is only achieved in version 7.0.0 and later, where the deprecated and vulnerable FileUploadInterceptor is fully removed. The blog post explains the mechanics of the vulnerability, how file uploads work in Struts, and offers mitigation strategies, emphasizing the need for developers to upgrade to the latest versions and refactor their file upload implementations. The post also discusses how attackers exploit the system using mass assignment attacks and recommends using tools like Dynatrace Runtime Vulnerability Analytics to detect and address such vulnerabilities.

Business processes are essential to digital transformation, aiding in efficient operations, adaptability, and enhanced customer value, yet they often remain under-monitored, posing significant risks and opportunities. These processes, categorized into core, support, management, and long-tail, are supported by a mix of on-premises, cloud, and SaaS solutions, highlighting the complexity and lack of visibility in their monitoring. While business process management (BPM) can optimize outcomes, its cost and complexity often restrict its use to a few critical processes, leaving many valuable processes unobserved. Business process observability addresses these challenges by treating processes as distinct business assets, using data from system monitoring and interfaces to determine process health and performance through metrics and KPIs, thereby improving operational efficiency and customer satisfaction. Dynatrace offers a unique advantage in this field, providing end-to-end process analytics through its Business Flow app, which simplifies process configuration and analytics while integrating business KPIs with IT context for effective collaboration and optimization.

Dynatrace SaaS version 1.309 introduces several updates, including new features, changes, and bug fixes across various components of the platform. Notable updates include the ability to define custom fieldsets for field-level permissions in Grail tables via API, enhanced tracking of the origin of vulnerabilities in Go software components, and revised disk space requirements for OneAgent and ActiveGate logs. The release also features new timeseries scalar and filter parameters for DQL queries and adjustments to settings audit log generation for improved readability. Breaking changes in OpenPipeline now require configuration properties to exclude the "-" character, with automatic migration to a new format. Additionally, a ready-made dashboard provides insights into OpenPipeline usage, and a new gauge chart visualization option is available for Dashboards and Notebooks. Several platform bug fixes address issues such as dashboard tile errors, hidden settings pages, and permission-related access restrictions.

Dynatrace's integration with AWS Security Hub aims to enhance security management by unifying, visualizing, and automating the analysis of security findings across various tools and environments. This integration leverages Dynatrace's runtime context to prioritize critical security issues effectively, thereby reducing alert noise and enabling DevSecOps teams to focus on essential remediation tasks. AWS Security Hub plays a crucial role by correlating and enriching security signals to identify and prioritize risks, offering automated response workflows for streamlined remediation. With Dynatrace, security findings are mapped to semantic conventions and stored in the Grail data lakehouse, allowing for comprehensive analysis and visualization through apps like Dashboards and Workflows. This approach not only aids in smarter prioritization and noise reduction but also provides insights into security product coverage and effectiveness, helping organizations identify assessment gaps and optimize their security tooling. Integration is facilitated via Amazon EventBridge, supporting both OCSF and ASFF formats, and offering native apps for event consumption, visualization, and automation, along with sample dashboards and workflows to assist in setup and ongoing security management.

Dynatrace actively supports OpenTelemetry, an open-source framework for handling telemetry data, and is a leading contributor to the project since its inception. OpenTelemetry, backed by major observability vendors, is one of the most active projects under the Cloud Native Computing Foundation (CNCF). Dynatrace has a dedicated team that ensures smooth integration of its platform with OpenTelemetry data and holds key leadership roles within the OpenTelemetry community. The Dynatrace platform accepts data in the OpenTelemetry Protocol (OTLP) format and supports traces, logs, and metrics across all languages supported by OpenTelemetry. By storing this data in its Grail™ data lakehouse, Dynatrace enables users to conduct automated health analysis, view distributed traces, analyze logs, and utilize notebooks for metrics analysis. Dynatrace offers resources like the Dynatrace Playground and a video series to help users explore and leverage the integration with OpenTelemetry effectively.

Managing observability efficiently in cloud-native environments can significantly enhance platform performance, as demonstrated in a tech talk at #KCDAustria about using the Upjet project to create a custom Crossplane Dynatrace provider. This process allows for deploying a monitoring dashboard with alerts as a single Kubernetes resource, leveraging the operator pattern in Kubernetes to extend its API through custom resource definitions (CRDs) for managing external systems like AWS, GCP, and Azure. The talk highlighted the benefits of Configuration as Code, where configurations are treated as declarative code to simplify infrastructure management. The Upjet project streamlines the creation of Crossplane providers by transforming Terraform provider schemas into Crossplane CRDs, allowing for faster development and reuse of Terraform providers. The demonstration included steps to configure provider resources, generate the necessary code, and deploy the provider to manage Dynatrace resources in a Kubernetes environment. The session addressed key questions about the advantages of using Crossplane over Terraform, state management, the practicality of using Upjet in production, and the mapping between Terraform objects and Kubernetes CRs. The discussion also touched on the potential impact of Crossplane v2.0 on provider creation processes, emphasizing the benefits of using Crossplane for infrastructure automation by extending the Kubernetes API and using compositions to automate the observability stack.

The text provides a detailed overview of how Dynatrace, a major player in the observability sector, supports OpenTelemetry (OTel), a widely adopted open-source project of the Cloud Native Computing Foundation. Since its creation in 2019 from merging OpenCensus and OpenTracing, OpenTelemetry has become a key standard for telemetry data handling and is supported by numerous observability vendors, including Dynatrace. Dynatrace can natively ingest data in the OpenTelemetry Protocol (OTLP) format via HTTP, supporting key signals such as traces, logs, and metrics, though it requires specific configurations like delta temporality for metrics and an API token with designated scopes. The text also highlights Dynatrace's own Collector distribution, which integrates with OpenTelemetry's repositories and provides advantages such as verified components and independent security patches. Furthermore, Dynatrace offers capabilities like the Grail™ data lakehouse for unified data storage and analysis, making it possible to query and correlate data effectively. The document encourages exploring resources like the Dynatrace Playground to experience the integration firsthand.

Dynatrace Managed version 1.308 introduces several updates, changes, and bug fixes, including a breaking change in settings audit log generation to enhance readability and reduce spam by not displaying unchanged API updates. The release upgrades Cassandra nodes to version 4.1 and the Jetty WebServer functionality to version 10, with an advisory for potential increases in CPU and memory usage; users are advised to increase ActiveGate resources if necessary. The update includes enhancements to the OneAgent automatic update process and remote configuration management, alongside a new rollout of the Dynatrace Managed installer using Adoptium JRE versions 11.0.25 and 17.0.13. It also details upcoming changes in operating systems support, specifying that certain Linux distributions will lose support in the coming years. The release resolves 15 issues across multiple components, including improvements to dashboard functionality, API endpoint responses, and Session Replay features.

Dynatrace has introduced the Extensions app, a platform-native application designed to centralize the configuration, monitoring, and discovery of extensions, enhancing the management of cloud environments. This app serves as a central hub for various Dynatrace applications and third-party integrations, making it easier to address monitoring gaps by providing recommendations and automatically updating configurations. The Extensions app allows users to monitor different technologies and services with ease, streamlining the process of setting up and adjusting monitoring configurations without leaving related applications, like the Databases app. It features a user-friendly interface that accommodates both local and remote monitoring needs, offering detailed insights into the health and status of extensions to prevent metric gaps and ensure optimal monitoring. The Dynatrace Hub complements this by providing an extension catalog, facilitating the discovery and installation of necessary extensions. Users are encouraged to provide feedback to help improve the platform continually.

Dynatrace has revamped its dashboard creation process to simplify building interactive, AI-powered dashboards for users of all experience levels, aiming to transform raw data into actionable insights. The platform provides ready-made dashboards for various use cases, while allowing for quick and easy custom dashboard creation to meet specific needs. Users can monitor real-time business performance, user interactions, security issues, and IT infrastructure health, while also drilling down to identify root causes of problems. This first installment of a blog series guides users in creating a basic dashboard from scratch, starting with host monitoring metrics such as DNS errors, disk usage, and CPU usage, using different visualization types like single-value charts, tables, and pie charts. The guide also emphasizes the importance of dashboard structure and offers tips on adding titles and organizing charts for better user experience. Future posts in the series promise to enhance dashboards with AI and improve their visual appeal and usability, encouraging users to explore the Dynatrace Playground and other resources to deepen their understanding and skills.

Dynatrace SaaS version 1.308 introduces several new features, improvements, and bug fixes across its platform. Key updates include changes to the settings audit log to enhance readability by eliminating redundant entries, which represents a breaking change, and the introduction of "Technology bundles" for simplified log line parsing. The release also enhances threat observability by enabling the ingestion of AWS Security Hub data, and improves URL masking in digital experiences. Additionally, the Log Ingest API now ensures more reliable log delivery, albeit with increased response times, and the Kubernetes app introduces data segmentation for better environment management. Notably, the Davis CoPilot Chat, a generative AI assistant, is now generally available, providing users with quick and accurate responses to queries. The Dashboards and Notebooks feature a new meter bar visualization option, and several platform bugs have been addressed, enhancing overall functionality and user experience.

OneAgent version 1.307 introduces several updates and enhancements to improve infrastructure and application observability, with features like custom log encoding support, declarative process grouping, and enhanced disk alerting sensitivity. The release also includes updates specific to different operating environments, such as support for Windows Server 2012 R2, Alpine Linux on ARM64, and improved service detection on Linux. For security, OneAgent now detects certain security software including Carbon Black EDR and CrowdStrike Falcon XDR. Several issues have been resolved across various components, including ActiveGate, OS modules, and OneAgent's AI causation engine, ensuring more stable performance and compatibility. The release also addresses specific challenges in .NET monitoring, Go applications, and JavaScript agents, enhancing the reliability and functionality of OneAgent's monitoring capabilities across platforms like AWS Lambda and Kubernetes.

Leveraging tools like Dynatrace Live Debugger, OpenPipeline, and OpenTelemetry can significantly enhance the process of tackling complex performance issues, such as high CPU load in applications. This use case demonstrates how teams can troubleshoot and debug issues across various environments without needing code changes or redeployments. The process begins with OpenPipeline ingesting data and Davis AI detecting a problem, which is then investigated using Live Debugger to inspect code-level details and non-breaking breakpoints. By examining local variables, server processes, and threads, developers can identify the root cause, such as background threads consuming excessive CPU resources. Additionally, Distributed Tracing provides a comprehensive view of the end-to-end transaction, allowing for an in-depth analysis of specific functions like GetAds, where issues are suspected. This approach showcases the robust capabilities of Dynatrace in streamlining debugging workflows, allowing for thorough data analysis from multiple angles, and facilitating an efficient resolution process without the complexities of production permissions or extensive issue reproductions. Dynatrace Live Debugger is expected to become generally available soon, offering a practical tutorial for users.

Dynatrace has fully integrated its Runtime Vulnerability Analytics into its latest platform, introducing a new Vulnerabilities app that enhances the detection, prioritization, and response to application vulnerabilities. The updated platform provides a unified view of vulnerabilities, consolidating third-party and code-level risks into a single interface, and offers advanced filtering capabilities for precise searches. Users can assess vulnerabilities based on real-world impact and exploitation potential, focusing on issues that directly threaten their environments. The app allows for segmentation of environments and adapts vulnerability scores to specific contexts, ensuring more relevant prioritization. By streamlining the management of vulnerabilities, Dynatrace aims to provide actionable intelligence that reduces noise and helps users concentrate on critical threats, ultimately simplifying the complexity of application security monitoring.

Network Availability Monitoring (NAM) is a key feature of Dynatrace Managed that enhances network monitoring by providing comprehensive insights into the availability and health of IT infrastructure. It addresses the limitations of traditional monitoring tools by integrating synthetic monitoring capabilities that include ICMP, TCP, and DNS monitors, which can operate even when HTTP/HTTPS endpoints are unavailable. This feature enables users to monitor remote hosts, network devices, and services through the same private synthetic locations used for HTTP and browser monitors. By leveraging Dynatrace Davis® AI, NAM offers 24/7 insights into network performance, facilitating proactive issue resolution to prevent downtime and maintain seamless business operations. Future updates may introduce advanced analytics and expanded protocol support, further enhancing the tool's capabilities. Dynatrace Managed provides an intuitive web UI and API for configuring and managing NAM, ensuring a comprehensive view of the IT environment and improved end-to-end service availability.

The announcement of Dynatrace's expanded security portfolio introduces new Cloud Security Posture Management (CSPM) capabilities, aiming to enhance security, compliance, and efficiency in managing complex hybrid and multicloud environments. By leveraging continuous monitoring, automated remediation, and centralized visibility, Dynatrace enables enterprises to address security posture challenges proactively. These challenges include configuration management issues, rising compliance demands, and the inefficiencies of traditional manual audits. The platform offers automated response actions to help reduce the time spent on compliance and configuration issues, ensuring continuous fulfillment of regulatory requirements. It emphasizes the importance of automation and continuous monitoring to maintain operational resilience, regulatory compliance, and customer trust. With features like Grail for enhanced collaboration and a unified platform for cloud security and observability needs, Dynatrace provides comprehensive solutions for managing cloud security posture, promoting operational efficiency, and facilitating cross-functional teamwork.

Dynatrace's "Observability for Developers" offering addresses the evolving responsibilities of developers in modern, distributed environments by integrating observability and analytics tools tailored to developers' needs. It provides features like logs, distributed traces, and dynamic instrumentation to enhance debugging and optimize development tasks, reinforcing the shift-left movement that prioritizes early bug resolution. With capabilities such as intuitive dashboarding, AI-powered troubleshooting, and live debugging, developers gain real-time insights into code execution, facilitating rapid problem-solving and improving application performance. The platform supports seamless integration with developer environments and enterprise adoption through a self-service model, minimizing tool sprawl and data silos. This comprehensive approach not only enhances the developer experience but also ensures high-quality, efficient software delivery across the software development lifecycle.

Dynatrace is a platform designed to assist Operations, SRE, and DevOps teams in maintaining high software quality, security, and reliability, allowing organizations to innovate and scale with confidence. By integrating Davis® AI, the platform offers predictive analytics and automated workflows that simplify issue detection and resolution, reduce mean time to repair (MTTR), and enable proactive incident prevention. As software deployment becomes more complex, Dynatrace provides AI-driven exploratory analytics to help organizations quickly identify issues, streamline remediation processes, and implement preventive operations. The platform's dashboards, powered by Grail™ data lakehouse and Davis® AI, offer a comprehensive view of data, integrating health and problem-related information seamlessly. The Problems app provides AI-assisted problem analysis, which, according to IDC, can reduce MTTR for critical incidents by 56%. Additionally, Dynatrace utilizes generative AI through Davis CoPilot to offer insights into root causes and automate remediation via simple workflows, enhancing operational efficiency. By adopting preventive operations, Dynatrace can anticipate and prevent critical situations before they occur, ensuring smooth and uninterrupted user experiences.

Dynatrace Live Debugger is a pioneering tool designed for real-time, cloud-native observability that allows developers to troubleshoot and debug applications efficiently across various environments, including production, without disrupting operations. By utilizing non-breaking breakpoints, it provides instant access to code-level data such as stack traces and variable values, enabling a seamless debugging experience even in complex distributed systems. This tool empowers developers to maintain application performance and reliability by offering deep insights, integrating with popular IDEs, and supporting third-party and open-source code debugging. Additionally, Dynatrace emphasizes robust data privacy and security, ensuring compliance with major regulatory frameworks while facilitating a secure and efficient development process. Currently in preview, Dynatrace Live Debugger is set to be generally available soon, promising to enhance debugging capabilities for developers in enterprise settings.

Davis CoPilot Chat, now available across the Dynatrace platform, enhances user interaction by providing a conversational interface that leverages generative AI to offer immediate and accurate responses in multiple languages, thus improving productivity and user experience. This feature streamlines onboarding and provides contextual insights from various Dynatrace Apps, simplifying tasks like troubleshooting and exploring advanced configurations. It seamlessly integrates with specific apps, offering detailed explanations and remediation steps for issues such as Kubernetes warnings and database performance optimization, thereby reducing reliance on expert support. The launch of Davis CoPilot Chat marks a significant step in Dynatrace's ongoing commitment to enhance user experience by making data and insights more accessible, with plans for further feature enhancements in the future.

The 2024 CrowdStrike incident underscored the vulnerabilities in IT systems globally, disrupting critical services due to a faulty software update. Despite advancements in technology, managing enterprise software remains complex, highlighting the need for robust incident response strategies. Artificial intelligence, particularly AIOps, is increasingly seen as pivotal in avoiding downtime through automation and optimization of tasks like performance monitoring. The State of AI Report indicates that 89% of technology leaders expect AI to significantly enhance incident response capabilities. Dynatrace's Davis AI exemplifies this trend by leveraging causal, predictive, and generative AI to transform IT operations. This system emphasizes proactive problem prevention, utilizing real-time data analysis to enhance root cause detection and anomaly identification. Dynatrace's approach extends beyond traditional IT operations to include complex scenarios like security threat observability. By automating remediation processes and predictive maintenance, Dynatrace enables organizations to shift from reactive problem-solving to preventive operations, significantly improving efficiency and reducing response times.