July 2014 Summaries

Angel Fernández Camba, a developer at Logtrust, discusses the pivotal role of log data in transforming business insights into actionable revenue opportunities and improving system reliability. Logs, which record events from servers, applications, and firewalls, provide crucial information that can be leveraged across departments, from marketing to IT, for real-time data analysis and decision-making. However, the challenge lies in the unstructured nature of such data, prompting some companies to invest in big data tools or devise in-house solutions. The key to extracting valuable insights lies in effective data visualization, which can reveal trends and relationships that are not easily discernible from raw data. Graphs and maps, for instance, can help identify problem areas, such as service disruptions on a global scale, and guide strategic responses. By employing tools like PagerDuty alongside Logtrust, businesses can enhance their ability to manage and respond to data-driven insights efficiently, ensuring operational uptime and customer satisfaction.

PagerDuty offers comprehensive solutions to enhance operational insight and incident management, with features that streamline incident response and improve on-call scheduling. The upcoming launch of Advanced Reporting aims to elevate operations by providing detailed insights across infrastructure, enabling users to analyze trends and take action based on data-driven insights. This functionality allows teams to track key metrics, reduce alert fatigue, and focus efforts on critical issues, ultimately enhancing reliability and reducing mean time to recovery (MTTR). By consolidating monitoring services into a single view, PagerDuty facilitates the identification of incident trends and workflow bottlenecks, fostering more effective prioritization and resource allocation. The platform also supports proactive measures to maintain team well-being by managing incident workloads and offering solutions to common operational challenges, such as addressing recurring incidents with strategic adjustments. Before the full release, PagerDuty plans a public preview of the new reporting features for all customers, providing an opportunity to explore these tools and their impact on operational efficiency.

Alex Smolen, a Software Engineer at Twitter, discussed the security strategies and challenges faced by Twitter, which serves over 255 million monthly active users, during a DevOps Meetup at PagerDuty HQ. As Twitter continues to grow and serve real-time news and information, it remains a constant target for hackers, necessitating robust security measures. To address these challenges, Twitter employs automation to streamline security processes and quickly identify and resolve issues, using tools like Brakeman and Phantom Gang. Additionally, Twitter emphasizes a robust code review process, involving multiple teams and a shared responsibility for security among engineers. The company also designs security measures around user needs, incorporating features like two-factor authentication, SSL, HTTP Strict Transport Security (HSTS), and certificate pinning to ensure user safety. Overall, Twitter's approach to security integrates automation, collaboration, and user-centric design to maintain a secure platform.

PagerDuty provides insights and recommendations on effective on-call scheduling practices based on customer usage of their on-call handoff notifications. They suggest that shift handoffs should ideally occur during business hours when both parties are present, allowing for seamless communication of any ongoing issues. It is recommended to avoid weekend handoffs to minimize confusion and ensure a comprehensive review of the week's data, often facilitated during weekly team meetings. Popular shift lengths include 8 hours, 12 hours, 1 day, and 1 week, each suited for different team sizes and operational needs. PagerDuty emphasizes the importance of finding a schedule tailored to the team's specific requirements, allowing for customization of shift timings through their platform, and highlights the necessity of maintaining regular shift lengths to prevent forgetfulness and burnout.

The Meetup at PagerDuty HQ on Friday, July 11th, at noon will focus on customer data security, featuring speakers from Twitter, PagerDuty, and Okta who will share insights on their respective security strategies. Alex Smolen of Twitter will discuss the company's automated approach to deploying tools for proactively finding and fixing vulnerabilities, emphasizing the need for granular security tailored to each user due to the platform's diverse user base. Evan Gilman from PagerDuty will highlight the establishment of security standards, the creation of fault-tolerant protocols, and the continuous validation of security architecture to ensure maximum uptime and customer trust. Stephen Lee from Okta will address the challenges IT faces in managing secure access across an expanding landscape of devices and cloud applications, emphasizing the complexities of security management that span IT, HR, and Operations for both internal and external applications. The event will open doors at 11:30 AM and start promptly at 12:00 PM, with doors closing at 12:05 PM.

PagerDuty employs a comprehensive security strategy involving continuous monitoring and alerting to proactively detect and resolve issues, utilizing tactics such as port availability monitoring, centralized logging, and active response systems. They use Gauntlt for infrastructure security checks, Sumologic for centralized logging to detect suspicious activity, and OSSEC for intrusion detection by analyzing log data for unusual behavior. Active response tools like DenyHosts automatically block IPs involved in brute force attacks, and they utilize gateway servers for secure access. Although they currently do not use OSSEC's blocking capabilities, they plan to enable them as they better understand attack patterns. This proactive approach ensures their services remain operational and hints at future enhancements to their security infrastructure.

PagerDuty has announced its integration with Temboo, a programming platform that simplifies access to over 100 APIs, enabling developers to easily connect their projects to a multitude of applications. This integration caters to the creative needs of PagerDuty's customer base, who have already been using its alerting capabilities for various innovative applications beyond traditional system alerts. Temboo abstracts the complexities of API management, allowing developers to generate and incorporate concise code into their projects, thereby enhancing the interoperability of applications like Arduino with web services such as Fitbit, Facebook, Google, and PagerDuty. The collaboration between Temboo and PagerDuty, known as PagerDuty Choreos, facilitates the triggering of alerts through Arduino and other hardware, enabling real-time notifications based on user-defined conditions, such as changes in environmental data or online listings. Through this integration, users can effortlessly expand their projects' connectivity to the "Internet of Everything," using minimal coding effort.