Rosa Van Dam | Dynatrace news https://www.dynatrace.com/news/blog/author/rosa-van-dam/ The tech industry is moving fast and our customers are as well. Stay up-to-date with the latest trends, best practices, thought leadership, and our solution's biweekly feature releases. Thu, 18 Jun 2026 12:37:01 +0000 en hourly 1 Pipeline Groups in Dynatrace OpenPipeline: Enterprise-grade governance explained https://www.dynatrace.com/news/blog/pipeline-groups-in-dynatrace-openpipeline-enterprise-grade-governance-explained/ https://www.dynatrace.com/news/blog/pipeline-groups-in-dynatrace-openpipeline-enterprise-grade-governance-explained/#respond Wed, 08 Apr 2026 23:11:32 +0000 https://www.dynatrace.com/news/?p=73675 OpenPipeline logo

As organizations scale their observability practice, a familiar tension emerges: platform engineering teams need to enforce consistent configuration for pipeline ingestion, such as security context, cost allocation, and compliance-driven routing, while application teams need the freedom to tailor data processing for their specific workloads.

The post Pipeline Groups in Dynatrace OpenPipeline: Enterprise-grade governance explained appeared first on Dynatrace news.

]]>
OpenPipeline logo

In practice, most organizations attempt to solve this with one of two compromises: lock everything down centrally and become a bottleneck for every pipeline change, or copy rules across pipelines and hope nothing drifts. Neither approach scales. And as data requirements shift faster than ever to address new services, new regulatory mandates, and new object types to observe, the cost of such compromise keeps growing.

Pipeline Groups change that dynamic. Generally available now in Dynatrace SaaS version 1.332, Pipeline Groups let platform engineering teams, the teams with admin permissions over the observability platform’s configuration, mandate and standardize ingest behavior across many pipelines, while safely delegating day-to-day configuration of individual pipelines to the teams best suited to own them.

The problem: Pipeline governance at scale

In large enterprises, dozens of teams may each operate their own custom pipelines. Common requirements, security context enrichment, cost allocation tagging, and storage bucket assignment must be applied consistently across the board. However, without a structured mechanism to enforce such standards, platform teams face a choice that gets harder with every new team, every new data source, and every new regulation:

  • Lock everything down and become the gatekeeper for every pipeline change. Every adjustment, no matter how small, becomes a ticket, a review, a delay. Innovation stalls. Teams wait days for changes that should take minutes.
  • Copy rules everywhere and accept the risk of configuration drift. What starts as a manageable set of shared rules gradually fragments—one team forgets to apply the latest cost allocation tag, another skips the security enrichment step, a third routes data to the wrong bucket. The inconsistencies compound silently until they surface as compliance gaps or billing surprises.

Customers consistently tell us that this approach doesn’t scale. What they need is a way to separate what must always happen from what teams should be free to decide, and to encode that separation directly into the platform, not just into process documents that team members forget to follow.

What are Pipeline Groups?

A Pipeline Group is a first-class configuration object that separates a global pipeline list into distinct sets; the pipelines in these sets are then members of the group. A Pipeline Group orchestrates a special type of reusable pipeline to define what happens before or after the stages of the member pipelines.

Pipeline Groups allow you to:

  • Organize pipelines into groups with clearly defined membership.
  • Define execution order so processing happens in a predictable, layered sequence.
  • Control stage execution for the member pipelines so that teams can turn on or turn off specific pipeline stages.
  • Enforce mandatory global processing that no team can bypass or override.
  • Allow team-level customization within boundaries defined by the platform team.

Pipeline Groups determine how data flows through your pipelines. This ensures that governance isn’t an afterthought bolted onto a pipeline configuration, but rather it’s built into the execution model itself.

Figure 1: Pipeline Groups determine how data flows through pipelines
Figure 1: Pipeline Groups determine how data flows through pipelines

How Pipeline Group ownership works

The design behind Pipeline Groups draws a deliberate line between group-level configuration and member-pipeline configuration. How organizations map this division to team ownership is up to them. Pipeline Groups provide the mechanism, not a prescriptive policy. The pattern we see most often is straightforward: platform or SRE teams own the pipeline groups, and application teams own their member pipelines within those groups.

To make this more concrete, consider a platform team that’s responsible for observability across multiple business units. They create a Pipeline Group that adds a business segment field to every record for organizational attribution, applies cost allocation tags for accurate chargeback, sets security context so sensitive data is handled consistently, and assigns data to the correct storage bucket based on retention and compliance needs. These are the rules that must always apply, and because they operate at the group level, no member pipeline can bypass or override them.

Member pipeline ownership can be more granular than a simple admin-vs-team split. While a group is always admin-owned, the individual pipelines that make up the Pipeline Group can each have different owners. For example, a pipeline that enriches every record with organizational metadata or classifies data sensitivity might be globally relevant and owned by the platform team, or by a specialist team like the security team. A pipeline that handles domain-specific compliance logic, such as PCI field masking for a financial services division, might be owned by that compliance team because they have the expertise that the platform team lacks. This arrangement reflects how responsibility within that organization is distributed.

Within that group, application teams each get their own member pipeline. One team configures parsing for a specific log format. Another sets up filtering to reduce noise. A third extracts metrics tailored to their services. Each team works independently within its own pipeline without touching the platform-level rules above and without needing to coordinate with other teams or the platform team for routine changes.

The value of this separation becomes clear when things change, as they do frequently in large enterprises. Say that one of those business units onboards a new microservice that generates a completely new log format. Under a centralized-only model, the team would file a request, wait for the platform team to update the pipeline, validate, and iterate. With Pipeline Groups, the team simply adds their parsing and filtering rules to their own member pipeline. The mandatory enrichment, cost tagging, and routing are already guaranteed by the group. The new service is observable in hours, not weeks, and the platform team doesn’t need to be involved at all.

Or picture the reverse direction: a new regulatory requirement lands, say, a mandate that all log data from EU-based services must be assigned to region-specific storage. The platform team updates the group configuration once. Every member pipeline inherits the change immediately.

Why the flexibility of Pipeline Groups matters

The pace at which enterprise data requirements evolve has fundamentally changed. New services are spun up in days, not months. Regulatory landscapes shift across jurisdictions. The types of software entities that organizations need to observe, from traditional infrastructure to AI model outputs, edge devices, and third-party SaaS telemetry, keep expanding. In this environment, a rigid, centralized-only pipeline configuration becomes a constraint rather than a benefit.

Pipeline Groups are built for this reality. They give enterprises a mechanism that:

  1. Creates room for innovation. Application teams can iterate on their pipeline configurations independently, experimenting with new parsing rules, extracting new metrics, and adapting to new data shapes without waiting for central approval on every change.
  2. Eliminates bottlenecks. Platform teams define the rules once and let the system enforce them. Teams are freed from serving as gatekeepers for routine changes and can focus on architecture, standards, and strategy.
  3. Ensures that ever-changing guardrails are applied. As compliance requirements, security policies, or cost structures evolve, platform teams can update them all in one place. The changes propagate automatically to every pipeline in the Pipeline Group.

Pipeline Groups give platform teams the governance controls and flexibility they need

Pipeline Groups give enterprise platform teams the governance controls they’ve been asking for, mandatory processing, centralized ownership of sensitive stages, and structured delegation, all without taking away the flexibility that makes Dynatrace OpenPipeline® valuable to individual teams in the first place.

Ready to get started with OpenPipeline and Pipeline Groups?

If your organization manages observability across multiple teams and struggles with consistency, Pipeline Groups are now generally available.

Learn how to define global guardrails once and empower your application teams to build their own pipelines confidently within standardized boundaries.

The post Pipeline Groups in Dynatrace OpenPipeline: Enterprise-grade governance explained appeared first on Dynatrace news.

]]>
https://www.dynatrace.com/news/blog/pipeline-groups-in-dynatrace-openpipeline-enterprise-grade-governance-explained/feed/ 0
Dynatrace AI agents begin working for you on day one, and are built to grow with you https://www.dynatrace.com/news/blog/dynatrace-ai-agents-begin-working-for-you-on-day-one-and-are-built-to-grow-with-you/ https://www.dynatrace.com/news/blog/dynatrace-ai-agents-begin-working-for-you-on-day-one-and-are-built-to-grow-with-you/#respond Fri, 03 Apr 2026 15:44:42 +0000 https://www.dynatrace.com/news/?p=73625 Agents graphic

AI agents are everywhere in tech conversations right now, but what agents can you actually use today to make your job easier? In Dynatrace, ready-made agents help developers, SREs, and IT operations teams investigate issues, understand system behavior, and reduce manual work using the data they trust every day. Dynatrace ready-made agents are not concepts or previews; they're available now, integrated into existing Dynatrace workflows, and designed to solve real operational problems. For teams ready to go further, Dynatrace agents lay the groundwork for autonomous operations.

This blog shows what Dynatrace ready-made agents are, how to get value from them quickly, and how to decide which agents are relevant for you, using concrete examples rather than promises.

The post Dynatrace AI agents begin working for you on day one, and are built to grow with you appeared first on Dynatrace news.

]]>
Agents graphic

From generic AI to task‑focused operational agents

Dynatrace ready‑made agents are purpose‑built capabilities that apply Dynatrace intelligence to specific, recurring operational tasks. Each agent focuses on a clearly defined problem, such as explaining why a service is slow, summarizing unusual behavior in an environment, or helping you understand what changed and why it matters. These agents are designed to take a question or a signal based on the exact data that is in your environment and organization and turn it into a useful answer you can act on.

Because Dynatrace agents are ready‑made, there is no need to define prompts, train models, or design behavior from scratch. Each agent already knows:

  • What type of input to expect,
  • Which Dynatrace signals and context it should use,
  • And what output types are most useful for each addressed problem type.

All available ready-made Dynatrace agents can be found in Dynatrace Hub.

Trigger agent actions with Dynatrace Workflows and the Dynatrace MCP Server

Ready‑made agents can be triggered automatically as part of Dynatrace Workflows or available wherever you already work via the Dynatrace MCP Server.

Using agents in Dynatrace Workflows

Dynatrace Workflows lets you run agents in response to events or on a schedule. Instead of manually asking questions about potential problems and remediation steps, the workflow autonomously responds to changes in your environment.

For example, the Kubernetes Troubleshooting Agent runs nine parallel queries for data enrichment, and Dynatrace Intelligence turns all the information into a structured diagnosis. Customize the agents to your needs, including instructions for human approval steps and automated remediation.

Dynatrace Kubernetes Troubleshooting Agent in action.
Figure 1. Dynatrace Kubernetes Troubleshooting Agent in action.

The fastest way to get started is with Dynatrace ready-made agentic workflow templates, currently available in a preview release. Instead of building from scratch, you get proven automations that summarize issues, suggest remediation, and deliver insights directly to the tools your teams already use.

Figure 2. Agentic workflow templates available in preview
Figure 2. Agentic workflow templates available in preview

Power users can go further by building their own agentic workflows that combine Dynatrace Intelligence actions with any trigger, data source, or integration in Workflows. Use cases range from auto-scaling Kubernetes clusters based on Dynatrace Intelligence forecasts to generating query-cost-optimization recommendations for stakeholders, to virtually any other automation your environment requires.

Using agents through the Dynatrace MCP Server

The Dynatrace MCP Server makes the agents available outside the Dynatrace web UI, without requiring you to deploy or operate any additional infrastructure. You can connect Dynatrace to any MCP‑compatible client in minutes, with no server to install, host, or maintain.

Through the tools exposed by the MCP Server, you can use natural language to query data in Grail®, check system health, and get problem analyses and remediation recommendations. This brings Dynatrace directly into the tools you already use, such as your IDE, Claude Code and Cowork, Microsoft Copilot, Slack, or automation platforms like n8n. The Dynatrace MCP Server also powers integrations with systems like Azure SRE, AWS DevOps, GitHub Copilot, Atlassian Rovo Ops, Amazon Q, and others.

Dynatrace MCP server in Visual Studio Code with GitHub Copilot
Figure 3. Dynatrace MCP server in Visual Studio Code with GitHub Copilot

This means agents are no longer tied to a single interface. You can ask Dynatrace questions and get grounded, production‑ready answers wherever you work, using the same agents and intelligence that power Assist and workflows.

Dynatrace Assist: a simple way to test ready-made agents

The quickest way to use a ready‑made agent and see how it works before you start creating a workflow is with . Dynatrace Assist lets you ask questions about your environment using natural language, without switching tools or setting anything up.

A simple way to start is with a real problem you already have. For example, when a service becomes slow, open Assist and ask a question such as “Summarize the open problems and highlight those that need immediate attention.” Assist interprets the question, evaluates the environment you’re working in, and pulls together relevant data and context using Dynatrace Intelligence. Instead of manually navigating metrics, traces, logs, and dependencies, you get an explanation grounded in what is actually happening in your system.

Continuing your conversation with Assist, you can refine the question or follow suggested drill‑downs. Assist supports this as a single flow, helping you move from an initial question to deeper analysis and, where applicable, to next steps. You’re not configuring an agent or defining behavior. You’re simply asking a question and letting Dynatrace coordinate the right intelligence and ready‑made agents behind the scenes.

Dynatrace Assist
Figure 5. Dynatrace Assist

This makes Assist your lowest‑friction entry point for using Dynatrace agents. You get a concrete result quickly, using the same data and context you already rely on in your daily work.

What’s next?

If you haven’t already, open Dynatrace Playground, or your Dynatrace tenant, and ask Dynatrace Assist a question to see the ready-made agents in action.

The post Dynatrace AI agents begin working for you on day one, and are built to grow with you appeared first on Dynatrace news.

]]>
https://www.dynatrace.com/news/blog/dynatrace-ai-agents-begin-working-for-you-on-day-one-and-are-built-to-grow-with-you/feed/ 0
How lookup tables turn observability data into business insight https://www.dynatrace.com/news/blog/how-lookup-tables-turn-observability-data-into-business-insight/ https://www.dynatrace.com/news/blog/how-lookup-tables-turn-observability-data-into-business-insight/#respond Wed, 25 Mar 2026 23:02:27 +0000 https://www.dynatrace.com/news/?p=73533 Blog thumbnail

Lookup tables are a simple feature with serious leverage. They give your team a lightweight, maintainable way to layer business context onto your observability data at query time so your raw telemetry stays clean and enrichment remains flexible.

The post How lookup tables turn observability data into business insight appeared first on Dynatrace news.

]]>
Blog thumbnail

Observability data can tell you a lot, but often not in a language that your business understands. Traces fire, business events flow, and dashboards light up, yet P1 incidents still break out. The first question from the war room is typically, “Who’s impacted?” Too often, the honest answer is, “Let me check the database and get back to you.” This gap between raw telemetry and human-readable business context is exactly what lookup tables in Dynatrace are designed to close.

In our introductory blog post on Dynatrace lookup tables, we explained the fundamentals: what lookup tables are, how to ingest them, and initial use cases spanning security to business context enrichment.

In this blog, we’ll go deeper, with real-world examples of lookup tables, practical patterns, and how teams are already putting them to work.

The problem: Dashboards display cryptic identifiers, not insights

Daniel Adams, Observability Engineer at FreedomPay, put it plainly in a recent Dynatrace Tips & Tricks session:

“A lot of our apps are not coded to show customer names or plain text human-readable stuff. It’s mostly IDs being passed back and forth.”

The result is that dashboards are filled with cryptic identifiers that operations teams and business stakeholders can’t mentally decode. And splitting data by customer, country, or store requires trips back to the SQL database for further contextual configuration.

Many organizations that run distributed systems at scale face the same challenge: telemetry is rich, but the business context is missing.

The solution: Use lookup tables to make your reference data available in Grail

Lookup tables let you upload reference data (CSV, JSON, or XML files) directly into Dynatrace Grail®, where it lives alongside your logs, traces, metrics, and business events. Once uploaded, two DQL commands unlock the enrichment from your lookup tables:

  • Load fetches the contents of a lookup table, working just like querying any other data type in Grail.
  • lookup joins records from your observability data with matching rows in the lookup table, using a defined key field.

In FreedomPay’s case, the lookup table holds customer names, customer codes, store IDs, and countries. The join key is the store ID, the same cryptic identifier that was previously displayed on their dashboards. One DQL lookup command later, those IDs become readable names, and the data can be split by country, grouped by customer, and surfaced in a dashboard that anyone on the team can use.

Using lookup tables in DQL to enrich business events with customer and response context at query time.
Figure 1: Using lookup tables in DQL to enrich business events with customer and response context at query time.

Lookup tables reduce user cognitive load

The impact of lookup tables is not just cosmetic. Daniel described the before-and-after in P1 situations:

“Previously, everyone was asking: who’s impacted, which customer? Now it’s just very apparent and real-time. People can share screenshots directly from Dynatrace.”

The shift from “let me go check” to “it’s right here” compresses triage time and reduces the cognitive load on everyone in the room.

Beyond incident response, lookup tables also power dashboard variables. FreedomPay uses dashboard variables to populate dropdown filters (for example, clients and countries) directly from the lookup table itself, keeping the UI dynamic without manual maintenance. The load command behaves like any other fetch command but operates on reference data rather than telemetry, making it a natural fit for driving interactive dashboards.

And the enrichment isn’t limited to business events. The load and lookup commands work across all data types in Grail.

A dashboard powered by lookup tables, grouping throughput, errors, and success rates by customer and country.
Figure 2: A dashboard powered by lookup tables, grouping throughput, errors, and success rates by customer and country.

In practice: cost allocation with lookup tables

Cost allocation is a good example of how lookup tables bridge the gap between operational data and business reality. Many organizations already maintain mappings that associate users, teams, or services with products or cost centers, but that context rarely lives inside observability data. Lookup tables allow you to introduce such context.

Consider DPS (Dynatrace Platform Subscription) consumption driven by user activity such as running queries, triggering automation, or executing functions. On its own, such usage is hard to attribute to a specific part of the organization. By associating users with products or cost centers in a lookup table, you can attribute usage to organizational ownership rather than just technical activity, align cost views with existing financial or product structures, and keep that attribution logic centralized and reusable rather than embedding it in individual analyses.

What makes this pattern scale is that business mappings change over time, while usage data continues to flow. Lookup tables allow you to evolve the mapping without rewriting your analyses. The same mechanism used for cost allocation works equally well for mapping users to teams, services to portfolios, or environments to internal programs. Cost allocation simply highlights how powerful this becomes when operational data is interpreted through a business lens.

Importantly, this is just one way to approach cost allocation, not the only way. Some teams rely on host-based attribution, others on pipeline metadata or external financial systems. Lookup tables complement these models by making it easy to incorporate existing reference data wherever it adds clarity.

Keeping lookup data fresh

For lookup tables to deliver lasting value, their data must remain current. FreedomPay currently uses Postman to push updated CSVs via the upload API, but they’re building automation to pull this data from their SQL backend daily and sync changes using the overwrite: true parameter. The lookup table path stays the same; the data underneath gets refreshed. Downstream dashboards and queries are updated automatically.

More broadly, there are several approaches to keeping lookup data up to date:

  • Dynatrace Workflows automate extraction and upload from SQL databases or APIs on a schedule.
  • Periodic refresh updates your lookup data programmatically as part of CI/CD or data sync processes.
  • Manual refresh uses Postman, cURL, or other API-based uploads with the overwrite flag when data changes infrequently.

Dynatrace lookup tables are now generally available

With the release of Dynatrace SaaS version 1.334, lookup tables are generally available for all customers running Dynatrace SaaS with an active Dynatrace Platform Subscription (DPS). GA brings production-readiness, improved query performance for the lookup command, and full integration with Grail’s scalability and access controls.

To get started

  1. Identify a data enrichment use case: cost allocation, customer context, error code mapping, or security allow lists.
  2. Prepare your reference data as a CSV, JSON, or JSONL (JSON Lines) file.
  3. Upload the file to Grail using the Dynatrace API, Workflows, or a custom app.
  4. Use the load and lookup commands in your DQL queries, notebooks, and dashboards.

For detailed instructions, visit our lookup data documentation. And to see how FreedomPay built its implementation from end to end, watch the full demo on YouTube.

The post How lookup tables turn observability data into business insight appeared first on Dynatrace news.

]]>
https://www.dynatrace.com/news/blog/how-lookup-tables-turn-observability-data-into-business-insight/feed/ 0
Flexible vendor-agnostic log forwarding with OpenPipeline https://www.dynatrace.com/news/blog/flexible-vendor-agnostic-log-forwarding-with-openpipeline/ https://www.dynatrace.com/news/blog/flexible-vendor-agnostic-log-forwarding-with-openpipeline/#respond Fri, 16 Jan 2026 19:41:14 +0000 https://www.dynatrace.com/news/?p=72501 Flexible vendor-agnostic log forwarding

Log forwarding includes metrics, spans, and events Logs are a core pillar of observability, and in many organizations, logs serve at least a dual purpose. They drive day-to-day troubleshooting, root cause analysis, security investigations, and many other use cases. Logs also need to be available for compliance audits, Business Intelligence (BI) analysis, and traditional Security […]

The post Flexible vendor-agnostic log forwarding with OpenPipeline appeared first on Dynatrace news.

]]>
Flexible vendor-agnostic log forwarding

Log forwarding includes metrics, spans, and events

Logs are a core pillar of observability, and in many organizations, logs serve at least a dual purpose. They drive day-to-day troubleshooting, root cause analysis, security investigations, and many other use cases.

Logs also need to be available for compliance audits, Business Intelligence (BI) analysis, and traditional Security Information Event Management (SIEM) solutions. The challenge is doing this without relying on bolted-on forwarders or rigid, costly integrations.

With the introduction of the new Dynatrace OpenPipeline capability, we’re providing you with the freedom to precisely define your organization’s forwarding, paired with flexible and unified log collection and processing.

OpenPipeline capability
Figure 1. OpenPipeline provides rich configuration and customization options for each forwarding setup.

Update – June 2026

Data egress will be in General Availability starting June 17, 2026.

OpenPipeline now supports forwarding for all data types ingested into Dynatrace, including metrics, spans, and events, giving you a single, unified pipeline for your entire observability dataset. The same principles described below apply across the board: forward before or after processing, export in open formats, and route to the storage or third-party destination of your choice, regardless of signal type.

Read on for the full details of how OpenPipeline forwarding works.

Centralized log collection and processing

OneAgent, Cribl, OpenTelemetry, AWS Firehose, journalD, Logstash, and Fluent Bit … Have you heard of any of these tools? Maybe you’re using all of these at the same time.

With Dynatrace, you have the choice of using one or all of these tools simultaneously. Dynatrace OpenPipeline allows you to process and transform them in the same way, regardless of their source, and to move seamlessly from one shipping method to another. Just as our customer, United Wholesale Mortgages, successfully consolidated their tools while moving logs off Splunk.

Forwarding logs un/processed

Depending on your industry or geography, you might be required to retain logs in an unprocessed state on third-party-managed storage, just as you might have used tape backups in the old days. With Dynatrace OpenPipeline, you can configure a forward-before-process to retain log events in an unaltered state.

OpenPipeline flow diagram from ingest to forward
Figure 2. OpenPipeline flow diagram from ingest to forward

Alternatively, you can first send log events to your defined processing pipeline, extract or convert the logs into metrics, and even drop unnecessary details before determining what to forward-after-processing to your object storage.

The last step in the pipeline is to decide whether to route log events to a Dynatrace Grail® bucket for retention or drop them.

Overcome vendor lock-in with precise, open forwarding

While other log management solutions provide proprietary log archive formats, you can overcome these challenges with Dynatrace and log forwarding for data archiving.

The Dynatrace OpenPipeline log forwarding capability delivers log events in a standardized and compressed NDJSON (Newline Delimited JSON) (.JSON.GZ) archive format, for which you can define the details, such as segmentation and filename prefixes.

Residing on destinations like AWS S3 or Azure Blob storage, other 3rd party solutions such as Microsoft Sentinel, Snowflake, or Tibco Spotfire can easily leverage these archives for use cases not covered by your observability platform.

Cost-effective long-term retention for logs

Dynatrace Grail offers cost-effective log retention for up to 10 years, accessible at any time with the same speed as on day one of ingestion, supporting a daily log ingest volume of 1 PB per tenant.

Many of our customers already retain years’ worth of logs today, always accessible without the headaches of re-ingestion, re-indexing, or storage tiering and scaling concepts.

Log retention configuration for a new bucket, retaining logs for 10 years
Figure 3. Log retention configuration for a new bucket, retaining logs for 10 years

Still, there are use cases where aged logs become low-value, low-touch data.

You may want to keep certain log events available in Grail for the first 60 or 90 days for troubleshooting purposes, and then store a copy in an archive for years.

NDJSON-exported log archives are an ideal file format for further increasing cost-effectiveness and are ready for handover to other teams or parties for investigation, thanks to the standardized JSON.GZ format. These are especially valuable for use cases like:

  • Reviewing access logs during a post-mortem security incident
  • Providing transaction logs to fulfill a court order
  • File access audit-trial review

Tool consolidation with OpenPipeline and log forwarding

Log archiving presents an opportunity and an integration strategy for solutions that don’t yet integrate seamlessly with Dynatrace.

More importantly, OpenPipeline provides you with processing and transformation capabilities, volume control, and a reliable cadence for transmitting your log events.

You no longer have to rely on custom-defined scripts for the splitting and shipping of your logs. And there are no worries about truncating large log events; Dynatrace supports up to 10 MB.

Forget about all the retransmission headaches with custom log shippers when a connection breaks; all this is baked natively into Dynatrace components such as OneAgent, ActiveGate, and others.

Start leveraging OpenPipeline and log forwarding today and retire your third-party forwarding tool stack.

For complete details, go to Log Forwarding in Dynatrace Documentation.

State of Log Management 2026

Download the report to explore benchmark data on how AI workloads are exploding log volume and costs, and why unified observability is now essential for reliable, trustworthy AI.

The post Flexible vendor-agnostic log forwarding with OpenPipeline appeared first on Dynatrace news.

]]>
https://www.dynatrace.com/news/blog/flexible-vendor-agnostic-log-forwarding-with-openpipeline/feed/ 0
Write the future: Create your own agentic workflows https://www.dynatrace.com/news/blog/write-the-future-create-your-own-agentic-workflows/ https://www.dynatrace.com/news/blog/write-the-future-create-your-own-agentic-workflows/#respond Thu, 08 Jan 2026 08:00:10 +0000 https://www.dynatrace.com/news/?p=72347 Agentic workflows with Davis CoPilot

Imagine commissioning le Carré and Fleming to build your perfect undercover agent: quietly embedded in the system you’re watching. You hand in your mission brief, which includes the target, objective, and behaviors to track. Your agent observes without drawing attention, reporting insights back to you. On cue, the information flow you’ve carefully orchestrated turns signals […]

The post Write the future: Create your own agentic workflows appeared first on Dynatrace news.

]]>
Agentic workflows with Davis CoPilot

Imagine commissioning le Carré and Fleming to build your perfect undercover agent: quietly embedded in the system you’re watching. You hand in your mission brief, which includes the target, objective, and behaviors to track. Your agent observes without drawing attention, reporting insights back to you. On cue, the information flow you’ve carefully orchestrated turns signals into actionable intelligence that helps pre-empt risk.

Dynatrace doesn’t write spy fiction. However, even better, Dynatrace now lets you write your own smart agentic workflows that deliver intelligent reports and react to changes in your environment based on your objectives.

Adding generative AI to your workflow

Using the power of gen AI, Davis CoPilot® transforms your workflows into agentic instructions. Davis CoPilot lets you explore data using conversational language, translating complex data and queries into summaries, and provides intelligent recommendations across Dynatrace.

Integrated into Dynatrace Workflows, Davis CoPilot is your toolkit for building smart automations, bringing the power of generative AI into your mission-critical workflows.

Build conversational automation that adjusts to live data based on your instructions, sending summaries of your crash logs directly to Slack
Figure 1. Build conversational automation that adjusts to live data based on your instructions, sending summaries of your crash logs directly to Slack.

By embedding Davis CoPilot in your workflows, you can associate any automation with any number of conversational automations. Your workflows can even perform actions autonomously when combined with precise Davis® AI forecasting, for instance, scaling resources based on forecast demands.

In real time, these workflows monitor live data, summarize critical issues, and identify remediation paths or emerging threats. When scheduled, these smart workflows help you outsource routine tasks, such as alerting stakeholders of costly queries.

Let’s look at some examples of how these smart workflows can help you in your daily work.

Build agentic workflows that respond to critical events

Proactive guiding through complex problem remediation

Let’s assume you want to build an automation that cuts through alert noise and analyzes a problem as it occurs, guiding you through the remediation. When a new problem is detected, Davis CoPilot extracts the problem details, summarizes the situation, and provides tailored remediation guidance. By embedding it into a smart workflow, you can select your preferred automation to automatically syndicate this information, populate a ticket in ServiceNow or Jira, or post it to a dedicated Slack channel.

See how you can set up a workflow automation that automatically sends summaries and remediation guidance when a new problem is detected.

Monitor emerging threats to help you orchestrate a response

Next, you can build an agentic workflow that helps you monitor emerging threats and assess their risk to your environment as vulnerabilities are detected in your tenant. In plain language, you instruct your agent to extract IOCs, query security events in your environment, and correlate them with observability data in your environment. Information provided by the external threat feed is automatically matched against the live context in your tenant. The agent has now collected all the necessary information and provides a reliable risk assessment, along with a plan to orchestrate a response, directly in your Slack channel, ensuring around-the-clock visibility and a rapid response.

With a single workflow, you can monitor emerging security events as they occur, understand their impact, and determine the next steps.
Figure 2. With a single workflow, you can monitor emerging security events as they occur, understand their impact, and determine the next steps.
Example of a tailored and contextual analysis delivered to Slack as the issue arises
Figure 3. Example of a tailored and contextual analysis delivered to Slack as the issue arises

Write the future: Build an agentic workflow that autonomously auto-scales your resources

Dynatrace helps you build agents that reason autonomously. The key is to deliver data as precise as Dynatrace forecast capabilities. In this example, we linked the power of Davis AI to forecast demand, with generative AI and GitHub automations. Davis AI predicts the number of resources the hyperscaler infrastructure will need based on forecasted demand. When Davis AI notices a scaling need, Davis CoPilot interprets the data and autonomously edits the manifest using the GitHub automation. Giving you one end-to-end workflow that automatically scales resources up or down based on forecasted needs. To see this in action, watch how this workflow autonomously edits a manifest based on Davis AI suggestions to auto-scale a Kubernetes cluster.

Schedule agentic workflows to optimize routine tasks

Do you feel like sleeping in a little later? Maybe stretching your lunch break a little longer? Running that extra hill without sacrificing your productivity? Scheduling Davis CoPilot into your smart workflow is a great way to automate recurring tasks and save time.

Build an automation that predicts resource consumption

A recurring challenge for SREs is analyzing the full environment to predict future bottlenecks or over-resourcing and continuously translating the data to update stakeholders. Even with great observability in place, you need to ensure that you interpret the data and make timely decisions to inform future provisioning.

By combining Davis AI forecasting automation with Davis CoPilot, you can build an agent that answers key questions, such as which workloads are most resource-intensive, which resources show the most variance, and which require frequent scaling. This automation is capable of highly reliable forecasts, even when data points are limited. The automation interprets the data and emails actionable recommendations directly to you and anyone else who needs to stay informed.

To see this in action, watch the section of this video that explores predicting resource consumption.

Smart workflows that optimize query costs

Scheduling tasks can even help you keep costs lean and efficient. For admins or budget owners, staying within financial limits while maintaining performance is a constant challenge. In this example, we built a smart workflow that identifies the top 20 most expensive queries from the last 24 hours. Davis CoPilot analyzes each query and sends optimization recommendations directly to the query authors via email.

Smart workflow leveraging Davis CoPilot to recommend query optimizations tailored to your tenant
Figure 4. Smart workflow leveraging Davis CoPilot to recommend query optimizations tailored to your tenant
Example of an optimization suggestion delivered to the inbox of the query author
Figure 5. Example of an optimization suggestion delivered to the inbox of the query author

To implement this yourself, tailored to the most expensive queries executed on your tenant, go to our documentation

Conclusion: Adapt your workflows to any stage of your automation journey

These are just a few examples; the applications for it are endless. We’ve designed this workflow action to cater to your organization’s automation appetite. You may want to transform how you keep business stakeholders informed about what’s happening in your environment, leveraging Dynatrace’s highly accurate insights, which are translated into plain language and actionable next steps.

Alternatively, you may be ready to transition towards autonomous operations, where automation not only supports but also acts in a controlled and reliable manner. Davis CoPilot embedded into your workflows opens the door to your agentic journey.

Start your agentic journey and join the Davis CoPilot for Workflows Preview

Davis CoPilot for Workflows is available as a Preview. Sign up now and see how generative intelligence embedded into your workflows transforms your automation. Today, it helps you react faster, optimize more effectively, and collaborate seamlessly. Tomorrow, it will go even further: anticipating needs, orchestrating actions, and enabling truly autonomous reasoning.

Gain efficiency and have your agentic workflows do the work for you!

The post Write the future: Create your own agentic workflows appeared first on Dynatrace news.

]]>
https://www.dynatrace.com/news/blog/write-the-future-create-your-own-agentic-workflows/feed/ 0
Reliable enterprise automation at scale: Accelerate the innovation loop with Dynatrace Workflows https://www.dynatrace.com/news/blog/reliable-enterprise-automation-at-scale-accelerate-the-innovation-loop-with-dynatrace-workflows/ https://www.dynatrace.com/news/blog/reliable-enterprise-automation-at-scale-accelerate-the-innovation-loop-with-dynatrace-workflows/#respond Mon, 05 Jan 2026 15:00:57 +0000 https://www.dynatrace.com/news/?p=72335 logs and traces

Enterprise automation rarely fails because teams lack ideas. It fails because scaling automation safely is challenging, and conventional workflows often remain static after they ship, while systems and conditions continue to evolve. The new update to Dynatrace Workflows helps teams accelerate their innovation loop and run automation like production software. Five improvements make it easier […]

The post Reliable enterprise automation at scale: Accelerate the innovation loop with Dynatrace Workflows appeared first on Dynatrace news.

]]>
logs and traces

Enterprise automation rarely fails because teams lack ideas. It fails because scaling automation safely is challenging, and conventional workflows often remain static after they ship, while systems and conditions continue to evolve.

The new update to Dynatrace Workflows helps teams accelerate their innovation loop and run automation like production software. Five improvements make it easier to iterate and operate at scale: workflow drafts, sub-workflows, approval requests, persistent execution data, and real-time notifications. Together, they support safer change, reusable standards, built-in governance, and data-driven refinement.

The innovation loop in enterprise automation

The innovation loop is a repeatable cycle for quickly and safely improving enterprise automation that treats workflows as living systems that evolve with your environment, self-improving as systems, teams, and requirements change, rather than remaining static:

  • Teams start by designing or updating a workflow and validating it safely before it goes live.
  • Next, they standardize the parts that work into reusable building blocks so future workflows are faster to create and more consistent.
  • Then they add governance where it matters, such as approval checkpoints for high-impact actions, so speed does not bypass policy.
  • After execution, they observe what actually happened using execution records and signals, including errors, latency, and outcomes, to understand reliability and impact.
  • Finally, they refine the workflow based on those findings by tuning logic, tightening controls, improving reuse, and adjusting notifications.

The result is a compounding impact: faster delivery over time, fewer incidents at scale, automation that integrates changing circumstances, and greater organizational trust, as transparency, auditability, and tight feedback loops back improvements.

How Dynatrace Workflows accelerates the innovation loop

Dynatrace Workflows helps you accelerate your innovation loop with powerful new features designed for adaptability, collaboration, transparency, and control. Each feature is designed to empower teams to safely iterate on automation in dynamic enterprise environments.

Faster iteration with safer testing and experimentation with workflow drafts

The new workflow drafts feature allows teams to create, edit, and refine workflows in a draft state, allowing them to validate logic and configuration without triggering live automation. Workflows that remain in draft mode don’t consume workflow hours.

Workflow drafts support the first step of the innovation loop: iterate safely. Teams can make changes, review them with peers, and confirm the workflow is ready before anything runs in production.

Key benefits

  • Reduce risk by testing configuration changes without production impact.
  • Allow faster iteration and cleaner change management.
  • Improve collaboration during the design and review stages.
  • Control costs with included workflow-hour consumption for draft-only workflows.
Create drafts to refine and safely test your workflows.
Figure 1. Create drafts to refine and safely test your workflows.

Standardize reusable blocks for reliability and speed with sub-workflows

Sub-workflows allow a workflow to be executed as a task inside another workflow, so teams can package repeated logic into reusable sub-workflows and compose larger automations from consistent building blocks.

This supports the “standardize” step of the innovation loop. When teams standardize and reuse proven components, automation becomes more consistent, easier to maintain, and quicker to expand across teams and environments.

Key benefits

  • Enhance reliability and consistency by reusing proven workflow components.
  • Speed up delivery by composing workflows from standard blocks.
  • Simplify maintenance by updating shared logic in a single location.
  • Keep complex automations understandable by breaking them down into smaller, manageable units.

Example use cases

  • Notification workflows: Automatically send notifications based on incident severity or timing.
  • Data processing workflows: Run filter/transform/store stages as distinct sub-workflows, processing large datasets in stages.
  • Incident response workflows: Automate repetitive tasks as reusable steps, such as creating tickets, logging incidents, notifying stakeholders, and triggering remediation steps.
Include a validated component in your workflows.
Figure 2. Include a validated component in your workflows.

Supervised human-in-the-loop control where it matters with approval requests

With Dynatrace Workflows, you can now insert an approval request into a workflow and pause execution until a human reviews and approves the next step.

This feature supports the “governance” step in the innovation loop. Approvals turn your workflows into supervised autonomous operations. This allows the automation of more processes while ensuring strict compliance with enterprise requirements for governance, risk management, and accountability, particularly for high-impact actions.

Key benefits

  • Add explicit human control at high-risk decision points.
  • Reduce errors in sensitive operations (changes, remediations, escalations).
  • Ensure compliance with organizational standards.
  • Increase trust in automation across security, ops, and platform teams.
  • Minimize operational risks.
Add human control to any of your workflow steps.
Figure 3. Add human control to any of your workflow steps.

End-to-end visibility with an audit trail and persistent execution data

Dynatrace Workflows now persists workflow execution data in DQL. All workflow activities are recorded as system events in the dt.system.events table, creating a queryable execution record for tasks, states, and outcomes as a comprehensive audit trail.

Persisting execution data supports the “observe” step of the innovation loop. When workflow execution is captured as data, teams can troubleshoot failures, provide transparency, prove what happened, and improve automation based on evidence rather than anecdotes.

Key benefits

  • Provide an audit trail for enterprise traceability and review.
  • Monitor workflow health and reliability through execution outcomes.
  • Speed up troubleshooting by pinpointing where failures occur.
  • Optimize automation using DQL-driven actionable insights (error rates, trends, hotspots, and more)

Example: Workflow health overview

This example demonstrates how to use execution data to support users in identifying those workflows that need improvement.

The following DQL query…

fetch dt.system.events
| filter event.kind == "WORKFLOW_EVENT" and event.provider == "AUTOMATION_ENGINE" and event.type =="TASK_EXECUTION"
| filter dt.automation_engine.state == "ERROR"
| summarize count = count() , by:{dt.automation_engine.workflow.title}

…counts task execution errors per workflow. Using a honeycomb visualization, it displays error distribution by workflow and provides visibility into those workflows that fail too often.

Audit and observe your workflows with persistent execution data.
Figure 4. Audit and observe your workflows with persistent execution data.

Instant alerts for failures and workflow changes with real-time notifications

Easily set up and customize real-time notifications by email for all workflow errors or changes made by others, ensuring you’re always informed.

These real-time notifications support the “respond and refine” step of the innovation loop. Proactive alerting allows you to manage workflows effectively, minimize disruptions, and maintain seamless operations.

Key benefits

  • Get immediate visibility into failures to address potential issues before they escalate.
  • Detect workflow changes early to reduce drift and surprises.
  • Improve operational coordination across teams that share workflows
  • Ensure uninterrupted operations with timely, actionable alerts.
See notifications in real time and get immediate visibility into your workflow changes.
Figure 5. See notifications in real time and gain immediate visibility into your workflow changes.

Empower your team: Build smarter, safer, and scalable workflows today

Scaling automation today is hard, changes are risky to test, automation becomes outdated and buggy as soon as one part of the organization makes changes, and when something inevitably breaks, you’re left hunting for answers across scattered logs and screenshots. But it doesn’t need to be like this.

Are you ready to make things easier, run your workflows like production software, and accelerate your innovation loop? Here’s how you get started:

Get started building smarter, safer, dynamic, and scalable workflows today!

The post Reliable enterprise automation at scale: Accelerate the innovation loop with Dynatrace Workflows appeared first on Dynatrace news.

]]>
https://www.dynatrace.com/news/blog/reliable-enterprise-automation-at-scale-accelerate-the-innovation-loop-with-dynatrace-workflows/feed/ 0
Build Dynatrace® Apps faster, simpler, and smarter with the new App Toolkit https://www.dynatrace.com/news/blog/build-dynatrace-apps-faster-simpler-and-smarter-with-the-new-app-toolkit/ https://www.dynatrace.com/news/blog/build-dynatrace-apps-faster-simpler-and-smarter-with-the-new-app-toolkit/#respond Tue, 21 Oct 2025 17:19:37 +0000 https://www.dynatrace.com/news/?p=71485 Fetch Electricity Data

Most people consume software the way they enjoy a meal at a restaurant: ready-made from a menu, crafted by experts, and served with convenience to satisfy a need. At Dynatrace, we take pride in delivering software that’s as refined and reliable as a Michelin-star dish.

The post Build Dynatrace® Apps faster, simpler, and smarter with the new App Toolkit appeared first on Dynatrace news.

]]>
Fetch Electricity Data


But we’d be remiss not to invite the creative and demanding cooks of the developer world into the kitchen itself. That’s why we’ve opened up access to the world-class environment we’ve built, complete with carefully sourced ingredients and precision tooling.

In that spirit, we follow a simple mantra: build for builders. We use what we ship, and ship what we build. That’s what drove the recent launch of the Dynatrace MCP Server, designed to equip developers with observability context and security. The result? Faster fixes, safer code, and superior performance.

But our commitment to developers goes even further. To ensure that our app teams can ship confidently and quickly, we’re focused on delivering exceptional developer experience: striving for faster, more reliable, and user-friendly tooling.

And because we share our tooling with customers and partners, every improvement we make benefits the broader community. That’s why we launched App Toolkit 1.0: a developer-first toolkit that reflects our commitment to support builders. It equips teams with the means to craft custom apps and solutions on the Dynatrace platform with greater speed, flexibility, and clarity.

From SREs building apps to automate quality gates and monitor MS Teams, to dev teams diving deep into CI/CD metrics down to commit ratios; from CMDB apps that transform Smartscape® data into dynamic configuration maps, to support staff tracking container metrics, our customers and partners have built one of the broadest and most versatile collections of custom apps on Dynatrace.

Accelerate developer productivity

The App Toolkit is the developer toolchain that’s designed to turn ideas into custom apps that extend the Dynatrace platform and deliver tailored solutions for your organization. From a single command line, developers can create, develop, and deploy apps, create new app functions, or update packages.

The focus of this release is on improving developer productivity, articulated through smarter builds, automation-ready design, and a streamlined UI. This makes it easier than ever to create, develop, and maintain Dynatrace Apps.

Smarter builds for enterprises

The App Toolkit 1.0 allows for smarter builds that dramatically cut development and deployment time while improving support for building large-scale apps. Key performance enhancements include the change detection system and enhanced type checking.

The new change detection system improves performance by only building and checking components with actual changes instead of scanning the entire codebase. This means that the dev server triggers re-builds whenever changes are made during development, ensuring that the latest updates are immediately reflected in the browser. This significantly optimizes rebuild times: going from an average of 2.7 seconds in the previous version to just 0.05 seconds, a 54-fold increase in speed.

Enhanced type checking operates seamlessly in the background when initializing a new workspace. Developers no longer need to wait for type checks to complete before proceeding. This allows teams to build custom apps for large codebases with hundreds of files, where comprehensive type checking is a bottleneck. The newly introduced incremental type checking ensures that recent changes and relevant code are prioritized, facilitating robust typing practices even in larger projects.

The combination of both features significantly accelerates feedback loops. Since only modified files and their dependencies undergo re-checking, with background type checking turned on, type errors are identified and resolved in a fraction of the time.

Automation-ready commands for CI/CD Efficiency

The App Toolkit 1.0 introduces an enhanced CLI designed for automation. Every command line can automatically run in scripts or pipelines, making it ideal for CI/CD. Commands that accept additional parameters can now be executed with arguments and options directly in the command line, instead of being prompted every time the CLI needs input. Builds and deployment processes stay automated, consistent, and repeatable, ultimately accelerating delivery.

A brand-new interface for faster, error-free development

The enhanced command line interface features a redesigned command structure. All available commands are now easier to discover and use consistently and intuitively. Each command now supports a comprehensive set of parameters as options, allowing developers to access the full capabilities of the in-pipeline automations.
The CLI has improved interactions for workflow continuity. For instance, when creating a function, the output now displays all generated files within a file tree, offering clear feedback on the results of each action.

The smarter workspace setup now features a distinct separation between the user interface components and Dynatrace app functions. This offers transparency into the workspace structure and minimizes errors, particularly relevant to enterprises dealing with increased application complexity and size. Furthermore, we’ve introduced suffixes for Dynatrace Apps functions and other conventions, significantly reducing configuration complexity.

Build Dynatrace Apps faster, simpler, and smarter with App Toolkit

Ready to get started?

Getting started with the App Toolkit is as straightforward as it is powerful. To kick off your build, ensure your environment meets the minimum requirements, then run the following command in your code editor terminal:

npx dt-app@latest create

Next, we recommend installing the Dynatrace Apps extension for VS Code or Cursor. For documentation, examples, and best practices, head over to Dynatrace Developer and explore everything you need to build with confidence.

The post Build Dynatrace® Apps faster, simpler, and smarter with the new App Toolkit appeared first on Dynatrace news.

]]>
https://www.dynatrace.com/news/blog/build-dynatrace-apps-faster-simpler-and-smarter-with-the-new-app-toolkit/feed/ 0
Let the problem guide you: Smart remediation with Dynatrace https://www.dynatrace.com/news/blog/let-the-problem-guide-you-smart-remediation-with-dynatrace/ https://www.dynatrace.com/news/blog/let-the-problem-guide-you-smart-remediation-with-dynatrace/#respond Wed, 13 Aug 2025 15:38:50 +0000 https://www.dynatrace.com/news/?p=70376 Problem alert dashboard

Imagine a friend pings you, asking to meet them at a new restaurant whose location you don’t know. Would you simply step outside and start walking, hoping that you’ll somehow find the restaurant by luck? More likely, you’ll open a navigation app on your mobile device, search for the address, and set your route. A critical incident in your IT stack is no different. You shouldn’t have to guess your way through the dark alleys of logs, traces, and warnings, asking passersby for assistance, just to be bounced from one guess to the next.
This is where Dynatrace comes in: curating what’s most relevant, guiding engineers to the next best steps, and confidently guiding them from alert to resolution.

The post Let the problem guide you: Smart remediation with Dynatrace appeared first on Dynatrace news.

]]>
Problem alert dashboard

At Dynatrace, we’ve long led the way in root cause analysis, automatically detecting when something’s wrong and identifying why. These AI-powered insights form the intelligent backbone of how Dynatrace guides engineers through complex, entangled problems, turning a confusing cityscape of data into a focused remediation journey.

In this blog post, we follow Omar, a fictitious SRE working on Astroshop, the Dynatrace OpenTelemetry demo application. Omar works with Sophie, a developer, to resolve a critical failure.

Dynatrace guides them, and any team, through every step of the incident lifecycle, with speed, precision, and confidence. Here’s how:

  • Problem diagnosisDynatrace automatically packages the failures into a single correlated problem.
  • AlertingOmar receives a rich, actionable notification, right where he works, with root cause analysis (RCA), ownership, and deep links already in place.
  • TriageThe problem details page serves as a “triage and remediation command center,” showing Omar what’s impacted, who’s affected, and which issues to prioritize for remediation.
  • HandoffFrom within the problem context, a guided Jira ticket populated with RCA insights, logs, and deep links can be created with one click.
  • Guided investigationsProblems view lists all incidents related to the context of the problem.
  • Remediation – Using Live Debugger and real-time metrics, Sophie fixes the issue and sees immediate confirmation that the fix worked.
  • Reinforcement and learning for the future – The fix is automatically documented in a troubleshooting guide, turning today’s incident into tomorrow’s intelligence.

Problem diagnosis: multiple incidents and a stream of signals tied into one cohesive problem

The Astroshop online store recently began experiencing errors when customers attempted to pay using American Express credit cards. Error messages prevent users from completing their purchases. Dynatrace seasonal baselining detected this service health issue, reduced alert noise by clustering all related events into a single problem, and tied all the relevant telemetry (logs, metrics, and traces) to the affected users, infrastructure, and SLOs.

By determining the ownership of the service, based on the Kubernetes label, the problem is automatically routed to the right team: Omar’s SRE team.

Figure 1. The Problems app clusters related events into one cohesive problem.
Figure 1. The Problems app clusters related events into one cohesive problem.

Contextual alerting

Meanwhile, Omar, the on-call SRE, receives the notification directly in the context where Omar and his team work, Slack. The notification reads, Failure rate increase in payment service.

Figure 2. Receive alert notifications in the tools where you work.
Figure 2. Receive alert notifications in the tools where you work.

Notifications like these can, of course, also show up in JIRA, ServiceNow, or other tools, depending on where your team works and wants to be notified. The notification provides a link to the full context, where Omar can begin remediation straight away. The notification identifies the root cause and service owners. It also provides directly accessible opinionated drilldowns, removing the need to open different tools. Omar starts his work by investigating the context and responding to the incident.

Triage: understand what, who, and how bad

Selecting the View problem button in the Slack notification brings Omar to the related Problem page, his triage and remediation command center.

At a glance, Omar can answer the following questions: How bad is this problem? Who and what is affected? How long has the problem existed? And, what is my best course of action?

Figure 3. Problem details: triage key impact and root cause at a glance.
Figure 3. Problem details: triage key impact and root cause at a glance.

First question: How bad is it, and who’s affected?

From the Problem Incident header, Omar immediately understands that the issue is blocking revenue: 600 users failed to check out their purchase. Furthermore, he sees that there is one frontend and six services are affected, and the error puts five SLOs at risk. Clicking one of the tiles allows the engineer to drill down into further details, offering clear “what to look at next” calls to action.

While unfamiliar with the error, Omar understands that this issue is severe and must be prioritized. Before taking action, he wants to understand the current situation compared to the normal state, which leads to his next question.

Second question: How long has this been going on, and how many checkouts are failing?

The event chart makes it clear: the incident has been ongoing for thirty minutes. Omar sees exactly how the event has evolved over time. The baseline-aware metrics allow him to distinguish between normal fluctuations and true anomalies. Here, the current behavior deviates from normal, with a significant increase in errors, evidently deviating from the baseline, where no errors are expected over that same period, around the same time of the day.

Meaning, for the last thirty minutes, many more people were unable to complete their purchases than usual. The issue is ongoing. In the blink of an eye, he has validated the severity of the incident.

Third question: What’s broken?

The deployment view on the left provides a visual breakdown of the failure by component and cluster. The root cause engine correlated all contributing events and factors, and pinpointed the exact service at fault: the culprit, a Kubernetes workload associated with the “payment service.”

Fourth question: Who can fix it?

This is now easy. The root cause, clearly labeled within the affected infrastructure, clarifies ownership. Omar sees that Sophie, the developer from Team Finance, owns the failing service.

Swiftly guided through the incident, Omar can confidently hand over the issue to the right person.

Handoff: effortless and precise handoff to the responsible team

Omar kicks off a handoff directly from the problem details page within Dynatrace. With a single click, Omar creates a Jira Issue containing all relevant information.

The Jira ticket is populated with the problem identifiers, making it easy to understand the affected services and components at stake without toggling between tools. No ping-pong escalations, just clear, confident delegation with minimal overhead.

Sophie, the owning developer, receives the Jira notification and opens the ticket to find everything she needs: a brief summary with direct links to the problem view, failure analysis, and Live Debugger.

Guided investigation in problem mode

While guided through the next best course of action, Sophie chooses to analyze the failure further using the Services app. This opens problem mode, a visual assistive layer inside the Services app, scoped to the incident’s impact window. It pre-filters all logs, traces, and warnings based on:

  • The scope of the incident
  • The services and infrastructure involved
  • Event severity and user impact
Figure 4. Problem mode in the Services app: Investigate only what’s relevant in the automatically scoped context.
Figure 4. Problem mode in the Services app: Investigate only what’s relevant in the automatically scoped context.

This view automatically prioritizes what matters, highlighting the signals that explain why the failure occurred, not just what broke. Instead of wrestling with contextless, stale, and unrelated logs, Sophie sees error logs and telemetry tied to the exact timeframe of the checkout errors. It cuts to the relevant error logs linked to the failure, including the exact error message. Sophie sees immediately that this is a bug in the code, specifically a JavaScript error at line 73.

Figure 5. Drill down to the root cause on the code level.
Figure 5. Drill down to the root cause on the code level.

Remediation: fix rapidly, validate instantly

Sophie has enough context to fix the failure. She opens Dynatrace Live Debugger, navigates to where the error logs occurred, and sets a non-breaking breakpoint at line 22, where she knows the error originates. Once Live Debugger captures a snapshot, Sophie is able to quickly identify the culprit: a mismatched character, American-Express vs American_Express, is causing the checkout service to bounce.

Figure 6. Start debugging at the exact line where the error occurs with live production data in Live Debugger.
Figure 6. Start debugging at the exact line where the error occurs with live production data in Live Debugger.

Sophie patches the issue and deploys the fix. A couple of minutes later, when having a look at the business metrics dashboard, she validates the remediation action, observing in real-time that checkout failures are gone, and revenue is flowing again.

Document the issue for future reinforcement and learning

Once the fix is deployed, Sophie and Omar go to Troubleshooting in the problem details. Together, they jot down details of the errors and their cause: the key mismatch between American-Express and American_Express, and how it was resolved. Sophie adds the link to the dashboard she used for validation, next to the incident details, automatically prefilled by Davis® AI.

Figure 7. Davis AI automatically recommends relevant documents with actionable troubleshooting steps for this problem.
Figure 7. Davis AI automatically recommends relevant documents with actionable troubleshooting steps for this problem.

Once this is done, Dynatrace automatically

  • Indexes the incident’s metadata and telemetry
  • Prefills it with Incident details linked to the RCA
  • Links it to similar incidents using graph-based AI and vector search

Weeks or months later, when a similar checkout spike appears, Dynatrace remediation intelligence automatically surfaces the relevant troubleshooting guide, providing necessary context and remediation guidance.

Rather than starting from scratch in the future, users benefit from a living knowledge base that not only accelerates problem resolution by reducing repeated investigation but turns every fix into team intelligence.

Try out the Dynatrace problem-remediation journey today

Dynatrace doesn’t just help you detect problems; it guides your teams calmly and confidently from >notification to resolution. Start now, eliminating repetitive war rooms, and try it out yourself:

Explore the problem remediation journey in the Dynatrace Playground.

The post Let the problem guide you: Smart remediation with Dynatrace appeared first on Dynatrace news.

]]>
https://www.dynatrace.com/news/blog/let-the-problem-guide-you-smart-remediation-with-dynatrace/feed/ 0
Remediation intelligence: Accelerate MTTR with AI-powered context and knowledge https://www.dynatrace.com/news/blog/remediation-intelligence-accelerate-mttr-with-ai-powered-context-and-knowledge/ https://www.dynatrace.com/news/blog/remediation-intelligence-accelerate-mttr-with-ai-powered-context-and-knowledge/#respond Wed, 13 Aug 2025 15:38:30 +0000 https://www.dynatrace.com/news/?p=70391 Remediation intelligence

There’s a hidden barrier to deep understanding of your revenue, performance, and bottom line that has nothing to do with tools or telemetry. It’s organizational knowledge, the remediation know-how that’s scattered across hundreds of documents, private notebooks, dashboards, and in the minds of your engineers. This implicit, loosely documented knowledge is invisible to machines and rarely timely for humans. So, when a high-priority incident hits, this knowledge gap fills your war rooms with engineers tasked with solving problems they don’t own.

The post Remediation intelligence: Accelerate MTTR with AI-powered context and knowledge appeared first on Dynatrace news.

]]>
Remediation intelligence

Delivering reliable, business-critical applications to production is more complex than ever. The growing complexity and granularity of modern software systems and the trend to shifting more and more responsibilities to development teams (shift left) lead to increased pressure on your development teams.

In fact, traditional development teams now have a wider set of responsibilities; they must be highly skilled and educated in a multitude of domains. The responsibilities of these teams now range from specification, planning, testing, risk assessment, cost estimates, and deployment, to load testing, UI testing, integration testing, and on-call responsibilities for their software services.

While development teams need to be literate in all new technology stacks, cloud resources, and quality assurance methods, they also need to work with numerous tools.

The invisible bottleneck in your remediation process

The whole shift-left trend has pushed operational responsibility closer to development, expanding workloads to include on-call rotations, more frequent deployments, and growing expectations around uptime. When incidents occur, dozens of engineers are dragged into war rooms to perform analysis of the underlying root causes.

Reducing the Mean Time to Repair (MTTR) is essential to business continuity and customer satisfaction. Without access to the right knowledge at the right time, even skilled teams lose momentum. In high-pressure situations caused by critical incidents, it becomes more important than ever to ensure that all relevant information is shared with every role involved. This requires the most automated and intelligent methods available for effectively collecting, analyzing, and distributing information.

The on-call engineer’s journey

Take Omar, an SRE; an automated voice jolts him awake to summon him into a war room in the middle of the night after a routine update caused a spike in failed requests for a cloud-based payment service. It’s a P1 incident. With each passing minute, merchants are losing value, support requests surge, and customers are complaining. Dozens of caffeinated engineers are already in the war room.

Logs point to timeouts, but this is just a symptom; the real problem is somewhere else. Reading every message and document would take hours, so Omar scans for summaries, key findings, and any mention of his team’s services. Several hypotheses have already been tested, and one points to a potential issue in a backend service Omar’s team owns. Meanwhile, customer complaints are beginning to surface from other time zones. The payment service is failing, and customer success managers are growing increasingly anxious.

And while a similar outage has happened before, Omar is not able to find any documentation or insights into how to remediate the issue.

Why organizational knowledge doesn’t scale

When remediation history lives in documents, scattered across teams, formats, and platforms, engineers waste time searching instead of solving. Even well-documented incidents don’t prevent recurrence if they’re disconnected from future incidents. Even centralized platforms like Backstage don’t help if they can’t surface the right guidance at the right time.

Without a way to systematically identify, reuse, and scale this knowledge, it remains reactive. That’s not just inefficient, it’s a blocker to building intelligent automation and truly preventative operations. This is the hidden obstacle, silently inflating your MTTR, buried knowledge that costs time, delays response, and drains focus from what really matters. This is what remediation intelligence solves.

Introducing remediation intelligence

Dynatrace has a long history of providing DevOps teams with AI-driven tools for anomaly detection, root cause identification, and incident impact assessment in complex application environments. Over the past decade, it has contributed to reducing mean time to resolution (MTTR) by learning application behavior and analyzing dependencies in real time.

Building on this foundation, Dynatrace launched remediation intelligence, which adds an additional element to the incident response process from alert through resolution. It assists engineers during remediation by combining Davis® AI root cause and impact analysis with input from global community knowledge and internal expertise. It integrates data such as logs, metrics, traces, and topological context into a single view and offers support for documenting post-incident reviews.

Figure 1. The problems page displays all important information, allowing you to directly access all incident-relevant error logs.
Figure 1. The problems page displays all important information, allowing you to directly access all incident-relevant error logs.

Close the knowledge gap:  Embedded troubleshooting knowledge

What truly sets Dynatrace remediation intelligence apart is its ability to proactively surface relevant internal knowledge at the moment it’s needed most. It adds an AI-guided assistive layer to the Problems app that brings implicit, organizational knowledge directly into the flow of incident response. Once a problem is detected, Davis AI scans the historical data, surfacing past remediation playbooks, troubleshooting dashboards, and notebooks that were used to resolve similar issues.

With troubleshooting guides, we introduce a context-aware guidance system, built on Davis AI, that connects current incidents with prior resolution paths. It makes organizational knowledge queryable, remediation patterns reusable, and every responder effective, even when they’re solving an unfamiliar issue.

Figure 2. Review related documents from similar past incidents.
Figure 2. Review related documents from similar past incidents.

Remediation intelligence surfaces the most relevant remediation insights

When an incident occurs, Dynatrace excels at automatically analyzing and surfacing technical insights. It collects and organizes all relevant signals—logs, metrics, traces, and topology—into a single coherent problem. No fragmented alerts. No disconnected symptoms. Just one structured, AI-curated incident view. In parallel, Dynatrace AI scans all documents marked as troubleshooting-relevant. Using advanced semantic search and vector embeddings, it ranks and surfaces the most relevant past incidents, dashboards, notes, and postmortems, based on their similarity to the current problem. This is not just keyword matching; Dynatrace understands patterns, failure modes, and system relationships, surfacing ranked, high-similarity incidents in the problem view.

Figure 3. Example of a troubleshooting guide
Figure 3. Example of a troubleshooting guide

From observability to trusted automation: The power of context-aware AI

The future of resilient, self-healing systems lies in the seamless integration of observability, AI, and organizational knowledge. When these elements come together, they form the foundation for trusted automation—a system that not only reacts to incidents but learns from them, adapts, and eventually prevents them altogether.

At the heart of this vision is context. Effective auto-remediation depends on the ability to precisely identify the root cause of an issue and understand its broader impact across the application stack. But automation doesn’t stop at detection. By capturing and integrating the remediation strategies used by engineers, Dynatrace builds a living knowledge base. This organizational knowledge, when combined with AI-driven root cause analysis, allows the system to replicate proven remediation paths and suggest next steps with increasing accuracy.

With all relevant data and insights unified in a single platform, engineers gain a single pane of glass view into their systems. This not only streamlines manual remediation efforts but also lays the groundwork for flexible, context-aware auto-remediation. Each incident you resolve fuels the knowledge. Over time, as the system learns, it evolves from reactive automation to proactive incident prevention—anticipating issues before they escalate and taking preemptive action.

This is the vision Dynatrace is delivering: a future where engineers can trust automation not just to respond, but to understand, learn, and improve—turning every incident into a step toward greater system intelligence and reliability.

Empower your teams: turn hard-won operational insights into scalable remediation power

Dynatrace remediation intelligence is ready to work for you today. To start benefiting, opt into Davis CoPilot®, the Dynatrace generative AI assistant. Once turned on, you’ll need to configure Davis CoPilot to learn from a curated set of Dynatrace documents—specifically, Notebooks and Dashboards that are either created directly from detected problems or clearly labeled with the prefix [TSG] in their titles (short for Troubleshooting Guide).

Davis CoPilot will analyze and learn from your team’s historical remediation efforts, capturing valuable insights and strategies, allowing it to proactively suggest relevant documentation and guidance when similar incidents are detected in the future, helping your engineers respond faster and more effectively.

Figure 4. Turn on Davis CoPilot in Settings.
Figure 4. Turn on Davis CoPilot in Settings.

All data uploaded to Dynatrace remains strictly private. All data and remediation insights remain within your tenant. Davis CoPilot treats your documents as strictly confidential and never shares or transfers this information outside your Dynatrace environment. Your team’s knowledge stays private, secure, and entirely under your control, while still powering smarter, more context-aware automation.

Learn more about document suggestions and Dynatrace remediation intelligence in our documentation, and read about discovering relevant troubleshooting guides and how to create new ones.

Don’t let organizational knowledge stay buried. Make it actionable. Make it scalable.

The post Remediation intelligence: Accelerate MTTR with AI-powered context and knowledge appeared first on Dynatrace news.

]]>
https://www.dynatrace.com/news/blog/remediation-intelligence-accelerate-mttr-with-ai-powered-context-and-knowledge/feed/ 0