Operations | Monitoring | ITSM | DevOps | Cloud

Avantra handles RISE with SAP security monitoring for the layer that stays with the customer under the RISE with SAP shared responsibility model. SAP operates the infrastructure, network, database, and operating system, while the customer still owns application configuration, users and authorizations, custom code, and requesting the SAP Security Notes that SAP doesn’t apply proactively.

Avantra monitors SAP security patch status across entire landscapes, checking each newly published SAP HotNews note against every managed system and tracking which systems still need it. It covers the patch side of SAP vulnerability management, which is a different job from code-level vulnerability scanning.

Dashboards answer the questions you knew you would ask. The other kind — “is it only this server, or all of them?”, “since when?”, “what does memory look like on the ones that restarted?” — used to start with creating a dashboard, adding a widget, picking a metric, and deleting the whole thing afterwards. Bleemeo now has a page for those questions. It is called Metrics: you write a PromQL query, run it, and look at the answer.

VictoriaLogs now runs in production everywhere, and many teams running it have told us the same thing: everyone wants new features, but it’s hard to keep upgrading their logging backend every few weeks. They want the mix of stability and up-to-date security that only LTS releases can satisfy. We’re happy to announce the first Long Term Support (LTS) release of VictoriaLogs: v1.52.1. This is the start of a new v1.52.x LTS line.

You know the conversation. Calls are choppy, users are complaining, and Obkio shows packet loss on the path to your ISP. You open a ticket, and they reply, "Everything looks fine on our end." Now you're stuck taking screenshots, exporting graphs, and trying to explain data to someone who can't see it. Meanwhile, the problem keeps happening. Today we're launching Shareable Links. With one click, you can create a read-only link to any Network Monitoring Session and send it to anyone.

Say "ECS" and most people picture serverless containers: no nodes to manage, and nothing underneath you are allowed to touch. For an eBPF-based agent that is a dead end. There is no host to run on, no privileged containers, no kernel to attach to. But ECS is not always serverless. With the EC2 launch type you bring the nodes and ECS brings the scheduler: task definitions, services, rolling deployments, daemons, placement.