Glossary

A testing method used to compare two versions of an application or web page simultaneously to determine which one performs better for users.

A dynamic access control model where rights are granted based on the attributes of the user, the resource, and the current context.

A list of rules that specifies which users or system processes are granted access to specific objects or system resources.

An iterative and incremental software development methodology favoring collaboration, adaptability, and the rapid delivery of business value.

The use of artificial intelligence and machine learning to automate and improve IT operations (e.g., anomaly detection, reducing alert noise).

The process of notifying teams (via email, Slack, Teams) when a specific event, threshold breach, or anomaly is detected.

An open source IT automation tool (IaC) enabling configuration management, application deployment, and orchestration, operating agentlessly via SSH.

A gateway that acts as a single entry point for all requests to a microservices architecture. It handles routing, security, and rate limiting.

A unique alphanumeric code used to identify, authenticate, and authorize access to an Application Programming Interface (API).

A package management tool (Advanced Package Tool) and archive format (.deb) used by Debian-family Linux distributions (e.g., Ubuntu).

The overall structural design of an IT system, defining its various components, their relationships, and the principles guiding its evolution.

The final outcome of a software compilation or build process, such as a .jar file, a zip archive, or a Docker image, ready for deployment.

The chronological recording and examination of system records and activities to ensure compliance and security.

The process of verifying the identity of a user or system (e.g., login/password, tokens, biometrics).

The process that occurs after authentication to determine if the entity has the necessary rights and privileges to access a resource.

Lightweight data shippers (like Filebeat, Metricbeat, etc.) installed on servers to collect and send various types of operational data (logs, metrics) to the Elastic Stack.

An executable or pre-compiled file generated from source code, directly readable and executable by a machine.

A culture, movement, and set of practices designed to unify software development (Dev) and IT operations (Ops).

The native integration of security practices from the very beginning and throughout the entire DevOps lifecycle (Shift-Left approach).

An open-source platform designed to make it easier to create, deploy, and run applications by isolating them into portable, lightweight software containers.

A distributed, RESTful search and analytics engine capable of addressing a growing number of use cases, built on Apache Lucene.

A continuous deployment practice where a Git repository serves as the single source of declarative truth for infrastructure and applications.

An open-source interactive data visualization platform that allows users to create, explore, and share analytic dashboards from multiple time-series data sources.

An open-source, vendor-neutral telemetry collector designed to replace Grafana Agent, fully compatible with OpenTelemetry (OTel).

A collection program equipped with extensive local features (processing, filtering, buffering) that consumes more system resources. Example: Logstash.

An HTTP status code indicating that the client's request was successfully processed by the server.

An HTTP status code indicating that the server understood the request but refuses to authorize it, usually due to a lack of permissions.

An HTTP status code indicating that the requested resource could not be found on the server.

An HTTP protocol method used to request and retrieve data from a server without causing any side effects (without modifying the resource's state).

An HTTP protocol method used to send data to a server, typically for the purpose of creating a new resource.

An open-source container orchestration engine (sometimes called K8s) for automating the deployment, scaling, and management of containerized applications.

A data collection program installed on a host system, designed to consume minimal resources (CPU, RAM). Example: Filebeat, Promtail.

An open-source, server-side data processing pipeline that ingests data from a multitude of sources simultaneously, transforms it, and then sends it to a 'stash' like Elasticsearch.

A key performance indicator measuring the average time required to restore a service or system after a failure.

A concept where the IT environment is so automated and abstracted (e.g., Serverless, PaaS) that it almost completely removes the need for a dedicated operations team for daily tasks.

An open source framework providing standards, APIs, and SDKs to collect and export observability data (traces, metrics, logs) in an agnostic way.

An access control method where permissions are assigned to specific roles (e.g., admin, reader) rather than directly to individual users.

A centralized storage location. This can refer to a source code repository (e.g., Git) or an artifact and binary repository (e.g., Harbor, Nexus, Artifactory).

Manual, repetitive, automatable operational work that is devoid of enduring value and scales linearly with the system's growth.

Package managers and archive format (.rpm) used by Red Hat-family Linux distributions (e.g., RHEL, CentOS, Fedora).