Zum Hauptinhalt springen
Echtzeit-Radar & Feeds
Alle RSS Feeds ➔
👥 Community & Social
YouTube Security VideosTechLinked: Apple says no more upgradeability(25.09.2026 um 01:02 Uhr)
•
Podcasts & Audio BriefingsiPhone 18, iPhone Duo und AirPods auf dem Prüfstand | CHIP.Chat #44(25.09.2026 um 00:00 Uhr)
•
YouTube Security VideosGoogle Cloud Tech: A Developer’s Guide to Gemini 3.5 Transcribe(25.09.2026 um 01:00 Uhr)
••••••••
YouTube Security VideosTechLinked: Apple says no more upgradeability(25.09.2026 um 01:02 Uhr)
•
Podcasts & Audio BriefingsiPhone 18, iPhone Duo und AirPods auf dem Prüfstand | CHIP.Chat #44(25.09.2026 um 00:00 Uhr)
•
YouTube Security VideosGoogle Cloud Tech: A Developer’s Guide to Gemini 3.5 Transcribe(25.09.2026 um 01:00 Uhr)
••••••••
Intelligence View
⚡ tsecurity.de Intelligence

What is AIOps? The evolution of IT operations in the AI era

What is AIOps? AIOps, defined AIOps — short for AI for IT operations — is an emerging operational practice that uses machine learning and automation to help organizations monitor, manage, and troubleshoot complex digital systems. Com…

0
↗ Quelle (cio.com)
Reagiere als Erste:r — dein Feedback zählt!









What is AIOps? AIOps, defined





AIOps — short for AI for IT operations — is an emerging operational practice that uses machine learning and automation to help organizations monitor, manage, and troubleshoot complex digital systems. Companies that implement AIOps use AI-driven tools to combine data from logs, metrics, and events across infrastructure and applications to detect problems early, identify root causes, and trigger responses before users even notice an issue.





AIOps has been around since before the current wave of generative AI, taking its name from the sense of AI/ML more common in the last decade. Monika Malik, lead data/AI engineer at AT&T, describes that era’s model as straightforward: “ingest → correlations → detect anecdotal events → predict root likely cause → orchestrate some remediation.”





That workflow still forms the backbone of AIOps today, she says, but large language models are adding a new layer of intelligence. “GenAI is additive, not a replacement,” she says. “LLMs sit atop reasoning/summarization, ops copilots, and knowledge retrieval—but data plus rules plus ML still needs to exist.”





In short, AIOps began as a way to automate IT operations through analytics and machine learning. Today, generative AI is enhancing that foundation with conversational interfaces and contextual reasoning, helping teams work faster and boosting cloud and IT operations.





AIOps vs. devops: What’s the difference?





Devops and AIOps share some philosophical DNA — both are about bringing automation, feedback loops, and responsiveness to technology systems — but they operate at different levels of the stack.





As Kostas Pardalis, data infrastructure engineer and co-founder of Typedef, puts it, “Devops is about automating and streamlining the software development lifecycle. AIOps extends that philosophy into operations by applying machine learning and inference as first-class operations.” In other words: devops helps you ship and deploy reliably and quickly; AIOps helps you monitor, detect, and remediate in production more intelligently.





Greg Ingino, CTO of Litera, frames the two as complementary: devops governs how we build and deliver systems, while “AIOps governs how we operate and optimize those systems in production. Devops drives speed, while AIOps ensures stability.”





In practice, you can think of devops as the foundation of continuous delivery and infrastructure automation, and AIOps as adding a layer of smart monitoring and autonomous operations. Over time, as systems grow increasingly complex, that added intelligence becomes essential to keeping environments resilient, especially at scale.





What are the components of an AIOps platform?





Typedef’s Pardalis explains that an AIOps platform needs three layers. Start with “data collection and normalization across logs, metrics, traces, and unstructured events,” he says. Next comes “inference-first pipelines that can classify, enrich, and correlate signals probabilistically, not just deterministically. Finally, you need “observability and governance, so teams can trust the AI outputs —  lineage, evaluations, cost controls. Without those, you either drown in data or end up with a black box no one trusts.”





Milankumar Rana, software engineer advisor and senior cloud engineer at FedEx, lays out a more detailed architecture that blends traditional observability with generative intelligence. He notes that many deployments rely on open-source stacks such as ELK, Prometheus, and OpenTelemetry, while commercial tools like Splunk, Elastic Observability, LogicMonitor, and IBM’s AIOps suite add “generative AI for natural language query, incident summarization, and autonomous remediation.” Cloud providers have joined in too, with AWS and Azure adding AIOps-powered incident insights and anomaly detection.





According to Rana, “any AIOps platform has interconnected parts”: data ingestion and normalization; scalable analytics stores; ML models that predict and correlate incidents; and newer generative layers that summarize events and suggest next actions. Noise reduction, feedback loops, visualization dashboards, and strong governance complete the picture. Few organizations implement every component, but these elements together define what a trustworthy AIOps system looks like.





AIOps implementation strategies





A carefully considered AIOps rollout rarely starts with a grand sweep—instead, success comes from incremental steps, measurable wins, and building trust. AT&T’s Malik recommends the following steps:






  • Start thin: Pick two or three chronically noisy services and define success criteria—for example, 30% less noise, 20% faster MTTR.




  • Hybrid detection: Combine hard rules for SLO breaches with ML-based anomaly detection. Avoid going “pure ML” too early.




  • Make explainability visible: Every dashboard or prompt should show why something is being brought to the attention of the user—similar past incidents, knowledge-base references, etc.




  • Phase in automation: Begin with read-only insights, then allow the system to begin suggesting actions with human approval, and then move on to limited auto-execute (with rollback protection).




  • Measure and publish weekly: Track metrics like MTTA/MTTR, false positives, L1 deflection, and on-call hours saved.





FedEx’s Rana emphasizes that many successful adopters first conduct a “data readiness examination” to expose issues like excessive false positives that intelligent automation can help mitigate. He calls for a domain-specific proof of concept that boosts confidence, surfaces data quality gaps, and enables incremental evolution of services, telemetry, and automation. He also warns that “autonomous systems without audit trails or rollback need safety and governance,” and stresses that educating AI users and ops teams is as essential as deploying new tools.





Litera’s Ingino echoes the “start small, prove value” ethos: his team began with a single product line to reduce alert noise and improve MTTR, won early buy-in, and then expanded AIOps across environments. “Our engineers saw early wins, and that built confidence,” he says. He notes that the key is trust — making AIOps a reliable partner rather than an experiment.





Benefits and challenges with AIOps rollouts





When AIOps works, its advantages are immediate and measurable. Ingino says that at Litera, the payoff has been “faster incident detection, fewer false alarms, and greater system reliability.” Beyond improving uptime, he notes that “AIOps has significantly reduced the cognitive load on our operations teams, allowing them to focus on higher-value engineering work.”





Nagmani Lnu, director of quality engineering at SWBC, agrees that the biggest benefits come from earlier, more accurate detection and resolution. When AIOps is implemented successfully, he says, “the company will really see benefits in detecting issues proactively and addressing them in real time, and will improve their MTTR and hence improve the IT experience for the business.” Typedef’s Pardalis adds that AIOps provides “the ability to handle scale that humans simply can’t,” turning mountains of telemetry into actionable insight.





The challenges, however, can be as significant as the rewards. Ingino says the hardest problems are “data quality and cultural change.” AIOps “is only as smart as the data it sees,” he explains, so ensuring consistent, contextual ingestion is critical. Trust is another recurring theme. “Teams need to trust the AI,” Pardalis warns. “That means transparency, lineage, and the ability to debug.” He also points to practical barriers—“models are probabilistic, so you need guardrails,” and “costs can spike if you don’t optimize inference.” Lnu adds that poor use-case selection can derail an entire rollout: “Poor selection can deter management confidence and hence risk any future innovation.”





What is the role of an AIOps engineer?





An AIOps engineer takes on an interdisciplinary role, combining the skills of a site reliability engineer, a data scientist, and an automation specialist. Typedef’s Pardalis describes the job as “an evolution of the site reliability engineer. An AIOps engineer isn’t just automating playbooks,” he says. “They’re designing pipelines where inference is in the loop.” That includes “curating data for observability, training or fine-tuning models for anomaly detection, and deploying inference-first workflows that make sense of logs, traces, and metrics in real time.”





Chirag Agrawal, lead engineer and tech expert, emphasizes that while some think of an AIOps engineer as a mere tool configuration tech, their real impact lies in understanding, managing, and curating the data that AIOps tools will make use of. “When poor-quality data is ingested, poor outcomes are produced,” he says, adding that the best AIOps engineers are those with “deep understanding of logs, metrics, and dependencies specific to their environments,” not necessarily formal AI backgrounds.





SWBC’s Lnu frames the role more systematically. An AIOps engineer’s responsibilities, he says, include:






  • Defining objectives and scope, identifying pain points like alert fatigue or performance bottlenecks and setting success metrics such as reduced MTTR.




  • Assessing the current IT environment, from servers and containers to monitoring tools like CloudWatch, Prometheus, and Grafana.




  • Creating a data strategy, ensuring standardized, enriched, and centralized telemetry.




  • Selecting the right AIOps platform, evaluating integration capabilities and AI/ML features.




  • Developing automation playbooks, from restarting instances to triggering service tickets or scaling workloads via orchestration tools.





The AIOps engineer is a bridge between human operators and intelligent systems—someone who not only builds automation but also instills trust, establishes governance, and offers insight into how AI makes operational decisions.





Real-world AIOps examples





AIOps is increasingly proving its value in production environments across industries—from cloud-native infrastructure to publishing and cybersecurity. SWBC’s Lnu says real-world deployments vary by environment. In cloud-native contexts, organizations use AIOps to “monitor container health, detecting abnormal CPU, memory, or network usage across containers,” and to “predict high traffic periods to pre-warm Lambda functions to avoid cold start latency.” Other use cases include “auto-scaling ECS tasks based on historical load, controlling cost by limiting over-provisioned containers, and predicting EC2 instance failure before they crash.” The same systems can automatically “reboot, replace, or resize” affected instances, helping reduce downtime while optimizing spend.





Chirag Agrawal offers a people-focused success story. His team developed “an AI agent that recognized tickets commonly reassigned between teams. The tickets were automatically routed correctly without requiring any human intervention.” The result: hundreds of hours saved per quarter and a clear ROI. Agrawal attributes that success to groundwork—“years of carefully studying, cleaning, and labeling historical data”—and emphasizes that “the model wasn’t simply left to run on raw data; it was trained under human supervision.”





Typedef’s Pardalis has seen similar gains in other sectors. “Media companies use AI pipelines to classify and enrich thousands of documents daily,” he says, while cybersecurity teams “use inference to extract structure from unstructured logs, enabling faster threat detection without drowning analysts in alerts.”





Litera’s Ingino recounts a scenario where AIOps tools detected “a subtle performance drift in a service that standard monitoring would have otherwise missed.” The platform “correlated anomalies across several microservices, pinpointed the source, and triggered a response before users experienced any degradation.” That single event, he says, “validated the entire investment.” Since then, Litera has seen “incident resolution times drop by more than 70%,” with PagerDuty automation ensuring the right engineers engage immediately.





Are humans still needed in an AIOps world?





Even as AIOps grows more capable—correlating events, summarizing incidents, and recommending fixes—human expertise remains essential. Chirag Agrawal puts it plainly: “AI can automate pattern recognition, but context and intent must be provided by people who understand how those systems behave in real-world environments.”





AIOps excels at sifting through telemetry, detecting anomalies, and accelerating root-cause analysis, but it still depends on human judgment to interpret meaning, verify impact, and decide how automation should evolve. “AIOps works best when human insight and machine intelligence are developed side by side, not when one replaces the other,” Agrawal says.





That partnership also fuels long-term progress. Every resolved incident strengthens the system’s knowledge base, improving future responses and reducing toil. “The true promise of AIOps,” Agrawal concludes, “is seen not only in automation but in the collective memory that is built.”





In that sense, AIOps doesn’t make humans obsolete—it amplifies them. The more context engineers share with these systems, the better they become at turning raw data into operational intelligence.



CTI Threat Relationship Graph2 Knoten / 1 Relationen
CVE / Incident Software MITRE ATT&CK CWE Weakness IoC
SOC Incident Playbook: Remote Code Execution (RCE) Defense
Syntax validiert (0 Fehler)
title: Detect Exploitation - What is AIOps? The evolution of IT operations in the AI era
id: 176ed076-a1cb-4b96-8acd-a01be0c4114c
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-25
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
Syntax validiert (0 Fehler)
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-25"
        description = "YARA Signature for "
    strings:
        $str = "What is AIOps? The evolution o" ascii wide
    condition:
        any of them
}
Syntax validiert (0 Fehler)
index=security sourcetype IN ("cisco:asa", "pan:traffic", "zeek_conn", "suricata", "WinEventLog:Security")
("What is AIOps The evolution of IT operat")
| stats count earliest(_time) as first_seen latest(_time) as last_seen by src_ip, dest_ip, dest_host, signature
| eval first_seen=strftime(first_seen, "%Y-%m-%d %H:%M:%S"), last_seen=strftime(last_seen, "%Y-%m-%d %H:%M:%S")
| sort - count
Syntax validiert (0 Fehler)
message: "*What is AIOps The evolution of IT operat*"
Syntax validiert (0 Fehler)
CommonSecurityLog
| where Message has "What is AIOps The evolution of IT operat"
| summarize EventCount = count(), FirstSeen = min(TimeGenerated), LastSeen = max(TimeGenerated) by SourceIP, DestinationIP, DestinationPort, Activity
| extend DetectionRule = "iShareStuff-CTI-Compiled"
| sort by EventCount desc
🎯
MITRE ATT&CK Matrix Navigator 14 Taktiken
Reconnaissance
-
Resource Development
-
Initial Access
Execution
Persistence
-
Privilege Escalation
Defense Evasion
Credential Access
-
Discovery
-
Lateral Movement
-
Collection
-
Command and Control
Exfiltration
-
Impact
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich What is AIOps? The evolution of IT opera.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

⚡ Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten What is AIOps? The evolution of IT operations in the AI era

Thematisch verwandte Begriffe: What, AIOps, evolution, operations · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-87722 | Uncontrolled Resource Consumption (CWE-400 / CWE-1333) in regex search q…
Advisory →
tsecurity.de Icon
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag
Themen-Radar & Intelligence Matrix
Echtzeit-Taxonomie nach Angriffsvektoren & Plattformen

tsecurity.de Live Threat Radar

🔴 LIVE RADAR
MONITORING
AKTIV
CVE-DATENBANK
LIVE
🔍
Community Radar & Live Chat
Sentinel Bot online • Live-Stream
Dein Cluster: Security Explorer
Match:
lädt…
Verbindung zum Community-Stream wird aufgebaut...
Bearbeitungsmodus — Senden überschreibt deine Nachricht
Community-Puls — was gerade passiert
lädt…
Aktivitäten deiner Analysten
lädt…
Neues Thema oder Eilmeldung einreichen

Reiche interessante Links, Zero-Days oder Debatten ein. Die Community entscheidet per Upvote über die Veröffentlichung.

Heiß diskutierte Einreichungen
📂 Keine gespeicherten Artikel vorhanden.
Zurück Ziehen Vor
Links: vorheriger Artikel • Rechts: nächster Artikel • unten: schließen
News NIS-2 Frühwarnung Tier-1 Intel TTP ⏱️ 3 Min vor 10 Min
Artikeldaten werden geladen...
↗ Original-Quelle