Observability Labs

Explore Elastic Observability Labs for expert-led resources and hands-on learning. Enhance your skills and optimize your observability strategy with Elastic.

Featured Articles

From a 582ms latency spike to the team that owns it, using Kibana Discover

Getting there takes a data view, some filter pills, a KQL query and a switch to Lucene query syntax, but the part that actually names the team is one ES|QL LOOKUP JOIN against a service catalog index.

Jeffrey Rengifo

From recommendation to remediation in 4 stages: human-in-the-loop automation with Elastic Workflows

Jeffrey Rengifo

From alert to root cause in 3 minutes: automated root cause analysis with Elastic Agent Builder

Jeffrey Rengifo

AI agent observability for Microsoft Foundry: two env vars, no collector

Greg Crist

Sleep through the 3am page: automated incident response with Elastic on Red Hat OpenShift

Matt Isset
All articles

Blog

Developer insights and practical observability articles from our experts to inspire and empower your monitoring stack

OpenTelemetry Java extensions: customize traces without forking the agent

One JAR, loaded at startup by the OpenTelemetry Java agent, lets you filter health checks, rename spans, add resource attributes, and control sampling with no application code changes.

Sylvain Juge

Kubernetes observability: SLO templates that turn alerts into error budgets

Two bad rollouts burned 88% of a 30-day error budget while the SLI still read 99.56%. This post adds four SLO templates that bring burn-rate tracking to the OTel-based alert rules from Part 1, no new instrumentation required.

Agi K Thomas

Elastic Agent now runs as an OpenTelemetry Collector: Less memory overhead, zero config changes

Elastic Agent 9.3 sends logs, metrics and traces through one OTel Collector pipeline, running Beats integrations alongside native OTel sources in a single Fleet-managed agent.

Nima Rezainia

Correlate logs, metrics, and traces in one ES|QL query

Walk through four investigations, from CPU saturation to pod memory pressure, each answered by a single query across signal types.

Vinay Chandrasekhar

vLLM Prometheus metrics for self-hosted LLM tuning: TTFT, KV Cache, and GPU Utilization

Tuning a self-hosted vLLM inference using its Prometheus metrics in Elastic Observability — TTFT, KV cache, prefix caching and DCGM GPU counters

Bahubali Shetti

Android application monitoring with OpenTelemetry: distributed tracing from tap to backend

EDOT Android adds mobile APM to your Android app with one Gradle dependency: crash reporting, session tracking and distributed tracing visible in Kibana.

Cesar Munoz

How we rebuilt the APM service map for incident time: the design story behind Observability 9.5

14 enterprise interviews, two prototype rounds, one rebuilt APM service map. The design story behind Elastic Observability 9.5.

Karolina Kurstak

From CrashLoopBackOff to OOMKilled with PromQL in Elasticsearch and Kibana

Use PromQL in Elasticsearch and Kibana to move from a CrashLoopBackOff alert to OOMKilled, memory versus the limit, and a verified fix.

Miguel Sánchez Gómez

One edit, every dashboard updated: managing Kibana observability at scale with Terraform

Define your golden-signals panels once in a shared HCL library and use for_each to generate every team's dashboard, with drift detection and git rollback built in.

Jeffrey Rengifo

Skip writing alert rules: 6 ready-made ES|QL templates ship inside the NGINX OTel integration

Elastic integrations come with alerting rule templates, each one an ES|QL query with a threshold already set. Create Elasticsearch alert rules in minutes, tune them to your traffic, and catch silent data streams early.

Jeffrey Rengifo

CrashLoopBackOff to root cause in seconds: automating the 20-minute Kubernetes investigation with Elastic Observability

Elastic's Kubernetes Experience fires alongside the CrashLoopBackOff alert and delivers a root-cause hypothesis with evidence before you even open it.

Bahubali Shetti

You have the IP, you want the hostname: building a lookup processor for OpenTelemetry

Look up any value from YAML, CSV or DNS inside the OpenTelemetry Collector or wire in your own source through a processor Elastic built and shipped to Collector Contrib.

Vihas Makwana

Elastic ML predicts when your disk will fill up: How to make it alert you

Use a single Kibana Workflows YAML to run daily ML forecasts on disk usage and get Slack alerts listing which hosts will hit capacity and when.

Valeriy Khakhutskyy

Your SLO is on fire; here's how to find the arsonist in Elastic Observability

When SLO alerting flags a burn rate spike, follow the SLI from the alert detail page through bad event spans and trace waterfalls to find the exact dependency burning your SLO error budget, all without leaving the investigation.

Roshan Gonsalkorale

6x faster at 500 services: how we rebuilt the Kibana APM service map from canvas to React DOM

Each service node shows alert, SLO and anomaly health so you can filter to breaching services only and embed the result on any Kibana dashboard, with full keyboard navigation across the topology.

Jenny Pavlova