.jpg)
Collecting rootless Podman logs with Elastic Agent: the CRI parser, user-scoped paths, and the Podman socket
Rootless Podman containers write their logs in CRI format. This Fleet policy reads them and attaches container.* fields, with the match_source_index value that rootless paths need.
Your AI agent needs an alibi: Observability and audit trails for Agent Builder in Elastic
Elastic 9.5 traces every Agent Builder run as OpenTelemetry spans in your own cluster, so tool calls and token counts are queryable with ES|QL. One workflow step adds the approval record, in a data stream the pipeline cannot rewrite.
From recommendation to remediation in 4 stages: human-in-the-loop automation with Elastic Workflows
An approval gate that pauses incident response automation before the action and gives the reviewer enough evidence to decide in seconds. Whatever happens next, approved or declined, lands in one auditable record.
From alert to root cause in 3 minutes: automated root cause analysis with Elastic Agent Builder
Automated root cause analysis only works if the agent compares the incident window against the last healthy one. Skip that step and you get a summariser. The read-only skill, the scoped role and the Elastic Workflow are all here.
Elastic Agent now runs as an OpenTelemetry Collector: Less memory overhead, zero config changes
Elastic Agent 9.3 sends logs, metrics and traces through one OTel Collector pipeline, running Beats integrations alongside native OTel sources in a single Fleet-managed agent.
From alert to root cause in seconds: AI-powered observability with Elastic Agent Builder and Workflows
Elastic Agent Builder and Workflows replace dashboard hunting: one question surfaces the root cause, correlates metrics across weeks, and calculates business impact; then the workflow files the ticket.
Contextual AI: Stop pinging the SRE: three MCP tools that turn Elastic Agent Builder into your team's runbook
Build three MCP tools in Elastic Agent Builder that read endpoint health, recent deploys and SLO burn rate directly in your editor. Encode your platform team's runbook once; every developer gets self-serve production context without pinging an SRE.
Kubernetes observability: MCP specialist agents for safer EKS triage
Scope a specialist EKS MCP agent for cluster checks while the Elastic AI Agent triages; fix a service misconfiguration using the specialist agent in a few prompts.
TLS certificate monitoring with Elastic Workflows, Synthetics, and Osquery: Eliminate manual renewals
Automate TLS certificate monitoring with Elastic Workflows, Synthetics, and Osquery. Detect expiring certificates, rotate, and verify without human intervention.
Connecting Cursor to Production Logs via the Elastic MCP Server
Learn how to connect Cursor to your Elastic APM data using the Elastic Agent Builder MCP server, so you can debug production errors and make UI decisions backed by real usage data without leaving your editor.
Elastic Ramen: A CLI harness for SRE investigation and remediation
Exploring Elastic Ramen, a CLI harness that brings Agent Builder conversations, skills, and tools into the terminal so engineers can move from investigation to remediation in a single thread.
Agentic Powered Kubernetes Investigations with Elastic Observability and MCP
See how Elastic's Agentic powered Kubernetes observability uses MCP App, agent skills to let agents investigate clusters, detect anomalies, and automate root cause analysis.