observability

Analyze and correlate log and trace data in OpenSearch clusters.

40|41|Updated Apr 1, 2026
One-click install
npx skills add https://github.com/opensearch-project/opensearch-agent-skills --skill observability-opensearch-project
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: observability
Source: https://github.com/opensearch-project/opensearch-agent-skills/tree/main/skills/opensearch-skills/observability
Command: npx skills add https://github.com/opensearch-project/opensearch-agent-skills --skill observability-opensearch-project

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

OpenSearch observability enables teams to quickly query and correlate logs and distributed traces to detect incidents, diagnose root causes, and improve system reliability.

Core Features & Use Cases

  • Query logs with PPL and analyze error patterns
  • Investigate traces and service maps to understand latency and dependencies
  • Monitor health and performance across services

Quick Start

Use the observability skill to begin analyzing your logs and traces in an OpenSearch cluster.

Frequently Asked Questions about observability

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I analyze and correlate logs and traces in OpenSearch?

To analyze logs and traces in OpenSearch, you can use this observability skill to query data with PPL, identify error patterns, and investigate service dependencies. It correlates distributed traces and logs to help diagnose root causes.

What is the best way to identify latency issues across distributed systems using OpenSearch?

Identifying latency issues across distributed systems is achieved by investigating distributed traces and service maps. This skill analyzes trace data to understand service dependencies and pinpoint performance bottlenecks within your OpenSearch cluster.

Do I need the SQL plugin to query logs with PPL in OpenSearch?

Yes, you need the SQL plugin to query logs with PPL. The skill requires an OpenSearch cluster with PPL support to execute queries and analyze error patterns. An optional MCP server is available for AWS environments.

Can I use OpenSearch to monitor health and performance across services?

Yes, you can use OpenSearch to monitor health and performance across services. The observability skill enables teams to query logs, investigate traces, and analyze system data to detect incidents and improve overall system reliability.

How do I diagnose root causes from distributed traces and log data?

Diagnosing root causes from distributed traces and log data involves correlating the two data types to detect incidents. This skill applies to OpenSearch clusters to identify error patterns and service dependencies for system observability.