observability-service-health

Assess APM service health by querying Observability APIs and Elasticsearch.

546|44|Updated Mar 6, 2026
One-click install
npx skills add https://github.com/elastic/agent-skills --skill observability-service-health
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: observability-service-health
Source: https://github.com/elastic/agent-skills/tree/main/skills/observability/service-health
Command: npx skills add https://github.com/elastic/agent-skills --skill observability-service-health

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps diagnose and assess the health of Application Performance Monitoring (APM) services by analyzing various signals like SLOs, alerts, ML anomalies, and performance metrics.

Core Features & Use Cases

  • Comprehensive Health Assessment: Synthesizes data from SLOs, alerts, ML anomalies, throughput, latency, error rates, and dependencies.
  • Root Cause Analysis: Correlates APM data with infrastructure and logs to identify underlying issues.
  • Use Case: When a user asks "Why is our checkout service slow?", this Skill can investigate SLO violations, check for firing alerts, analyze latency spikes, and identify if a downstream dependency is the bottleneck.

Quick Start

Assess the health of the 'frontend-web' service for the last 24 hours.

Frequently Asked Questions about observability-service-health

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I diagnose APM service health and identify root causes for latency spikes?

Diagnose APM service health by querying Observability APIs, ES|QL, and Elasticsearch for SLO status, alerts, ML anomalies, throughput, and error rates. Correlate these metrics with infrastructure and logs to perform root cause analysis on latency spikes.

What is the best way to investigate SLO violations and firing alerts for a slow service?

Investigate SLO violations and firing alerts by synthesizing APM performance metrics with dependency mapping. Utilize the APM annotations API and apm-correlations script to identify if a downstream bottleneck is causing the service to slow down.

Can I use ES|QL to analyze throughput and error rates for root cause analysis?

Yes, use ES|QL to query Elasticsearch for throughput and error rates during root cause analysis. Combine these queries with ML anomaly detection and log correlation to pinpoint underlying infrastructure issues impacting service health.

Does assessing service health require correlating APM data with infrastructure and logs?

Yes, comprehensive service health assessment requires correlating APM data with infrastructure and logs. This correlation is essential to move beyond symptom detection and accurately identify the underlying root cause of performance degradation.

Why does my service health assessment show ML anomalies but no SLO violations?

ML anomalies can appear without SLO violations when throughput, latency, or error rates deviate from learned baselines but remain below SLO thresholds. Check the APM annotations API to investigate these early warning signs before they impact SLOs.