Agent Skill · OpenSearch
observability
Analyze logs and investigate traces in OpenSearch. Use this skill when the user wants to query logs with PPL, analyze error patterns, discover log patterns, investigate traces, check stack health, or perform any observability task. Activate even if the user says log analysis, Fluent Bit, Fluentd, Logstash, syslog, traceId, OpenTelemetry, PPL, span, latency, error rate, anomaly detection, or log analytics without mentioning OpenSearch.
Skill body
Observability
Category skill for log analytics and trace investigation with OpenSearch.
Skills
| Skill | Description |
|---|---|
| log-analytics | Query and analyze log data — error patterns, log volume, anomaly detection, PPL queries |
| trace-analytics | Investigate distributed traces — slow spans, error spans, service maps, agent invocations |
When to Use
| User Intent | Skill |
|---|---|
| Query logs, analyze errors, discover patterns, check log volume | log-analytics |
| Investigate traces, debug spans, analyze latency, service dependencies | trace-analytics |
| Both logs and traces (e.g., correlate errors with spans) | Start with the primary intent, cross-reference using traceId |
Skill frontmatter
compatibility: Requires a running OpenSearch cluster. PPL queries require the SQL plugin (built-in).
metadata: {"author"=>"opensearch-project", "version"=>"2.0"}