observability
Analyze logs and investigate traces in OpenSearch. Use this skill when the user wants to query logs with PPL, analyze error patterns, discover log patterns, investigate traces, check stack health, or perform any observability task. Activate even if the user says log analysis, Fluent Bit, Fluentd, Logstash, syslog, traceId, OpenTelemetry, PPL, span, latency, error rate, anomaly detection, or log analytics without mentioning OpenSearch.
Install
With your agent
Install OMGSkills skill "opensearch-project/opensearch-agent-skills:skills/opensearch-skills/observability" into this agent's normal skills directory: call the OMGSkills MCP get_install_plan tool for your agent and run the script it returns (it installs only the pinned commit and verifies SKILL.md), and stop if MCP or the pin is unavailable. Do not overwrite or change existing skills without asking me.
Manual command
git clone https://github.com/opensearch-project/opensearch-agent-skills /tmp/opensearch-agent-skills && ln -s /tmp/opensearch-agent-skills/skills/opensearch-skills/observability ~/.claude/skills/observabilityFrom README
Observability Category skill for log analytics and trace investigation with OpenSearch. Skills | Skill | Description | |---|---| | log-analytics | Query and analyze log data — error patterns, log volume, anomaly detection, PPL queries | | trace-analytics | Investigate distributed traces — slow spans, error spans, service maps, agent invocations | When to Use | User Intent | Skill | |---|---| | Query logs, analyze errors, discover patterns, check log volume | log-analytics | | Investigate traces, debug spans, analyze latency, service dependencies | trace-analytics | | Both logs and traces (e.g., correlate errors with spans) | Start with the primary intent, cross-reference using traceId |
More from this repo
aoss-nextgen-provisioning
Used when provisioning or deprovisioning OpenSearch Serverless collections, creating collection groups, setting up AOSS...
aws-setup
Deploy OpenSearch search applications to Amazon OpenSearch Service or Amazon OpenSearch Serverless.
cloud
Deploy OpenSearch search applications to managed cloud providers.