One-off — AI/ML Overview

One-off: AI/ML Overview

Presenter: Specialist (DSR) — AIOps

Date: TBD

SLB × Elastic Workshop Program

Overview

One-off demo session — Elastic AI/ML capabilities across observability use cases.

Where this applies

These labs run on Observability Serverless — a fully managed project so you can practice without cluster operations.

The same capabilities you explore here — ES|QL, Streams, AI Assistant, Agent Builder, Workflows, and SLOs — are available on Elastic Cloud Hosted (ECH) and self-managed deployments.

Serverless mainly saves operational toil (sizing, ILM, Fleet, upgrades). Your observability skills transfer directly.

Session topics

  • Overview of Elastic AI/ML capabilities for observability
  • Anomaly detection and log pattern analysis
  • AI Assistant for Observability

Why these features?

AI AssistantNatural language over your live telemetry
🤖Agent BuilderRepeatable AI workflows with guardrails
📈Anomaly detectionCatch unknown-unknowns in telemetry

Use → to see why each feature matters for SLB.

Why AI Assistant?

Natural language over your live telemetry

Without it

Every investigator rebuilds the same ES|QL, scrolls dashboards, and writes runbook prose from scratch.

With AI Assistant

Ask questions in plain language — get ES|QL, summaries, and correlated logs/traces grounded in your project data.

  • Onboard new engineers without memorizing query syntax
  • Explain spikes and error patterns during live incidents
  • Draft queries you can save, share, and reuse
Question
AI Assistant
Evidence

Why Agent Builder?

Repeatable AI workflows with guardrails

Without it

Ad-hoc ChatGPT sessions with no access to SLB data, no audit trail, and inconsistent answers per engineer.

With Agent Builder

Build agents that use observability context, tools, and retrieval — tuned prompts your team can trust and share.

  • Standardize "investigate service X" and "summarize deploy" playbooks
  • Connect tools (ES|QL, alerts, docs) instead of copy-paste context
  • Govern who can publish agents — architecture-friendly AI ops
Agent
Tools + data
Action

Why Anomaly detection?

Catch unknown-unknowns in telemetry

Without it

Static thresholds miss slow leaks and seasonal shifts — you only notice when customers complain.

With Anomaly detection

ML jobs and log anomalies learn normal behavior and flag deviations across metrics and log rates.

  • Complement fixed thresholds for dynamic workloads
  • Pair with AI Assistant to explain what changed
  • Use when you do not yet know the right alert threshold
Baseline
Anomaly
Investigate

Hands-on lab

Your lab uses Elastic Observability Serverless for a zero-ops learning environment.

The steps and features are the same on ECH and on-prem — follow the assignment panel when Kibana opens.

Instruqt track: slb-one-offs

Resources

  • Registration: events.elastic.co/slbworkshops
  • Repo: github.com/poulsbopete/slb-workshops
  • Use ← → arrow keys to navigate slides