A new framework for alerts and actions in Kibana
0 likes•2,196 views
The presentation discusses the future of alerts and actions within the Elastic Stack, emphasizing the development of a new alerting framework aimed at enhancing observability and security features. It highlights the importance of customer acceptance, potential risks, and the impact of external factors like the COVID-19 pandemic on business operations. Key features include automation, integration with external workflows, and contextual analysis to improve user experience and incident management.
A new framework for alerts and actions in Kibana
- 1. 1 Alerts and actions in the Elastic Stack and Elastic Solutions Alex Francoeur, Principal Product Manager Aris Papadopoulos, Senior Product Manager October 13 15, 2020
- 2. 2 This presentation and the accompanying oral presentation contain forward-looking statements, including statements concerning plans for future offerings; the expected strength, performance or benefits of our offerings; and our future operations and expected performance. These forward-looking statements are subject to the safe harbor provisions under the Private Securities Litigation Reform Act of 1995. Our expectations and beliefs in light of currently available information regarding these matters may not materialize. Actual outcomes and results may differ materially from those contemplated by these forward-looking statements due to uncertainties, risks, and changes in circumstances, including, but not limited to those related to: the impact of the COVID-19 pandemic on our business and our customers and partners; our ability to continue to deliver and improve our offerings and successfully develop new offerings, including security-related product offerings and SaaS offerings; customer acceptance and purchase of our existing offerings and new offerings, including the expansion and adoption of our SaaS offerings; our ability to realize value from investments in the business, including R&D investments; our ability to maintain and expand our user and customer base; our international expansion strategy; our ability to successfully execute our go-to-market strategy and expand in our existing markets and into new markets, and our ability to forecast customer retention and expansion; and general market, political, economic and business conditions. Additional risks and uncertainties that could cause actual outcomes and results to differ materially are included in our filings with the Securities and Exchange Commission (the “SEC”), including our Annual Report on Form 10-K for the most recent fiscal year, our quarterly report on Form 10-Q for the most recent fiscal quarter, and any subsequent reports filed with the SEC. SEC filings are available on the Investor Relations section of Elastic’s website at ir.elastic.co and the SEC’s website at www.sec.gov. Any features or functions of services or products referenced in this presentation, or in any presentations, press releases or public statements, which are not currently available or not currently available as a general availability release, may not be delivered on time or at all. The development, release, and timing of any features or functionality described for our products remains at our sole discretion. Customers who purchase our products and services should make the purchase decisions based upon services and product features and functions that are currently available. All statements are made only as of the date of the presentation, and Elastic assumes no obligation to, and does not currently intend to, update any forward-looking statements or statements relating to features or functions of services or products, except as required by law. Forward-Looking Statements
- 3. 3 Alex Francoeur Principal Product Manager Aris Papadopoulos Senior Product Manager
- 4. Agenda Vision and overview1 Integrations and actions3 Demo4 Roadmap5 Use cases2
- 7. 7 Automate and take action Create or follow a reproducible workflow Contextual analysis and collaboration
- 8. 8 Automate and take action Create or follow a reproducible workflow Contextual analysis and collaboration
- 10. 10 Alerting everywhere The New Alerting Framework for the Elastic Stack
- 11. 11 Alerting everywhere The New Alerting Framework for the Elastic Stack Making sense of alerts
- 12. 12 Alerting everywhere The New Alerting Framework for the Elastic Stack Making sense of alerts Detection and action
- 13. 13 Watcher New alerting framework ✗ Contextual integration ✔ ✗ 1 alert to multiple instances ✔ ✗ Space aware (multi-tenancy) ✔ ✗ Free ability to write alerts to index or server logs ✔ What are the differences between Watcher and the new alerting framework?
- 14. 14 Use cases
- 17. Custom alerts for any indexOut of the box cluster health alerts And more
- 19. 19
- 20. Set up once in a few seconds -no technical knowledge required1 Pass the alert’s context to your external workflows3 Use multiple times across your alerts2 Integrations features
- 21. • Create observability and security incidents • Manage incidents within your workflows • Pass the structured context to your workflow objects outside Kibana Incident management
- 22. • Notify your team members on Slack or via email • Surface your alerts and their context to the right channels and contacts • Format your notifications for an improved experience Collaboration em@il
- 23. Elastic internal • Index your alerts in Elasticsearch • Use them as annotations in TSVB • Show your alerts as Kibana logs
- 24. • Integrate with your system until we offer a native connector • Execute different actions according to your workflow requirements • Parameterize each integration Programmatic
- 25. 25 Demo
- 26. 26 Roadmap
- 27. Alerting everywhere For every use case • Search alerts in Discover • Threshold alerts from a Dashboard • Tracking alerts in Maps • More solution alerts • Machine Learning alerts everywhere Alerting everywhere
- 28. Making sense of alerts With more context and better UX • Multi-level alerts (e.g. warning, severe) • Alert simulation • More context in actions (link back, visualizations) • Alert details and activity log views Making sense of alerts
- 30. Detection and Action More, in depth ways to take action • More actions (Microsoft teams, OpsGenie, etc.) • Pre-configured alerts • On-demand actions • Alert on resolution • Alert on state change Detection and action
- 32. 32 Thank you!