How to build smarter OpenSearch alerts: Join our live conversation

OpenSearch, a top-level open-source project under the Linux Foundation, is backed by Amazon Web Services and other major players. The OpenSearch Observability Stack combines AI agent tracing, APM, service maps, logs, metrics, and dashboards into a single platform. Joshua Bright, senior product manager at AWS OpenSearch, will present a technical deep dive on September 10, focusing on alerting challenges for site reliability engineers (SREs) and platform engineers.

SREs face challenges with telemetry tools that haven't kept pace with AI agents, leading to a widening gap. OpenSearch is now a core or supporting component in 77% of organizations' AI infrastructure. Alerting struggles with multi-signal correlation, alert rule sprawl, and false positives. To address this, OpenSearch introduces two new capabilities: Piped Processing Language (PPL) for alerting and a unified Alert Manager.

PPL brings a Unix pipeline model to observability queries, enabling engineers to filter, transform, and correlate logs, metrics, and traces using readable syntax. This allows teams to build multi-step alert conditions that identify nuanced failure modes, such as a latency spike in an AI agent's tool call when log error rates are also high. PPL skills are transferable across search, analytics, and alerting workloads, making complex alert conditions straightforward to build and share.

The new Alert Manager provides a centralized interface for managing alert rules, routing, suppression, and escalation, ensuring the strategy aligns with actual incident response. This session, on September 10, 2026, will include a live demo of both capabilities, a Q&A, and a chance to ask your own alerting questions. Register now to secure your spot at 12 p.m. Eastern/9 a.m. Pacific.