Link Search Menu Expand Document Documentation Menu
Documentation

You're viewing version 2.1 of the OpenSearch documentation. This version is no longer maintained. For the latest version, see the current documentation. For information about OpenSearch version maintenance, see Release Schedule and Maintenance Policy.

Application analytics

You can use application analytics to create custom observability applications to view the availability status of your systems, where you can combine log events with trace and metric data into a single view of overall system health. This lets you quickly pivot between logs, traces, and metrics to dig into the source of any issues.

Get started with application analytics

To get started, choose Observability in OpenSearch Dashboards, and then choose Application analytics.

Create an application

  1. Choose Create application.
  2. Enter a name for your application and optionally add a description.
  3. Do at least one of the following:
  • Use PPL to specify the base query.

You can’t change the base query after the application is created.

  • Select services & entities from the dropdown or the service map.
  • Select trace groups from the dropdown or the table.

4. Choose Create.

Create a visualization

  1. Choose the Log Events tab.
  2. Use PPL to build upon your base query.
  3. Choose the Visualizations tab to see your visualizations.
  4. Expand the Save dropdown menu, enter a name for your visualization, then choose Save.

To see your visualizations, choose the Panel tab.

Configure availability

Availability is the status of your application determined by availability levels set on a time series metric.

To create an availability level, you must configure the following:

  • color: The color of the availability badge on the home page.
  • name: The text in the availability badge on the home page.
  • expression: Comparison operator to determine the availability.
  • value: Value to use when calculating availability.

Configuring availability

By default, application analytics shows results from the last 24 hours of your data. To see data from a different time frame, use the date and time selector.

Time series metric

A time series metric is any visualization that has a query that spans over a timestamp and is a line chart. You can then use PPL to define arbitrary conditions on your logs to create a visualization over time.

Example
source = <index_name> | ... | ... | stats ... by span(<timestamp_field>, 1h)

Choose Line in visualization configurations to create a time series metric.

Changing visualization to line chart

350 characters left

Have a question? .

Want to contribute? or .