Skip to content
Merged
Changes from 1 commit
Commits
Show all changes
85 commits
Select commit Hold shift + click to select a range
c9aab67
Added Remediation Steps to Log Ai Insight system promt
yuliia-fryshko Dec 22, 2025
44b44e2
edited system promt
yuliia-fryshko Dec 23, 2025
b64015b
added downstream dependencies
yuliia-fryshko Dec 28, 2025
a87c1dc
added trace data
yuliia-fryshko Dec 28, 2025
e5d48e5
Merge branch 'main' into edit-log-insight-system-promt-445
yuliia-fryshko Dec 29, 2025
e02947c
edit log ai system promt to respond base on log type
yuliia-fryshko Dec 29, 2025
769fee0
edited wording
yuliia-fryshko Dec 29, 2025
e50dd81
Merge branch 'main' into edit-log-insight-system-promt-445
yuliia-fryshko Dec 31, 2025
52ee4df
Update x-pack/solutions/observability/plugins/observability_agent_bui…
yuliia-fryshko Dec 31, 2025
ac070e8
Update x-pack/solutions/observability/plugins/observability_agent_bui…
yuliia-fryshko Dec 31, 2025
b8c86ee
Changes from node scripts/eslint_all_files --no-cache --fix
kibanamachine Dec 31, 2025
b0685ce
applied PR review suggestions
yuliia-fryshko Dec 31, 2025
55affb9
removed first occurence promt
yuliia-fryshko Dec 31, 2025
0b45ec5
Merge branch 'main' into edit-log-insight-system-promt-445
yuliia-fryshko Jan 4, 2026
3124e3a
Merge branch 'main' into edit-log-insight-system-promt-445
yuliia-fryshko Jan 9, 2026
e1309f1
Merge branch 'main' into edit-log-insight-system-promt-445
yuliia-fryshko Jan 13, 2026
2112716
Merge branch 'main' into edit-log-insight-system-promt-445
yuliia-fryshko Jan 13, 2026
a57c8be
Merge branch 'main' into edit-log-insight-system-promt-445
yuliia-fryshko Jan 13, 2026
384bced
prefetched data base on log severity
yuliia-fryshko Jan 14, 2026
2523a21
removed redundant fallback
yuliia-fryshko Jan 14, 2026
35b7291
added a condition to identify id the log is an error
yuliia-fryshko Jan 14, 2026
0e6ac58
rename getToolHandler import to getCorrelatedLogs
yuliia-fryshko Jan 14, 2026
2ad03d3
adjusted fields according to mapping ecs-otel
yuliia-fryshko Jan 16, 2026
ab652c6
adjusted correlated log sequence
yuliia-fryshko Jan 16, 2026
94135cc
Changes from node scripts/eslint_all_files --no-cache --fix
kibanamachine Jan 16, 2026
35ec4bd
added API test for Log AI Insight
yuliia-fryshko Jan 16, 2026
d9b647f
addressed review comment
yuliia-fryshko Jan 16, 2026
07ce96a
Merge branch 'main' into edit-log-insight-system-promt-445
yuliia-fryshko Jan 16, 2026
f4382fe
fix type check
yuliia-fryshko Jan 16, 2026
c5d3a6f
fixed check type
yuliia-fryshko Jan 19, 2026
ae8568f
Merge branch 'main' into edit-log-insight-system-promt-445
yuliia-fryshko Jan 19, 2026
6fd1ce8
Merge branch 'main' into edit-log-insight-system-promt-445
yuliia-fryshko Jan 21, 2026
33b4b6b
prefetch correlation logs for all log types
yuliia-fryshko Jan 22, 2026
6130807
fix merge conflict
yuliia-fryshko Jan 22, 2026
f009254
fix merge conflict
yuliia-fryshko Jan 22, 2026
5ce23e8
Merge branch 'main' into edit-log-insight-system-promt-445
yuliia-fryshko Jan 22, 2026
2423a38
search ecs fields instead of source
yuliia-fryshko Jan 22, 2026
e56b156
Merge branch 'main' into edit-log-insight-system-promt-445
yuliia-fryshko Jan 27, 2026
d70c2fd
Merge branch 'main' into edit-log-insight-system-promt-445
yuliia-fryshko Jan 28, 2026
c907227
fixed merge conflicts
yuliia-fryshko Jan 28, 2026
5dc626c
added categorised logs and default values for correlation tool handler
yuliia-fryshko Jan 28, 2026
73ccf32
Update x-pack/solutions/observability/plugins/observability_agent_bui…
yuliia-fryshko Jan 28, 2026
bd60b60
Update x-pack/solutions/observability/plugins/observability_agent_bui…
yuliia-fryshko Jan 28, 2026
cf98e3a
Update x-pack/solutions/observability/plugins/observability_agent_bui…
yuliia-fryshko Jan 28, 2026
5c124c5
Changes from node scripts/eslint_all_files --no-cache --fix
kibanamachine Jan 28, 2026
e9fd179
fix review comments
yuliia-fryshko Jan 28, 2026
8a6da49
Merge branch 'main' into edit-log-insight-system-promt-445
yuliia-fryshko Jan 28, 2026
7bbe53d
Update x-pack/solutions/observability/plugins/observability_agent_bui…
yuliia-fryshko Jan 28, 2026
b220f84
fixed tests
yuliia-fryshko Jan 28, 2026
7719f35
moved the function to utils
yuliia-fryshko Jan 28, 2026
15fa737
Update x-pack/solutions/observability/test/api_integration_deployment…
yuliia-fryshko Jan 29, 2026
c389435
Update x-pack/solutions/observability/plugins/observability_agent_bui…
yuliia-fryshko Jan 29, 2026
efb1d96
Update x-pack/solutions/observability/plugins/observability_agent_bui…
yuliia-fryshko Jan 29, 2026
1dea11f
Update x-pack/solutions/observability/test/api_integration_deployment…
yuliia-fryshko Jan 29, 2026
1973cbd
Changes from node scripts/eslint_all_files --no-cache --fix
kibanamachine Jan 29, 2026
775b93c
fixed review comments
yuliia-fryshko Jan 29, 2026
ab0c124
Merge branch 'main' into edit-log-insight-system-promt-445
yuliia-fryshko Jan 29, 2026
01b7d1b
Merge branch 'main' into edit-log-insight-system-promt-445
yuliia-fryshko Jan 29, 2026
ca63002
fixed merge conflict
yuliia-fryshko Jan 29, 2026
53f8492
fix duplicates, add shared test helpers
yuliia-fryshko Jan 29, 2026
e95c9c2
Changes from node scripts/lint_ts_projects --fix
kibanamachine Jan 29, 2026
0b5b0cd
Changes from node scripts/regenerate_moon_projects.js --update
kibanamachine Jan 29, 2026
58c53df
Merge branch 'main' into edit-log-insight-system-promt-445
yuliia-fryshko Jan 29, 2026
e6bee31
Changes from node scripts/eslint_all_files --no-cache --fix
kibanamachine Jan 29, 2026
841558f
Merge branch 'main' into edit-log-insight-system-promt-445
yuliia-fryshko Jan 29, 2026
8d98f5c
removed categorised logs; fixed check type
yuliia-fryshko Jan 29, 2026
3b2bda0
added ditributed trace data when error
yuliia-fryshko Jan 30, 2026
95c5a02
Changes from node scripts/eslint_all_files --no-cache --fix
kibanamachine Jan 30, 2026
a4af6d0
removed duplications of tests
yuliia-fryshko Jan 30, 2026
f752200
removed distributed trace
yuliia-fryshko Jan 30, 2026
5d835e2
fix tests
yuliia-fryshko Jan 30, 2026
306143a
Update x-pack/solutions/observability/plugins/observability_agent_bui…
yuliia-fryshko Jan 30, 2026
90e3885
created a function to call corelated logs
yuliia-fryshko Jan 30, 2026
6c67d8d
Update x-pack/solutions/observability/plugins/observability_agent_bui…
yuliia-fryshko Jan 30, 2026
b47a1e6
fixed review comments
yuliia-fryshko Jan 30, 2026
4ea551b
fixed check type
yuliia-fryshko Jan 30, 2026
8f6049e
fixed check type
yuliia-fryshko Jan 30, 2026
51a1ba8
Changes from node scripts/eslint_all_files --no-cache --fix
kibanamachine Jan 30, 2026
f2faa93
Merge branch 'main' into edit-log-insight-system-promt-445
yuliia-fryshko Jan 30, 2026
cac6cfc
Merge branch 'main' into edit-log-insight-system-promt-445
yuliia-fryshko Feb 2, 2026
430b890
Update x-pack/solutions/observability/plugins/observability_agent_bui…
yuliia-fryshko Feb 2, 2026
a3a965b
Update x-pack/solutions/observability/plugins/observability_agent_bui…
yuliia-fryshko Feb 2, 2026
6500993
Update x-pack/solutions/observability/plugins/observability_agent_bui…
yuliia-fryshko Feb 2, 2026
999af77
fixed review comment
yuliia-fryshko Feb 2, 2026
bbce724
fixed type check
yuliia-fryshko Feb 2, 2026
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,8 @@ export async function getLogAiInsights({
}: GetLogAiInsightsParams): Promise<{ summary: string; context: string }> {
const systemPrompt = dedent(`
You are assisting an SRE who is viewing a log entry in the Kibana Logs UI.
Using the provided data produce a concise, action-oriented response.`);
Using the provided data produce a concise, action-oriented response.
If it's an issue, provide remediation steps suitable for an on-call SRE.`);

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The wording here is a bit ambiguous I feel.

If it's an issue doesn't clearly say what an issue is?
Is it referring to an error log or a warning log? What can be considered as an issue in this context?

And do we need to say suitable for an on-call SRE?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If it's an issue - I added it because, in the message, we ask to explain the log and whether "it is an issue". We didn’t specify what qualifies as an issue there. I’m happy to clarify it if you think it’s needed, but the LLM was able to define it nicely on its own.

Regarding suitable for an on-call SRE - I added this because we already mention in the system promt that the audience is an SRE, and I assume that if there is an issue, we want to provide some next steps to investigate. I don’t have a strong opinion on keeping this part or not and am happy to change it.

@viduni94 viduni94 Dec 23, 2025

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I added it because, in the message, we ask to explain the log and whether "it is an issue"

I think that should change as well. We have to avoid ambiguity in system prompt and instructions as much as possible, as different LLMs may interpret it in different ways if it's ambiguous.


const logEntry = await getLogDocumentById({
esClient: esClient.asCurrentUser,
Expand Down