Skip to content

OpenSearch Observability Stack

OpenSearch Observability Stack is an open-source, OpenTelemetry-native observability platform (GitHub) for monitoring services, infrastructure, and AI agents. Install locally via Docker Compose - traces, logs, Prometheus metrics, service maps, and agent tracing out of the box.

The Observability Stack is powered by Piped Processing Language (PPL) - a pipe-based, human-readable query language purpose-built for observability. PPL is the native language for querying logs and traces, giving you a single, consistent syntax across signal types.

source = logs-otel-v1*
| where severityNumber >= 17
| stats count() as errors by `resource.attributes.service.name`
| sort - errors

With 50+ commands and 200+ built-in functions, PPL covers everything from simple filtering to machine learning anomaly detection - all in a pipeline you can read top to bottom.

  • Open source: Fully open source, no vendor lock-in, self-host everything
  • OpenTelemetry-native: All data ingestion uses OTel protocols and semantic conventions
  • PPL-native: Pipe-based query language across logs and traces - no query DSL, no steep learning curve
  • GenAI-first: Purpose-built views for AI agent tracing using standard gen_ai.* attributes
  • Local-first: Runs entirely on your machine via Docker Compose - no cloud account required
  • Production path: Same components (OpenSearch, Prometheus, OTel Collector) scale to production