Investigate Business Critical Services across async layers with ES|QL—session bridges, content/entity bridges, message correlation, and multi-layer failure sessions—without assuming one global distributed trace.
When to use it
Use when CDN, origin, UX, and network signals share business IDs but not trace.id. Companion to the BCS health dashboard and correlation keys.
What is included
- Eight ES|QL patterns for BCS capability health and async joins
- Placeholders for session, content, and correlation IDs
- Works with demo index
ecs-bcs-demo*or your labeled production data
Compatibility
ES|QL in Kibana Discover/dashboards. Adapt index patterns to CDN/network data streams. No fixed Stack version claimed.
Source and license
Original Elastic Content Share query pack (CC BY 4.0). End-to-End Observability hub.
| Tested versions | |
| ECS compliant |
You must log in to submit a review.
