Elastic Labs articles increasingly include reusable assets such as notebooks, ES|QL patterns, workflow YAML, OpenTelemetry configuration, dashboards, and reference apps. This staging page converts the gap analysis into publishable content clusters for elastic-content-share.eu.
Highest priority gaps
- AI and semantic search notebooks from elastic/elasticsearch-labs, including ELSER, multilingual search, LangChain, Bedrock, Cohere, reranking, hybrid search, and learning-to-rank notebooks.
- Kibana Workflow YAML patterns for root cause analysis, human-approved incident response, Red Hat OpenShift remediation, Agentic SOC triage, and ML disk capacity response.
- ES|QL patterns for security detection, curl/wget triage with COMPLETION, search analytics, observability correlation, CHANGE_POINT anomaly detection, and LOOKUP JOIN enrichment.
- OpenTelemetry configurations and templates for Kubernetes SLOs, Java agent extensions, Collector lookup enrichment, Microsoft Foundry agents, Android APM, and Fleet-managed OTel pipelines.
- Reference applications from elasticsearch-labs and elastic/observability-examples, especially RAG chatbots, internal knowledge search, Relevance Workbench, and Elastiflix.
Recommended new site collections
- AI and Search Notebooks: a collection for official Elastic notebooks and AI search quick starts.
- Kibana Workflows: a collection for reusable automation YAML, approval gates, remediation workflows, and agentic operations patterns.
- ES|QL Patterns: a collection for detection rules, hunt queries, observability correlation queries, search analytics, and Kibana Discover examples.
Content created from this analysis
- Agentic SOC Starter Pack resource.
- Kibana Workflows for Agentic Observability resource.
- ES|QL Detection and Observability Patterns resource.
- OpenTelemetry Configs and SLO Templates resource.
- Elastic Observability Example Apps resource.
- Elastic Security MCP App resource.
- Search Labs AI Platform Integration Guides resource.
Packaged download entries now available
- Search Analytics OTel SLO Pack: existing canonical entry for FastAPI demo code, OpenTelemetry setup, ES|QL query files, sample data, and source attribution from elastic/elasticsearch-labs.
- ESQL COMPLETION curl/wget Triage Rules: canonical Elastic Security Labs entry for the curl and wget ES|QL COMPLETION triage rule package.
- Kubernetes OTel SLO Templates: Kubernetes reliability templates that turn OTel workload health into SLOs, budget burn, and prioritization signals.
- Elastic Workflows Root Cause Analysis RCA: Kibana Workflow YAML for Agent Builder powered incident analysis, case creation, alert context, and reasoning capture.
Publishing notes
The Search Analytics entry was already available and is linked as canonical. Three additional linked assets have been packaged with source links and license files. The remaining article-hosted resources should be converted into downloads as their exact source files are found.