Skip to content

Conversation

@kdelemme
Copy link
Contributor

@kdelemme kdelemme commented Dec 2, 2025

Resolves #244697
Resolves #244678

Summary

This PR bumps the SLO resources version to 3.6, meaning only new SLOs or SLOs updated with a breaking change or reseted will use the new index settings and ingest pipelines.

This PR changes the date_index_name date rounding processor to daily instead of monthly. Customers can always use slo-rollup-global@custom ingest pipeline to override this settings if necessary.

We also added index sorting on the SLI index settings using [id, revision, instanceId] which are the first ordered keys referenced by the summary transform. This will help tremendously the composite aggs made by this transform.

On the overview cluster, where each daily index has about 20M documents with a size of 20GB, the write_load decreased compared to the write_load of previous indices who were not using the index (but who had way more documents, e.g. monthly instead of daily rollup), so we cannot really compare apples to apples... But at least the overview cluster is not overwhelmed with this settings.
And from @henrikno testing with a 300gb index, the query ran by the summary transform went from 2min to 2s using this settings.

image

Testing

  • Make sure the migration works correctly, e.g. existing SLOs are still using v3.5 resources, but new SLOs uses the v3.6 resources.

Release notes

  • SLI rolled-up data for SLO is split daily instead of monthly by default. Override is possible through a global custom pipeline.

@github-actions github-actions bot added the author:actionable-obs PRs authored by the actionable obs team label Dec 2, 2025
@kdelemme kdelemme added backport:skip This PR does not require backporting release_note:feature Makes this part of the condensed release notes Team:actionable-obs Formerly "obs-ux-management", responsible for SLO, o11y alerting, significant events, & synthetics. v9.3.0 labels Dec 2, 2025
@baileycash-elastic baileycash-elastic requested review from baileycash-elastic and removed request for baileycash-elastic December 2, 2025 20:17
@elasticmachine
Copy link
Contributor

elasticmachine commented Dec 3, 2025

💔 Build Failed

Failed CI Steps

Test Failures

  • [job] [logs] FTR Configs #137 / Maps endpoints apis search ES|QL should return getValues response in expected shape
  • [job] [logs] FTR Configs #137 / Maps endpoints apis search ES|QL should return getValues response in expected shape

Metrics [docs]

‼️ ERROR: no builds found for mergeBase sha [87bc4df]

History

@kdelemme kdelemme marked this pull request as ready for review December 3, 2025 18:49
@kdelemme kdelemme requested a review from a team as a code owner December 3, 2025 18:49
@elasticmachine
Copy link
Contributor

Pinging @elastic/actionable-obs-team (Team:actionable-obs)

@elasticmachine
Copy link
Contributor

Pinging @elastic/obs-ux-management-team (Team:obs-ux-management)

index_patterns: [SLI_INDEX_TEMPLATE_PATTERN],
composed_of: [SLI_COMPONENT_TEMPLATE_MAPPINGS_NAME, SLI_COMPONENT_TEMPLATE_SETTINGS_NAME],
priority: 500,
priority: 600,
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

To override the previous index template matching on broader index pattern, e.g. .slo-observability.sli-* instead of .slo-observability.sli-v3.6* like now

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

author:actionable-obs PRs authored by the actionable obs team backport:skip This PR does not require backporting release_note:feature Makes this part of the condensed release notes Team:actionable-obs Formerly "obs-ux-management", responsible for SLO, o11y alerting, significant events, & synthetics. Team:obs-ux-management v9.3.0

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[SLO] Add index sorting to sli index template [SLO] Robustness plan for rollup data storage

3 participants