Automating root cause analysis at scale: Multi-signal correlation for cloud native incident responseSantosh Balaranganathan and colleagues at Atlassian describe their automated root cause analysis system that treats incident diagnosis as a correlation problem across three dimensions: signal type (metrics, logs, traces), time, and service topology. The pipeline scopes the search using OpenTelemetry-derived dependency graphs, detects anomalies independently per signal, temporally aligns co-occurring anomalies into bundles, traverses the graph to determine causal direction, and emits ranked hypotheses with human-readable narratives so responders can validate and act quickly.
- Sequence fingerprinting collapses repeated fault patterns (the same upstream timeout replaying every few seconds) into a single bundle with a replay count, preventing dozens of identical hypotheses from obscuring the signal.
- The team found statistical methods (MAD, percentile bands) work well enough for metrics anomaly detection and are far easier to debug than ML models; they reserve ML for log clustering and trace structural analysis.
- The system is being extended with LLM-based orchestration to make RCA iterative—an agent can request additional telemetry, refine hypotheses, and adapt its investigation strategy across multiple steps rather than running one-shot.
- A shared incident context anchors all signals, hypotheses, and actions per incident, feeding both a faulty-service pager that pages the right team early and an LLM-powered copilot that recommends mitigations (rollbacks, feature flag disablement) grounded in the actual diagnosis.
- Sequence fingerprinting collapses repeated fault patterns (the same upstream timeout replaying every few seconds) into a single bundle with a replay count, preventing dozens of identical hypotheses from obscuring the signal.
- The team found statistical methods (MAD, percentile bands) work well enough for metrics anomaly detection and are far easier to debug than ML models; they reserve ML for log clustering and trace structural analysis.
- The system is being extended with LLM-based orchestration to make RCA iterative—an agent can request additional telemetry, refine hypotheses, and adapt its investigation strategy across multiple steps rather than running one-shot.
- A shared incident context anchors all signals, hypotheses, and actions per incident, feeding both a faulty-service pager that pages the right team early and an LLM-powered copilot that recommends mitigations (rollbacks, feature flag disablement) grounded in the actual diagnosis.
Harness provides an Autonomous Software Development Life Cycle (SDLC) platform designed to accelerate software delivery through AI-driven automation, security testing, and cost management. The platform utilizes various agents—including Software Delivery, Security Testing, Runtime Protection, and Cost Management—to automate pipelines from commit to production while maintaining governance and visibility across the entire development lifecycle.
- Offers three levels of risk-based autonomy ranging from manual oversight to fully autonomous agent execution within set policies.
- Includes a Knowledge Graph that learns patterns from deployments, incidents, and cost events to improve recommendations.
- Provides specialized AI posture management to identify and protect against threats like prompt injection and text evasion.
- Enables automated cloud spend attribution by tracing tokens to specific teams or business outcomes.
- Offers three levels of risk-based autonomy ranging from manual oversight to fully autonomous agent execution within set policies.
- Includes a Knowledge Graph that learns patterns from deployments, incidents, and cost events to improve recommendations.
- Provides specialized AI posture management to identify and protect against threats like prompt injection and text evasion.
- Enables automated cloud spend attribution by tracing tokens to specific teams or business outcomes.
Over 160 production-ready skill documents (SKILL.md) for LLM coding agents like Claude Code, Cursor, and Codex.Each skill contains expert-level configs, CLI commands, troubleshooting guides, and ready-to-run scripts spanning six domains: DevOps (CI/CD, Kubernetes, observability), Security (vulnerability scanning, secrets, hardening), Infrastructure (AWS/Azure/GCP, networking, databases, local inference stacks), LLM engineering (agent evals, RAG infrastructure, inference scaling), Compliance (SOC2, HIPAA, GDPR, ISO 27001), and IT operations. Skills install in under a minute via the `npx skills add` CLI or a simple git clone, and the agent discovers, matches, and activates them on demand.
- Ships with notable niche skills absent from other repos: MCP server security, eBPF kernel-level observability, OpenTofu migration, agent-eval CI/CD gates, and multi-tenant LLM hosting with KEDA autoscaling.
- Ships with notable niche skills absent from other repos: MCP server security, eBPF kernel-level observability, OpenTofu migration, agent-eval CI/CD gates, and multi-tenant LLM hosting with KEDA autoscaling.
Umair Khurshid writes that although Docker revolutionized container workflows and application portability, it has lost its status as the single essential tool for all developers. As standardized OCI runtimes have matured, specialized alternatives now offer more targeted solutions for security-focused workloads, production environments, system-level needs, and standalone image creation.
- Podman enables rootless containers by launching processes directly from the CLI without a central daemon
- containerd provides an efficient, lightweight runtime often used in Kubernetes architectures
- Incus specializes in system containers that behave like complete Linux installations with init systems
- Buildah focuses specifically on building images rather than managing container execution
- Podman enables rootless containers by launching processes directly from the CLI without a central daemon
- containerd provides an efficient, lightweight runtime often used in Kubernetes architectures
- Incus specializes in system containers that behave like complete Linux installations with init systems
- Buildah focuses specifically on building images rather than managing container execution
The article explores a real-world architectural shift where specialized data tools—Redis for caching/pub-sub, Elasticsearch for search, and Kafka for event streaming—were consolidated into a single database engine: PostgreSQL. The primary motivation was to reduce operational complexity, simplify the infrastructure stack, and minimize the cognitive load on developers by managing one unified system instead of several distributed ones.
Summary points:
- Consolidating specialized tools into PostgreSQL reduces overhead in deployment, monitoring, and data synchronization.
- Modern Postgres features like GIN indexes and Full Text Search can effectively substitute for Elasticsearch in many use cases.
- Utilizing Postgres's LISTEN/NOTIFY or simple table structures can replace lightweight pub-sub needs previously handled by Redis or Kafka.
Summary points:
- Consolidating specialized tools into PostgreSQL reduces overhead in deployment, monitoring, and data synchronization.
- Modern Postgres features like GIN indexes and Full Text Search can effectively substitute for Elasticsearch in many use cases.
- Utilizing Postgres's LISTEN/NOTIFY or simple table structures can replace lightweight pub-sub needs previously handled by Redis or Kafka.
Google explores the transition from traditional deterministic automation to agentic AI within Site Reliability Engineering. As system complexity grows due to microservices, cloud scale, and increased code generation, Google is implementing SRE AI across the entire software development lifecycle to enhance reliability. The approach includes using agents for automated runbook improvement, advanced anomaly detection, incident management orchestration, and autonomous investigation utilizing observability data.
- Moving from deterministic automation to agentic AI models
- Integration of AI in reliability design and documentation
- Using anomaly detection rather than static thresholds for alerting
- Orchestrating incident response via communication monitoring and automated summaries
- Leveraging historical data through AI Insights for risk management
- Adhering to principles of transparency, security, and agent identity
- Moving from deterministic automation to agentic AI models
- Integration of AI in reliability design and documentation
- Using anomaly detection rather than static thresholds for alerting
- Orchestrating incident response via communication monitoring and automated summaries
- Leveraging historical data through AI Insights for risk management
- Adhering to principles of transparency, security, and agent identity
A self-hosted, GitHub-compatible API server designed for agents, automation, and developer workflows. It allows existing GitHub clients to work with owned repositories by exposing REST v3, GraphQL v4, OAuth device flow, and Git Smart HTTP while utilizing real bare Git repositories and TiDB/MySQL-compatible storage for metadata.
Self-hosting provides a hands-on way to learn modern infrastructure, covering essential skills such as deployment, networking, storage, monitoring, and system reliability.
1. **Awesome Selfhosted**: A curated list of open-source applications across various service categories.
2. **Coolify**: An open-source PaaS for deploying apps, databases, and services on your own servers.
3. **n8n**: A visual workflow automation platform for connecting APIs and services.
4. **Uptime Kuma**: A monitoring system for tracking service uptime, status dashboards, and alerts.
5. **Nextcloud Server**: A private cloud platform for file synchronization, storage, and collaboration.
6. **Immich**: A self-hosted photo and video management and backup platform.
7. **Memos**: A lightweight Markdown note-taking tool with a timeline interface.
8. **Proxmox VE Helper Scripts**: Community scripts for managing LXC containers and VMs on Proxmox VE.
9. **Awesome Tunneling**: A curated list of tools for secure remote access to local services via tunneling.
10. **Self-Hosting Guide**: A comprehensive reference guide covering hardware, software, and infrastructure concepts.
1. **Awesome Selfhosted**: A curated list of open-source applications across various service categories.
2. **Coolify**: An open-source PaaS for deploying apps, databases, and services on your own servers.
3. **n8n**: A visual workflow automation platform for connecting APIs and services.
4. **Uptime Kuma**: A monitoring system for tracking service uptime, status dashboards, and alerts.
5. **Nextcloud Server**: A private cloud platform for file synchronization, storage, and collaboration.
6. **Immich**: A self-hosted photo and video management and backup platform.
7. **Memos**: A lightweight Markdown note-taking tool with a timeline interface.
8. **Proxmox VE Helper Scripts**: Community scripts for managing LXC containers and VMs on Proxmox VE.
9. **Awesome Tunneling**: A curated list of tools for secure remote access to local services via tunneling.
10. **Self-Hosting Guide**: A comprehensive reference guide covering hardware, software, and infrastructure concepts.
AWS has launched the public preview of OpenTelemetry (OTel) metrics support within Amazon CloudWatch, enabling developers to send metrics directly via the OTLP protocol. This update completes CloudWatch's support for logs, traces, and metrics using open standards.
- Support for high-cardinality metrics with up to 150 labels per metric.
- Integration of PromQL, allowing users to use Prometheus query language within the CloudWatch console and Managed Grafana.
- Automatic enrichment of ingested metrics with AWS resource metadata such as account ID, Region, and resource tags.
- Support for high-cardinality metrics with up to 150 labels per metric.
- Integration of PromQL, allowing users to use Prometheus query language within the CloudWatch console and Managed Grafana.
- Automatic enrichment of ingested metrics with AWS resource metadata such as account ID, Region, and resource tags.
At GrafanaCON 2026, Grafana Labs announced significant updates including the launch of Grafana 13 and a major architectural overhaul for Loki. The new Loki design moves away from replication-at-ingestion toward using Kafka as a durability layer to reduce data duplication and improve query performance. Additionally, the company introduced GCX, a new CLI tool in public preview designed to integrate observability data directly into agentic development environments like Claude Code and Cursor, allowing engineers to resolve production issues without leaving their coding tools.
:
- Loki rearchitected with Kafka to reduce storage overhead and improve query speed.
- Introduction of GCX CLI for seamless observability integration within AI coding agents.
- Launch of Grafana 13 featuring dynamic dashboards and expanded data source support.
- New AI Observability product in public preview for monitoring LLM applications.
:
- Loki rearchitected with Kafka to reduce storage overhead and improve query speed.
- Introduction of GCX CLI for seamless observability integration within AI coding agents.
- Launch of Grafana 13 featuring dynamic dashboards and expanded data source support.
- New AI Observability product in public preview for monitoring LLM applications.
