@dipseth/opensearch-logs 0.1.0

package/playbooks/error-investigation.yaml

@@ -0,0 +1,45 @@
+name: Error Investigation
+description: Deep dive into error patterns — counts, breakdowns, timeline, and correlation with latency.
+
+defaults:
+  env: production
+  hours: 4
+  limit: 20
+
+steps:
+  pattern_scan:
+    type: pattern-count
+    description: Scan all known incident patterns
+
+  error_breakdown:
+    type: errors
+    description: Full error breakdown by status, service, endpoint
+
+  error_histogram:
+    type: histogram
+    description: Error volume over time
+    depends_on: [error_breakdown]
+    args:
+      level: ERROR
+      interval: 30m
+
+  latency:
+    type: latency
+    description: Check if latency correlates with errors
+
+  error_timeline:
+    type: timeline
+    description: Chronological error events
+    depends_on: [error_breakdown]
+    args:
+      level: ERROR
+      limit: 50
+
+  five_hundred_samples:
+    type: search
+    description: Recent 500 error samples
+    depends_on: [error_breakdown]
+    args:
+      status: "5xx"
+      limit: 15
+    optional: true

package/playbooks/incident-triage.yaml

@@ -0,0 +1,32 @@
+name: Incident Triage
+description: Broad production investigation — error patterns, service health, latency, then sample errors from top offenders.
+
+defaults:
+  env: production
+  hours: 1
+  limit: 20
+
+steps:
+  patterns:
+    type: pattern-count
+    description: Scan all known incident patterns
+
+  errors:
+    type: errors
+    description: Error breakdown by status, service, and endpoint
+
+  services:
+    type: services
+    description: Per-service health table
+
+  latency:
+    type: latency
+    description: Overall and per-service latency percentiles
+
+  error_samples:
+    type: search
+    description: Recent error log samples
+    depends_on: [errors]
+    args:
+      level: ERROR
+      limit: 10

package/playbooks/post-deploy-validation.yaml

@@ -0,0 +1,24 @@
+name: Post-Deploy Validation
+description: Quick health check after a deployment — patterns, errors, and latency in a short window.
+
+defaults:
+  env: production
+  hours: 0.5
+  limit: 10
+
+steps:
+  patterns:
+    type: pattern-count
+    description: Check for known bad patterns
+
+  errors:
+    type: errors
+    description: Error summary
+
+  latency:
+    type: latency
+    description: Latency check
+
+  services:
+    type: services
+    description: Service health overview

package/playbooks/service-deep-dive.yaml

@@ -0,0 +1,42 @@
+name: Service Deep Dive
+description: Focused investigation of a single service — requires --service flag.
+
+defaults:
+  env: production
+  hours: 2
+  limit: 20
+
+steps:
+  overview:
+    type: count
+    description: Total log volume for this service
+
+  errors:
+    type: errors
+    description: Error breakdown for this service
+
+  latency:
+    type: latency
+    description: Latency percentiles for this service
+
+  error_timeline:
+    type: timeline
+    description: Chronological error events
+    depends_on: [errors]
+    args:
+      level: ERROR
+      limit: 30
+
+  recent_500s:
+    type: search
+    description: Recent 500 errors
+    depends_on: [errors]
+    args:
+      status: "5xx"
+      limit: 10
+
+  histogram:
+    type: histogram
+    description: Request volume over time
+    args:
+      interval: 15m