Building a Tool-Driven Triage Agent 100% Inside Elastic Agent Builder
Details
Join the Elastic Dallas User Group on Tuesday, Jule 21st for an exciting meetup.
We’ll feature a presentation from Venu Madhav Pentala followed by networking, refreshments, and pizza with the Dallas tech and Elastic community.
📅 Date: Tuesday, July 21st from 5:30-7:30 PM CT
📍 Location: Improving Dallas - 5445 Legacy Dr #100, Plano, TX 75024 (Google Maps)
🎤 Want to present at our next meetup? Email us at meetups@elastic.co
Are you interested in presenting your Elastic use case? We welcome 5-10 minute lightning talks, 45-minute deep dives, and everything in between. If you're interested, please send us an email at meetups@elastic.co.
📝Agenda:
- 5:30 pm: Doors open; say hi and eat some food.
- 6:00 pm: PipelineGuard: Building a Tool-Driven Triage Agent 100% Inside Elastic Agent Builder - Venu Madhav Pentala (AI Data Engineer)
- 6:45 pm: Networking & refreshments
- 7:30 pm: Event ends
💭 Talk Details:
PipelineGuard: Building a Tool-Driven Triage Agent 100% Inside Elastic Agent Builder - Venu Madhav Pentala (AI Data Engineer)
When cloud data pipelines fail, engineers often spend hours analyzing logs, searching for runbooks, and documenting incidents. PipelineGuard is an AI triage agent built entirely within Elastic Agent Builder that automates this process. Using time-series-aware ES|QL on real-time logs, it detects high-severity errors, retrieves remediation steps via vector search over engineering runbooks (RAG), and generates a professional triage report including root cause analysis and step-by-step instructions.
In this 30-minute session, I will walk through the architecture, demonstrate how the agent is composed natively in Agent Builder without external orchestration code, and present a live demo of a pg-sync failure scenario. I will also share design tradeoffs and lessons learned from building this for the Elasticsearch Agent Builder Hackathon 2026.
Audience Takeaways:
- A practical pattern for combining ES|QL log triage with semantic_text RAG within Agent Builder.
- Strategies for structuring tools and prompts to ensure reliable, action-ready triage reports.
- Insights into the capabilities and limitations of tool-driven agents in observability workflows.
Format: 25-minute walkthrough and live demo, followed by 5 minutes of Q&A.
***Demo Preview: ***https://www.loom.com/share/d20ec2f46ff5479e8d5fa9e1e2cc1765
