Telemetry Ingestion and GenAI Forensic Analysis
Introduction
This document explains the steps to configure the application to collect minute-level process telemetry and also provides the GenAI-driven forensics across the observability stack.
It defines the centralized data model, retention controls, operational safeguards, and integration touchpoints required to standardize collection and analysis within OpenSearch. To establish a single source of interfaces that accelerate troubleshooting, support proactive investigations, and remain configurable for evolving operational needs.
The document’s configuration enables the following actions:
* Collects ps -ef with per-process CPU% and MEM% every minute.
* Stores data in OpenSearch with a default 1-day retention (configurable for longer).
* Powers GenAI-driven forensics during CPU/MEM spikes using stored telemetry.
* Fetches forensics data directly from OpenSearch without running on-demand scripts.
* Collects the same dataset via DT (Dynatrace) and AppD (AppDynamics) connectors.