Certification preparation
Elastic Certified Observability Engineer Exam Preparation
A 3-day, 24-hour course with hands-on labs to build observability for logs, metrics, APM and uptime, and prepare for the certification exam.
THE BIG PICTURE
About this course
The Elastic Certified Observability Engineer certification validates the ability to implement and operate observability using the Elastic Stack. It is awarded by Elastic and recognises practical skill in ingesting, analysing, and acting on logs, metrics, traces, and uptime data. Over three days you will practise setting up data ingestion with Elastic Agent and Beats, designing ingest pipelines, working with data streams and ILM, instrumenting applications for APM, configuring uptime monitors, and exploring data in Kibana. You will also create alerts, use machine learning for anomaly detection, and complete guided labs and exam-style tasks. The certification exam is purchased and scheduled directly with Elastic and is administered by Elastic. MindClick provides preparation and study support; the exam itself is booked with Elastic. Elastic owns the certification scheme. MindClick provides training and exam preparation and is not an accredited or authorised partner.
What you’ll learn
- Ingest logs and metrics using Elastic Agent, Beats, Fleet, and data streams
- Design and apply ingest pipelines for parsing, enrichment, and ECS mapping
- Instrument services with APM agents and analyse distributed traces and errors
- Configure uptime and synthetic monitoring and interpret monitor results
- Build effective Kibana visualisations and dashboards for observability use cases
- Create alerting rules and actions to detect issues and support incident workflows
- Apply machine learning jobs for anomaly detection on logs and metrics
- Practise exam-style tasks and plan next steps to sit the certification exam
A CLEAR PATH FORWARD
3-day course agenda
3 instructor-led days (24 contact hours) mapped to the exam domains. Each day combines short concept sessions, hands-on practice on a running case study and exam-style questions.
- Learning route
- 3 recommended days
- Practical work
- 3 guided activities
- Finish with
- Mock exam + certification exam
Take a look at each day. Open a section to see the topics and practical work.
Day 1Ingesting and structuring observability dataLogging, metrics, data ingestion and processing
What we’ll cover
- 09:00–10:30 · Course orientation, exam overview, and observability architecture
- 10:45–12:15 · Data ingestion: Elastic Agent, Beats, Fleet, and data streams
- 13:15–14:30 · Parsing and enrichment: ingest pipelines, grok, dissect, ECS mapping
- 14:45–15:45 · Metrics collection and visualisation basics
- 16:00–16:30 · Index lifecycle management and storage design for observability
- 16:30–17:30 · Exam-style practice questions and lab review
Put it into practice
Configure an Elastic Agent policy in Fleet to ship logs and metrics from a sample host, then build an ingest pipeline to parse fields to ECS and apply ILM. Validate data flow and mappings in Kibana.
You’ll take away
Working Fleet policy, ingest pipeline, and ILM policy saved in the lab
Day 2APM, uptime, and analysis in KibanaAPM, uptime, data exploration, visualisation, and alerting fundamentals
What we’ll cover
- 09:00–09:30 · Recap and Q&A on ingestion, parsing, and ILM
- 09:30–10:45 · APM agents, distributed tracing, and service maps
- 11:00–12:15 · Log correlation, traces, and error analysis workflows
- 13:15–14:30 · Uptime and synthetic monitoring: monitors, schedules, and results
- 14:45–15:45 · Kibana dashboards, Lens, and observability apps
- 16:00–16:30 · Alerting concepts: rules, connectors, throttling, and actions
- 16:30–17:30 · Exam-style practice questions and discussion
Put it into practice
Instrument a sample service with an APM agent, enable distributed tracing, and create HTTP and browser monitors. Build a dashboard to correlate logs, metrics, and traces and verify alert triggers.
You’ll take away
APM-instrumented service, uptime monitors, and saved dashboards
Day 3Operations, ML, alerting, and exam readinessMachine learning, advanced alerting, troubleshooting, and exam preparation
What we’ll cover
- 09:00–09:30 · Recap and Q&A on APM, uptime, and dashboards
- 09:30–10:45 · Machine learning for anomaly detection on logs and metrics
- 11:00–12:15 · Troubleshooting pipelines, transforms, and permissions
- 13:15–14:15 · Advanced alerting, cases, and incident workflows
- 14:25–15:00 · Performance optimisation and scaling considerations
- 15:00–16:15 · Timed mock exam (hands-on tasks mirroring exam domains)
- 16:15–17:30 · Mock debrief, personal study plan, and exam booking guidance
Put it into practice
Create ML jobs for high-cardinality logs and metric anomalies, then build alert rules and route actions to connectors. Complete a timed mock exam and review solutions and marking expectations.
You’ll take away
Completed mock exam attempt and personalised study plan
Bring it all together
Certification exam: Elastic Certified Observability Engineer, awarded by Elastic. Confirm the current exam format with the awarding body when you book. Every attendee also receives a MindClick certificate of completion for 24 contact hours.
What you receive
You earn two separate credentials. The sample shows the MindClick training certificate.
- MindClick certificate of completion: 3 days, 24 contact hours, issued to every attendee who completes the course.
- Elastic Certified Observability Engineer: issued by Elastic when you meet its requirements and pass the exam.
Before you choose your learning route
Session timings are indicative; the trainer may adjust them for the group. Exam details reflect the awarding body’s published information at the time of writing; confirm the current version when you book.
Elastic owns this certification scheme. MindClick provides training and exam preparation and is not an accredited or authorised partner of Elastic.
Fees
| Delivery format | Fee per learner | Exam fee |
|---|---|---|
| Live online | $2,800 USD | Included |
| Classroom | $4,500 USD | Included |
One awarding-body certification exam attempt is included in the training fee. Confirm the current fee, any applicable tax and what the fee covers in writing before you pay.
Prerequisites
- No formal prerequisites are published by Elastic. Recommended: familiarity with Elasticsearch and Kibana, basic YAML/JSON, and 6+ months of hands-on experience with logs or metrics ingestion; bring a laptop with a modern browser and admin rights.
Who is this course for?
- SREs and DevOps engineers implementing observability on Elastic.
- Engineers configuring Elastic Agent integrations and ingest pipelines.
- Practitioners validating end-to-end observability skills.
FIND YOUR START
Confirmed batch starts
Choose a published start, then review your offer in the same enrollment flow. A start date is not the full timetable or a seat reservation.
Choose your country & monthStarts
- Training location
- Manama, Bahrain
- Local timezone
- Asia/Bahrain
Joining details and full session timetable to be supplied.
Starts
- Training location
- Cairo, Egypt
- Local timezone
- Africa/Cairo
Joining details and full session timetable to be supplied.
Starts
- Training location
- Kuwait City, Kuwait
- Local timezone
- Asia/Kuwait
Joining details and full session timetable to be supplied.
Starts
- Training location
- Muscat, Oman
- Local timezone
- Asia/Muscat
Joining details and full session timetable to be supplied.
Starts
- Training location
- Doha, Qatar
- Local timezone
- Asia/Qatar
Joining details and full session timetable to be supplied.
Starts
- Training location
- Riyadh, Saudi Arabia
- Local timezone
- Asia/Riyadh
Joining details and full session timetable to be supplied.
Frequently asked questions
How long is the course?
3 days, 24 contact hours, normally 09:00 to 17:30 with breaks. The agenda follows the exam domains and the final day includes a mock exam.
Is the exam included?
Yes. Outside India the fee includes one certification exam attempt. Retakes are booked and paid directly with the awarding body.
What does this course cost?
Outside India this 3-day course is listed at USD 2,800 per learner for live online delivery and USD 4,500 for classroom delivery. Both fees include one certification exam attempt. Pricing for India is confirmed separately by an advisor. Taxes and the final offer are confirmed in writing before you pay.
Are there prerequisites?
No formal prerequisites are published by Elastic. Recommended: familiarity with Elasticsearch and Kibana, basic YAML/JSON, and 6+ months of hands-on experience with logs or metrics ingestion; bring a laptop with a modern browser and admin rights.
What certificate will I receive?
Two credentials. MindClick issues a certificate of completion for 24 contact hours to every attendee. Elastic issues the Elastic Certified Observability Engineer certification when you pass the exam and meet its requirements.
Is MindClick an accredited training partner for this certification?
MindClick provides training and exam preparation and is not an accredited or authorised partner of Elastic; the certification exam is purchased and administered by Elastic.
Where is classroom training delivered?
Singapore and Dubai are the priority classroom markets for this catalog. Classroom delivery is also available in the other listed countries, and live online delivery is available everywhere. Venues are confirmed per booking; a listed city is a training market, not an owned campus.
KEEP EXPLORING
More ways to move forward.
Related training from the course catalog.
Elasticsearch Engineer Training
This 4-day course builds practical skills in designing, indexing, querying, scaling, and operating a distributed search and analytics system.
Data Analysis with Kibana
A 4-day course on analysing data with a visual analytics interface: query, design charts and dashboards, explore time series, maps, ML and alerts.
Elastic Observability Engineer Training
A 4-day course where you ingest logs, metrics and traces, analyse them in dashboards, set alerts, and practise end-to-end incident workflows.
Elastic Security for SIEM
Four-day, 32-hour course to ingest data, query events, build dashboards, triage alerts, and hunt threats in a modern SIEM.