Professional skills
Elastic Observability Engineer Training
A 4-day course where you ingest logs, metrics and traces, analyse them in dashboards, set alerts, and practise end-to-end incident workflows.
THE BIG PICTURE
About this course
The Elastic Certified Observability Engineer credential is awarded by Elastic and recognises skills in implementing and operating observability on the Elastic Stack. Across four days you will ship logs, metrics, and traces with Elastic Agent and Fleet, align data to ECS, and process events with ingest pipelines. You will work in the Logs, Metrics/Infrastructure, APM, and Uptime/Synthetics apps, build dashboards and alerts, and practise correlation and triage workflows through hands-on labs in a sandboxed environment. The certification exam is purchased and scheduled directly with Elastic. Exam format, duration, and policies are set by the awarding body; refer to the official certification page for current details and availability. Elastic owns the certification scheme. MindClick provides training and exam preparation and is not an accredited or authorised partner.
What you’ll learn
- Install and manage Elastic Agent and Fleet to collect logs and system metrics
- Instrument an application to capture APM traces, spans, and errors
- Normalise events to ECS and build ingest pipelines with common processors
- Analyse telemetry in Logs, Metrics/Infrastructure, APM, and Uptime/Synthetics
- Create dashboards, alerts, and cases that support incident response
- Plan data lifecycle, retention, and access controls for observability data
- Prepare for the Elastic Certified Observability Engineer exam with practice tasks and a study plan
A CLEAR PATH FORWARD
4-day Elastic Observability Engineer Training agenda
4 instructor-led days (32 contact hours) mapped to the exam domains. Each day combines short concept sessions, hands-on practice on a running case study and exam-style questions.
- Learning route
- 4 recommended days
- Practical work
- 4 guided activities
- Finish with
- Mock exam + certification exam
Take a look at each day. Open a section to see the topics and practical work.
Day 1Ingesting logs and metrics with Elastic Agent and pipelinesIngestion, ECS, and data processing
What we’ll cover
- 09:00–09:30 · Course orientation, goals, and environment check
- 09:30–10:30 · Observability concepts, architecture, and data flow
- 10:45–12:15 · Elastic Agent and Fleet for logs and metrics ingestion
- 13:15–14:15 · Beats and shipper alternatives; data streams and ECS overview
- 14:15–15:00 · Index lifecycle and data retention for observability
- 15:15–16:15 · Ingest pipelines: grok, dissect, date, enrich, drop
- 16:15–16:45 · Exam-style practice questions on ingestion and ECS mapping
- 16:45–17:30 · Lab debrief and Q&A
Put it into practice
Configure Fleet, enroll agents, and ship Linux system logs and metrics to data streams. Build an ingest pipeline to parse and normalise events to ECS and verify fields in Discover.
You’ll take away
Working Fleet policy, agent deployment, and ECS-aligned ingest pipeline
Day 2APM, uptime, and correlation across telemetryAPM, synthetics, and actionable observability
What we’ll cover
- 09:00–09:20 · Day 1 recap and questions
- 09:20–10:30 · APM fundamentals: agents, tracers, sampling, service maps
- 10:45–12:15 · Instrument a sample app; ship traces, spans, and errors
- 13:15–14:15 · Uptime and synthetic monitoring: checks and browser tests
- 14:15–15:00 · Correlating logs, metrics, and traces for triage
- 15:15–16:00 · Enriching data: custom fields, ECS alignment, agent processors
- 16:00–16:30 · Exam-style practice questions on APM and synthetics
- 16:30–17:30 · Lab troubleshooting and debrief
Put it into practice
Deploy and instrument a microservice application, enabling tracing, error capture, and service maps. Add uptime checks and a basic synthetic browser journey, then correlate an incident across telemetry.
You’ll take away
Instrumented app with APM data and synthetics checks linked to services
Day 3Visualising, alerting, and collaborative responseDashboards, alerting, and incident workflows
What we’ll cover
- 09:00–09:20 · Day 2 recap and discussion
- 09:20–10:30 · Explore data in Logs, Metrics/Infrastructure, and APM apps
- 10:45–12:15 · Build dashboards and Lens visualisations for observability
- 13:15–14:00 · Alerting: rule types, thresholds, schedules, and actions
- 14:00–14:45 · Cases, notifications, and collaboration workflows
- 15:00–16:00 · Anomaly detection for metrics and log rate spikes (overview and setup)
- 16:00–16:30 · Exam-style practice questions on dashboards and alerting
- 16:30–17:30 · Lab: end-to-end incident triage walkthrough
Put it into practice
Create a service health dashboard and wire alerts to a notification channel. Run a guided incident from alert to case closure using correlated logs, metrics, and traces.
You’ll take away
Service health dashboard, alert rules, and a documented triage workflow
Day 4Managing data, scale, and exam readinessData lifecycle, access control, troubleshooting, and exam practice
What we’ll cover
- 09:00–09:20 · Day 3 recap and plan for the day
- 09:20–10:30 · Managing data at scale: data streams, ILM, rollover, sizing
- 10:45–12:15 · Access control and tenancy: roles, spaces, API keys, data views
- 13:15–14:00 · Optimising ingestion and pipeline performance; monitoring Fleet
- 14:00–14:45 · Service health, SLOs, and reporting basics
- 15:00–16:00 · Troubleshooting playbook: common ingest, APM, and alerting issues
- 16:00–16:45 · Mock exam: timed, scenario-driven hands-on tasks
- 16:45–17:30 · Review, personalised study plan, and exam booking guidance
Put it into practice
Tune ILM policies and shard settings for an observability workload, and apply role-based access for a team. Complete a timed mock exam and review solutions and strategies.
You’ll take away
ILM and RBAC configurations plus a personal exam study and booking plan
Bring it all together
Certification exam: Elastic Certified Observability Engineer, awarded by Elastic. Confirm the current exam format with the awarding body when you book. Every attendee also receives a MindClick certificate of completion for 32 contact hours.
What you receive
You earn two separate credentials. The sample shows the MindClick training certificate.
- MindClick certificate of completion: 4 days, 32 contact hours, issued to every attendee who completes the course.
- Elastic Certified Observability Engineer: issued by Elastic when you meet its requirements and pass the exam.
Before you choose your learning route
Session timings are indicative; the trainer may adjust them for the group. Exam details reflect the awarding body’s published information at the time of writing; confirm the current version when you book.
Elastic owns this certification scheme. MindClick provides training and exam preparation and is not an accredited or authorised partner of Elastic.
Fees
| Delivery format | Fee per learner | Exam fee |
|---|---|---|
| Live online | $2,800 USD | Included |
| Classroom | $4,500 USD | Included |
One awarding-body certification exam attempt is included in the training fee. Confirm the current fee, any applicable tax and what the fee covers in writing before you pay.
Prerequisites
- Recommended experience: familiarity with the Elastic Stack, logging and metrics fundamentals, one programming language for APM instrumentation, and basic Linux shell and container usage. Bring a laptop with admin rights, a modern browser, and stable internet access.
Who is this course for?
- SREs and DevOps engineers building unified observability.
- Software engineers instrumenting applications with APM.
- System administrators consolidating logs, metrics, and uptime data.
- Engineers preparing for the Elastic Certified Observability Engineer exam.
FIND YOUR START
Confirmed batch starts
Choose a published start, then review your offer in the same enrollment flow. A start date is not the full timetable or a seat reservation.
Choose your country & monthStarts
- Training location
- Manama, Bahrain
- Local timezone
- Asia/Bahrain
Venue and full session timetable to be supplied.
Starts
- Training location
- Cairo, Egypt
- Local timezone
- Africa/Cairo
Venue and full session timetable to be supplied.
Starts
- Training location
- Kuwait City, Kuwait
- Local timezone
- Asia/Kuwait
Venue and full session timetable to be supplied.
Starts
- Training location
- Muscat, Oman
- Local timezone
- Asia/Muscat
Venue and full session timetable to be supplied.
Starts
- Training location
- Doha, Qatar
- Local timezone
- Asia/Qatar
Venue and full session timetable to be supplied.
Starts
- Training location
- Riyadh, Saudi Arabia
- Local timezone
- Asia/Riyadh
Venue and full session timetable to be supplied.
Frequently asked questions
How long is the course?
4 days, 32 contact hours, normally 09:00 to 17:30 with breaks. The agenda follows the exam domains and the final day includes a mock exam.
Is the exam included?
Yes. Outside India the fee includes one certification exam attempt. Retakes are booked and paid directly with the awarding body.
What does this course cost?
Outside India this 4-day course is listed at USD 2,800 per learner for live online delivery and USD 4,500 for classroom delivery. Both fees include one certification exam attempt. Pricing for India is confirmed separately by an advisor. Taxes and the final offer are confirmed in writing before you pay.
Are there prerequisites?
Recommended experience: familiarity with the Elastic Stack, logging and metrics fundamentals, one programming language for APM instrumentation, and basic Linux shell and container usage. Bring a laptop with admin rights, a modern browser, and stable internet access.
What certificate will I receive?
Two credentials. MindClick issues a certificate of completion for 32 contact hours to every attendee. Elastic issues the Elastic Certified Observability Engineer certification when you pass the exam and meet its requirements.
Is MindClick an accredited training partner for this certification?
MindClick provides training and exam preparation and is not an accredited/authorised partner of Elastic; the exam is administered by Elastic.
Where is classroom training delivered?
Singapore and Dubai are the priority classroom markets for this catalog. Classroom delivery is also available in the other listed countries, and live online delivery is available everywhere. Venues are confirmed per booking; a listed city is a training market, not an owned campus.
KEEP EXPLORING
More ways to move forward.
Related training from the course catalog.
Elasticsearch Engineer Training
This 4-day course builds practical skills in designing, indexing, querying, scaling, and operating a distributed search and analytics system.
Data Analysis with Kibana
A 4-day course on analysing data with a visual analytics interface: query, design charts and dashboards, explore time series, maps, ML and alerts.
Elastic Security for SIEM
Four-day, 32-hour course to ingest data, query events, build dashboards, triage alerts, and hunt threats in a modern SIEM.
Elastic Security for Endpoint
Investigate host-based alerts from Elastic Defend, enrich security data, and hunt threats on the endpoint.