- During an investigation: Nexus queries your sources to confirm or rule out a hypothesis. It’s the evidence that carries the most weight, and verifying against live system state is what gives an investigation the most conviction in a finding.
- In the agent: ask the agent what your systems are doing, from Slack, the dashboard, or the mobile app. It queries the same sources to answer, whether or not there’s an incident open.
What you can connect
Connect a provider to bring several data sources at once, or connect a data source directly. ProvidersAWS
CloudWatch, EKS, OpenSearch, and RDS.
Google Cloud
Cloud Logging, Cloud Monitoring, Cloud Trace, and GKE clusters.
Grafana
Loki, Prometheus, Tempo, Pyroscope, and CloudWatch.
Coralogix
Logs, metrics, traces, and dashboards.
CrowdStrike Falcon LogScale
Logs and dashboards from your repositories and views.
Datadog
Logs, metrics, traces, error tracking, events, and dashboards.
Elasticsearch
Logs from your index patterns.
Honeycomb
Traces and spans from your environments.
Kubernetes
Live cluster state: what was running, what was failing, and why.
MySQL
Read-only SQL queries.
New Relic
Logs, metrics, APM traces, and dashboards.
OpenSearch
Logs from your index patterns.
PostgreSQL
Read-only SQL queries.
Splunk
Logs, metrics, and dashboards.
Splunk Observability Cloud
Metrics and dashboards.
Sumo Logic
Logs and metrics.
How telemetry is modeled
Some tools host others. Connect Grafana once, and Nexus can discover the data sources behind it: Loki for logs, Prometheus for metrics, Tempo for traces, and more. AWS works the same way: it exposes accounts and regions, then CloudWatch, EKS clusters, OpenSearch domains, and RDS databases. So does Google Cloud, which exposes projects, and the GKE clusters running in them. You connect the provider once, then choose which of the discovered data sources to enable. The Grafana stack is connected this way only: there’s no separate Loki, Prometheus, Tempo, or Pyroscope entry in the connect flow. Connect Grafana, and they come with it, using Grafana’s own credentials. Other tools are connected directly and stand on their own. Some data sources work either way: a PostgreSQL database or a Kubernetes cluster can be connected directly or discovered behind a provider.Capabilities
Each data source provides one or more capabilities, which is what Nexus uses it for:Enabling data sources
Each data source can be enabled or disabled, which controls whether Nexus can use it. Which state it starts in depends on how the data source arrived:- Data sources discovered through a provider start disabled, so you opt in deliberately.
- Data sources you connect directly start enabled.
Learning your stack
Nexus doesn’t query blindly. For each connected data source we continually learn how to query it well in your environment. We discover its real labels and fields, learn the query patterns in your own dashboards, and remember what worked in past investigations. That’s what lets a query filter on the attributes you actually use and reach for sensible defaults, instead of guessing against an unfamiliar stack. Routing a question to the right data source, translating it into the right query language, and the guidance and memory the system builds over time all sit behind this. See How telemetry works for the full picture.FAQs
Do you store or ingest our telemetry data?
Do you store or ingest our telemetry data?
No. We connect to the observability tools you already run and query them on demand; there’s no need to ship
telemetry to us or keep a copy. The goal is to become an expert user of your existing stack, not to replace it.
Can you query self-hosted or private telemetry?
Can you query self-hosted or private telemetry?
Yes. For a data source that isn’t exposed to the public internet, such as a Loki, Prometheus, or VictoriaMetrics
instance inside your VPC, run a proxy in your network and attach the data source to it.
Queries travel over an outbound-only, encrypted tunnel, so you never open inbound ports.
Do we need to build a service catalog first?
Do we need to build a service catalog first?
No. Nexus learns each source by exploring it and making test queries, so connecting the source is enough to get
started. A well-built Catalog can improve results, but it isn’t required.
Related
How telemetry works
Routing, query planning, guidance, and memory.
How investigations work
How telemetry queries become evidence in a finding.
Troubleshooting
Why a data source’s queries fail, and what to do about it.