diff --git a/docs/apm/images/apm-service-group.png b/docs/apm/images/apm-service-group.png new file mode 100644 index 0000000000000..275b5a8662123 Binary files /dev/null and b/docs/apm/images/apm-service-group.png differ diff --git a/docs/apm/services.asciidoc b/docs/apm/services.asciidoc index 90ebff3d8ad71..7009aac04ffa8 100644 --- a/docs/apm/services.asciidoc +++ b/docs/apm/services.asciidoc @@ -12,3 +12,41 @@ and requires anomaly detection to be enabled. [role="screenshot"] image::apm/images/apm-services-overview.png[Example view of services table the APM app in Kibana] + +[float] +[[service-groups]] +==== Service groups + +preview::[] + +Group services together to build meaningful views that remove noise and simplify investigations across services. +Service groups are {kib} space-specific and available for any users with appropriate access. + +[role="screenshot"] +image::apm/images/apm-service-group.png[Example view of service group in the APM app in Kibana] + +To enable Service groups, open {kib} and navigate to **Stack Management** > **Advanced Settings** > **Observability**, +and enable the **Service groups feature**. + +To create a service group, navigate to **Observability** > **APM** > **Services** and select **Create group**. +Specify a name, color, and description. +Then, using the <>, specify a query to select services for the group. +Services that match the query within the last 24 hours will be assigned to the group. + +[NOTE] +==== +Once a service group has been saved, this list of services within it is static. +If a newly added service matches the KQL query, it will not be automatically added to the service group. +Similarly, if a service stops matching the KQL query, it will not be removed from the group. + +To update the list of services within a group, +edit the service group, click **Refresh** next to the KQL query, and click **Save group**. +==== + +**Examples** + +Not sure where to get started? Here are some sample queries you can build from: + +* Group services by environment--in this example, "production": `service.environment : "production"` +* Group services by name--this example groups those that end in "beat": `service.name : *beat` (matches services named "Auditbeat", "Heartbeat", "Filebeat", etc.) +* Group services with a high transaction duration in the last 24 hours: `transaction.duration.us >= 50000000`