As cited
Copy frozen at (site build).
Monitoring Claude Code/Cowork at scale with OTel in Elastic
No summary had been written when this copy was frozen.
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
ai security
Monitoring Claude Code/Cowork at scale with OTel in Elastic
Elastic's InfoSec team published a guide for monitoring Claude Code and Claude Cowork artificial intelligence (AI) agents using OpenTelemetry (OTel) and Elasticsearch to track agent activity across engineering workflows. The approach covers two deployment options: a self-managed EDOT OTel gateway or Elastic Cloud's managed OTLP endpoint, with custom field mappings and ingest pipelines to enable security analytics on telemetry data. Security use cases include tool invocation auditing, session reconstruction, permission decision analysis, cost anomaly detection, and correlation with endpoint detection and response (EDR) data.
Why it matters: Security teams running Claude Code or Claude Cowork internally need visibility into what these agents are doing with shell commands, file access, and application programming interface (API) calls to detect unauthorized data access, suspicious tool invocations, and unusual permission patterns; this guide enables that monitoring today.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
ai security
Monitoring Claude Code/Cowork at scale with OTel in Elastic
Elastic's InfoSec team published a guide for monitoring Claude Code and Claude Cowork artificial intelligence (AI) agents using OpenTelemetry (OTel) and Elasticsearch to track agent activity across engineering workflows. The approach covers two deployment options: a self-managed EDOT OTel gateway or Elastic Cloud's managed OTLP endpoint, with custom field mappings and ingest pipelines to enable security analytics on telemetry data. Security use cases include tool invocation auditing, session reconstruction, permission decision analysis, cost anomaly detection, and correlation with endpoint detection and response (EDR) data.
Why it matters: Security teams running Claude Code or Claude Cowork internally need visibility into what these agents are doing with shell commands, file access, and application programming interface (API) calls to detect unauthorized data access, suspicious tool invocations, and unusual permission patterns; this guide enables that monitoring today.
- Source published
- First seen by Cybersecurity Tracker