DATA OPS

Correlate a BigQuery metric anomaly with Honeycomb traces before paging

When a BigQuery latency or error metric spikes, it queries Honeycomb for the matching time window to find the slowest traces and offending services.

CategoryData Ops
Enginesim
Difficultyadvanced
Triggerschedule
Steps6
Setup~25 min

How it runs

The automated pipeline, trigger to output.

  • Trigger15-minute schedule fires
  • ActionDetect metric spike over baseline in BigQueryGoogle BigQueryBigQuery
  • ActionQuery Honeycomb for slow traces in the same windowHoneycomb
  • LogicBranch on whether traces confirm a regression
  • ActionPage on-call via PagerDuty with correlated evidencePagerDutyPagerDuty
  • OutputPost low-priority Slack note when unconfirmedSlack

What it does

It watches a service-health metric in BigQuery and, on a spike, immediately cross-references Honeycomb traces from the same minute window. It surfaces the slowest operations and the services contributing most to the anomaly, then decides whether to page. If the traces show a genuine backend regression it fires PagerDuty with the correlated evidence attached; if traces look clean it downgrades to a Slack heads-up instead.

When to use it

Use it when your warehouse metrics and your tracing data tell two halves of the same story and you want them stitched together automatically. It cuts the noisy 3am page when the metric blip was just a reporting lag rather than a real outage.

How it works

  1. 1A schedule polls the metric every 15 minutes.
  2. 2BigQuery returns the metric value and detects a spike over baseline.
  3. 3Honeycomb is queried for the same window to rank slow traces and services.
  4. 4A logic step decides: traces confirm a regression or not.
  5. 5Confirmed cases page PagerDuty with the correlated evidence.
  6. 6Unconfirmed cases post a low-priority Slack note for visibility.

Set it up

What you configure once, before turning it on.

  1. 1
    Connect BigQueryDatasets, queries, schemas.
  2. 2
    Connect HoneycombDistributed traces and queries.
  3. 3
    Connect PagerDutyIncidents, on-call, escalations.
  4. 4
    Connect SlackChannels, DMs, threads, mentions.
  5. 5
    Set each agent's modelWe leave models unset so you pick the tier — fast + cheap, or top-quality.
  6. 6
    Tune it to your dataEdit the prompts, filters, and field mappings so it matches how your team works.
  7. 7
    Test, then turn it onRun once against a sample, confirm the output, then enable the trigger.

Run this workflow in your colony.

14-day trial. No DevOps. No Sales call. Provisioned in under a minute.