FAA BNATCS · Elastic Observability

Modernizing air traffic control observability

Peraton program briefing — unified platform, OpenTelemetry-first, deploy anywhere

Live demo otel-demo-a5630c AWS us-east-1

Agenda

Today's session

Demonstrate

Unified logs, metrics, traces + Security
RUM + distributed OTel traces
K8s reliability — SLOs, alerts, AI RCA
PromQL & ES|QL at scale

Discuss

Data sovereignty & multi-cloud deployment
Predictable economics & open standards
Roadmap — Private Link, Cross Cluster Search
Federal past performance & architecture

1 Live demo

2 Platform story

3 Roadmap

4 Q&A

Mission context

BNATCS modernization priorities

⚡ Reliability Resiliency & operational efficiency for NAS replacement

🛡 Sovereignty Control where mission telemetry resides

☁ Multi-cloud AWS · Azure · GCP + on-prem NAS

⟡ No lock-in OpenTelemetry · long program lifecycle

Peraton needs observability that scales with modernization — without proprietary agents, unpredictable SaaS billing, or siloed tools.

Platform

One platform — logs, metrics, traces, security

Three Serverless Projects · one Elastic Cloud org

Observability

otel-demo-a5630c

RUM · Browser OTel APM · Traces Logs · ES|QL Metrics · PromQL

Security

my-security-project

SIEM · Detections Alerts · Cases Endpoint · Cloud

Search

Search Serverless

App · doc search Vector · RAG ES|QL · analytics

Separate projects — same platform benefits: unified correlation, one ops model, AI across O11y · Security · Search

Cross Cluster Search links each Serverless Project — customers keep single-tier correlation and one ops model without shared cluster sizing.

Deployment options · click to compare architecture

Single data tier

Correlate trace IDs with audit & SIEM events — no cross-tool ETL

One ops model

One retention policy, one team, predictable economics at FAA scale

AI across all

Agent Builder, Workflows, NL dashboards — same platform

Deploy anywhere

Data sovereignty & deployment flexibility

Same Elastic stack on any cloud or on-prem — orange highlight marks where we're demoing today.

Demo today
AWS
GovCloud · us-east-1

Azure

Private Link

GCP

Private Service Connect

On-prem

Air-gapped · NAS

Elastic Cloud

Separate projects per AWS / Azure / GCP
Private Link & Private Service Connect
GovCloud · FedRAMP Moderate path
Serverless or hosted — same Kibana UX

Self-managed & hybrid

On-prem & air-gapped enclaves
ECH agents → Serverless projects
Cross Cluster Search across Serverless projects
Reindex from Remote — migrate without lock-in

Live demo

Interactive demo tracks

1

Platform

Unified O11y + Security, scale, roadmap

2

RUM + traces

Browser → backend · one trace.id · live sim

3

PromQL

OTel metrics · TSDB · native PromQL

4

K8s reliability

SLOs · alerts · workflows · AI RCA

5

Agent Skills

IDE & assistant-driven investigation

6

Elastic 3× AI

Kibana AI · demo chat · Cursor skills

Digital experience

RUM + OpenTelemetry traces

Operator console

documentLoad · click

Console API

HTTP · BFF spans

Sector data svc

query · retrieve

Same trace.id from operator click through API to backend — W3C traceparent, no proprietary RUM silo

14M+ Operator console browser spans (demo cluster)

1 trace Operator click → API → microservice

OTLP Same pipeline as backend — no proprietary RUM silo

Scale

Speed & scale at telemetry volume

OTel ingest

TSDB++

Query lang

GA

Retention

Tiered

Proven scale

PB+

GA Time-series ES|QL · PromQL

TSDB++ Ingest throughput · storage efficiency

Petabyte Proven federal & enterprise scale

Tiered Hot / warm / frozen retention

BNATCS generates high-cardinality OTel from K8s, NAS services, and comms — Elasticsearch is the ingestion engine, not an add-on.

Roadmap

What's shipping for long programs

✓ Shipped · demo today

TSDB++ & time-series ES|QL (GA)

NL dashboards in chat (TP)

GitOps / Terraform for Kibana

Reindex from Remote → Serverless

→ In flight · sovereignty

Azure Private Link · GCP PSC

Cross Cluster Search (GA)

Serverless audit trail

AutoOps for air-gapped (mid-term)

Symptom → SLO burn → Alert → Workflow → AI RCA

Next steps

Open standards. Deploy anywhere. One platform.

Pilot architecture workshop GovCloud / hybrid sizing OTel instrumentation guide

Live demo · Kibana otel-demo-a5630c · Elastic Observability Serverless