Update to Altertable

{
  "description": "Investigates OpenTelemetry logs and traces in Altertable using SQL. Use when analysis involves observability data, including debugging, trace correlation, or joins with business data.",
  "included_files": [
    {
      "relative_path": "agents/openai.yaml",
      "size_in_bytes": 129
    }
  ],
  "name": "investigate-opentelemetry",
  "skill_md_contents": "---\nname: investigate-opentelemetry\ncompatibility: Requires Altertable MCP server\ndescription: \"Investigates OpenTelemetry logs and traces in Altertable using SQL. Use when analysis involves observability data, including debugging, trace correlation, or joins with business data.\"\nmetadata:\n  author: Altertable\n  requires: \"altertable-mcp\"\n---\n\n# Investigate OpenTelemetry Logs and Traces\n\nUse SQL to investigate logs and traces.\n\n## Tables\n\nLogs:\n\n```sql\nopentelemetry.main.logs\n```\n\nTraces:\n\n```sql\nopentelemetry.main.spans\n```\n\n## Narrow the Query\n\nStart with the smallest useful query: time range, environment, service or deployment, then error/trace filters.\n\n## Filter Attributes\n\nResource attributes are stored in `resource_attributes` VARIANT. Span/log attributes are stored in `attributes` VARIANT.\n\nUse `variant_extract` for filters:\n\n```sql\nvariant_extract(resource_attributes, 'env') = 'production'\nvariant_extract(resource_attributes, 'k8s.pod.name') ILIKE 'api-%'\nvariant_extract(attributes, 'http.method') = 'POST'\nvariant_extract(attributes, 'http.route') = '/graphql'\n```\n\nFor numeric attributes, cast before comparing:\n\n```sql\nTRY_CAST(variant_extract(attributes, 'http.status_code') AS INTEGER) >= 500\n```\n\n## Search Messages\n\nUse the `@@` operator for full text search on indexed columns instead of `LIKE`/`ILIKE`. Only the `message` column is indexed for full text search:\n\n```sql\nmessage @@ 'timeout'\nmessage @@ 'connection refused'\nmessage @@ 'error'\n```\n\n## Filter by Time\n\nUse `timestamp` for log time filters:\n\n```sql\nSELECT *\nFROM opentelemetry.main.logs\nWHERE timestamp >= now() - INTERVAL '1 hour'\n  AND variant_extract(resource_attributes, 'env') = 'production'\n  AND service_name = 'api'\nORDER BY timestamp DESC\nLIMIT 500;\n```\n\nUse `start_time` for trace time filters:\n\n```sql\nSELECT *\nFROM opentelemetry.main.spans\nWHERE start_time >= now() - INTERVAL '1 hour'\n  AND variant_extract(resource_attributes, 'env') = 'production'\n  AND service_name = 'api'\nORDER BY start_time DESC\nLIMIT 100;\n```\n\n## Pivot by Trace ID\n\nPivot by `trace_id` when available:\n\n```sql\nSELECT *\nFROM opentelemetry.main.spans\nWHERE trace_id = '<trace-id>'\nORDER BY start_time ASC;\n```\n\n```sql\nSELECT *\nFROM opentelemetry.main.logs\nWHERE trace_id = '<trace-id>'\nORDER BY timestamp ASC;\n```\n"
}