Ontology-Driven Observability: Building an End-to-End Knowledge Graph at Netflix Scale
Netflix found a typical regression investigation took about four hours, mostly spent reconstructing relationships between systems like Atlas, Radar, Spinnaker, PagerDuty, incident.io and Slack that each named the same thing differently. It built an Observability Ontology on the W3C stack (RDF, OWL, SHACL, SPARQL), stored as a knowledge graph in QuipuDB, its homegrown distributed quad store built on the Rust key-value store redb. Enrichers, some LLM-based, turn noisy inputs into typed triples, every application is validated against a catalog of about 49,000 entries, and dependency edges are capped. A correlation engine scores chains across 13 signal types within a ten-minute window, discarding anything under 0.6 confidence, and an agentic AutoRCA system reads the graph to hand engineers ranked, evidence-backed hypotheses.
- Published
- 2026-10-16
- Scale
- ~65M concurrent streams (Paul vs. Tyson, Nov 2024), 2B+ requests/day, 38M+ real-time logging events/sec, ~49,000-entry software catalog, 13 signal types in the correlation engine
- Techniques
- knowledge graphs observability root cause analysis AI agents
- Stack
- RDF OWL SHACL SPARQL QuipuDB redb Rust LLMs