Use EBS* instead of Disk* metrics in EC2 dashboards and alerts

[tommyers-elastic]

Proposed commit message

Most if not all general purpose instance types use nitro/EBS instead of physical disks. we swap existing usages of Disk* metrics e.g. DiskWriteOps with the equivalent EBS* metric from the EC2 namespace e.g. EBSWriteOps.

Checklist

• I have reviewed tips for building integrations and this pull request is aligned with them.
• I have verified that all data streams collect metrics or logs.
• I have added an entry to my package's changelog.yml file.
• I have verified that Kibana version constraints are current according to guidelines.
• I have verified that any added dashboard complies with Kibana's Dashboard good practices

Author's Checklist

• [ ]

How to test this PR locally

Related issues

Screenshots

[Copilot]

Pull request overview

Updates the AWS EC2 OTel package’s Kibana assets to use EC2 EBS* metrics (instead of Disk*) for storage-related dashboards and alerting, aligning the integration with Nitro/EBS-backed instance behavior.

Changes:

• Updated the EC2 dashboard ESQL queries and labels from Disk* to EBS* metrics (bytes/ops) and renamed related panel/layer IDs.
• Added new alerting rule templates for high EBS read/write throughput using EBSReadBytes / EBSWriteBytes.
• Removed the previous local disk throughput alert templates.

Reviewed changes

Copilot reviewed 4 out of 5 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
packages/aws_ec2_otel/kibana/dashboard/aws_ec2_otel-45f45575-d519-4a70-a50c-2195c0c9f916.json	Replaces Disk* metric usage with EBS* in dashboard queries/labels and updates panel identifiers.
packages/aws_ec2_otel/kibana/alerting_rule_template/aws_ec2_otel-high-ebs-write-throughput.json	Adds managed alert template for high EBS write throughput (EBSWriteBytes).
packages/aws_ec2_otel/kibana/alerting_rule_template/aws_ec2_otel-high-ebs-read-throughput.json	Adds managed alert template for high EBS read throughput (EBSReadBytes).
packages/aws_ec2_otel/kibana/alerting_rule_template/aws_ec2_otel-high-disk-write-throughput.json	Removes the previous local disk write throughput alert template.
packages/aws_ec2_otel/kibana/alerting_rule_template/aws_ec2_otel-high-disk-read-throughput.json	Removes the previous local disk read throughput alert template.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[infra-vault-gh-plugin-prod]

💚 Build Succeeded

• Buildkite Build
• Commit: 40427d9

[jakubgalecki0]

@tommyers-elastic please update README since alerts changed

You can generate with elastic-package build

## Alerting Rule Template
{{alertRuleTemplates}}

[tommyers-elastic]

@jakubgalecki0 done. but how come the pre-rendered README wasn't committed before?

[github-actions]

✅ Elastic Docs Style Checker (Vale)

No issues found on modified lines!

---

The Vale linter checks documentation changes against the Elastic Docs style guide. To use Vale locally or report issues, refer to Elastic style guide for Vale.

[jakubgalecki0]

@jakubgalecki0 done. but how come the pre-rendered README wasn't committed before?

@tommyers-elastic it's my bad I thought I did commit them. I will create PR with docs for remaining packages soon

[elastic-vault-github-plugin-prod]

✅ All changelog entries have the correct PR link.

[elasticmachine]

💚 Build Succeeded

• Buildkite Build
• Commit: 77569f0

History

• 💚 Build #45113 succeeded 40427d9

[elastic-vault-github-plugin-prod]

Package aws_ec2_otel - 0.6.0 containing this change is available at https://epr.elastic.co/package/aws_ec2_otel/0.6.0/