Elastic Uses AI Agents with APM to Perform Failure Investigations

On November 13, 2026, at 09:31, a post published on Juejin presented an approach written by Sohan Maheshwar and Carly Richmond from the Elastic engineering team that combines SpiceDB with Elasticsearch to deliver fine-grained authorization for retrieval-augmented generation, or RAG. The write-up explains that as soon as an organization first shares documents between its engineering and sales departments, the existing department-based filtering mechanism stops working. In that shared-document setting, access control and department filtering can no longer be relied on to keep content properly separated, and the proposed design is intended to address exactly this failure. The approach uses SpiceDB as the authorization layer for Elasticsearch RAG, with the goal of preserving fine-grained access control and filtering when documents are shared across teams rather than confined to a single group. At this point, the only publicly available material is this initial engineering introduction. No follow-up reports describe a shipped integration, benchmark results, or further updates to the approach, so the work remains at the design and explanation stage as presented in the post.