Leonel says eBay’s business reliability platform combines site reliability practices with business metrics such as impressions, clicks, and sales. Only 3% of observed incidents and anomalies were problems that cost money, yet investigating the rest consumed time. More complex thresholds risked missing real issues, so the team sought to automate investigation practices.
Agentic Monitoring in Production
Speakers
Senior engineering manager Leonel Candido da Silva and senior software engineer Sujith N S of eBay describe their production alert investigation system at Agent Conf 2026, hosted by Callstack.
Sujith says the team focused on one decision: whether an alert should be escalated, and what an on-call engineer needs to make that call. Leonel explains that they split the work into a diagnostic agent, which uses documentation to create a structured plan, and an enrichment agent, which checks live metrics and dimensions. The enriched alert goes to the engineer, who retains the escalation decision.
The system gives engineers troubleshooting steps and answers questions about whether a signal persists, where it occurs, which business segments are affected, and what changed. The diagnosis plan links to source documentation, while the enriched message lets engineers return to dashboards and verify the data. In an eBay Ads example, revenue and GMV fell alongside sales and transactions, with web users declining while mobile was unaffected.
Sujith says GPT-5 produced good summaries in staging, but at eBay’s scale it had high latency and timed out in pre-production. The team switched to GPT-4, which he says responded 50 times faster and was sufficient for the analysis. Their deployment supports 22 billion daily impressions and about $7 million in daily ad revenue.
The team learned to scope the decision first, split the work when the model could not take all the context, and choose a model for predictable production behavior. Leonel says investigation time fell from an average of 20 to 30 minutes to under five minutes, making investigations 70% faster. Engineers still validate the findings and decide whether to escalate.
Takeaways
- Start with the human decision the system should support, then work backward to the evidence needed.
- Split document-based planning from live data analysis when one model cannot reliably use all the context.
- Choose a model based on latency and reliability in production, not just summary quality in staging.
- Link recommendations to source documents and dashboards so engineers can verify them.
- Keep consequential escalation decisions with the on-call engineer while automation reduces triage work.
Mentioned in this talk
Search inside this talk
What was claimed 14
- role atLeonel Candido da Silva is senior engineering manager at
eBay
“I'm a senior engineering manager there”
0:14inAI Agents for Incident Triage at eBayYouTube Verified3 sources· Talk
- built
“our journey building agentic monitoring in production at eBay”
YouTube Unverified1 source· Talk
- role atSujith N S is senior software engineer at
eBay
“I'm a senior software engineer at eBay.”
YouTube Unverified1 source· Talk
- uses
“The first agent we developed was the diagnostic agent.”
YouTube Unverified1 source· Talk
- featureDiagnostic agent: Uses internal resources such as wiki pages and README files to devise a structured diagnosis plan
“It uses them to devise a structured diagnosis plan.”
YouTube Unverified1 source· Talk
- uses
“The next agent in our workflow is the enrichment agent.”
YouTube Unverified1 source· Talk
- featureEnrichment agent: Uses real-time metrics and dimensions to interpret and enrich alerts
“It looks at the current metrics.”
YouTube Unverified1 source· Talk
- featureproduct-led growth: Sellers pay for it when an item is sold
“a product sellers pay for when an item is sold”
YouTube Unverified1 source· Talk
- uses
“using GPT-5 to create the summary”
YouTube Unverified1 source· Talk
- metricGPT-4: Answers 50 times faster than GPT-5
“It answers 50 times faster than GPT-5”
YouTube Unverified1 source· Talk
- uses
“GPT-4 was good enough, and the response time was great.”
YouTube Unverified1 source· Talk
- metricAgentic monitoring workflow: 70% faster investigations
“We got 70% faster investigations.”
YouTube Unverified1 source· Talk
- metricAgentic monitoring workflow: Reduced investigation time from 20 to 30 minutes to less than five minutes
“it takes less than five minutes”
YouTube Unverified1 source· Talk
- featureAgentic monitoring workflow: Investigates alerts while the engineer decides whether to escalate
“the agent is responsible for doing the investigation, and the engineer is responsible for deciding whether to escalate”
YouTube Unverified1 source· Talk









