Monitoring Claude Code/Cowork at scale with OTel in Elastic

Elastic's InfoSec team has developed a robust monitoring pipeline for AI coding assistants like Claude Code and Cowork to address the visibility challenges posed by autonomous agents in engineering workflows. By leveraging native OpenTelemetry (OTel) capabilities, security teams can monitor agent actions—such as shell command execution and API calls—in real-time to support threat detection, compliance, and incident response. The article outlines two primary architectural approaches for ingesting