Skip to main content

Observability Tools Fall Short

Shannon Weyrick
NS1

As companies generate more data across their network footprints, they need network observability tools to help find meaning in that data for better decision-making and problem solving. It seems many companies believe that adding more tools leads to better and faster insights. Earlier this year, the research firm Enterprise Management Associates (EMA) found more than 35% of organizations used 11 or more tools for network operations, and more than 50% used six or more.

And yet, observability tools aren't meeting many companies' needs. In fact, adding more tools introduces new challenges. Only one in four companies say they are successful with their network observability tools, according to a recent EMA and NS1 survey of IT stakeholders, and just 15.2% can identify and fix every network issue before it harms the organization.

Observability strategies are being held back both by the strategies surrounding tool adoption, and the capabilities of the tools themselves. Companies are responding to increased data in ways that add complexity and cost, and networking teams aren't obtaining immediate insight from their observability tools, which leaves them unable to quickly find or remediate network issues.

Let's review the data surrounding these shortcomings:

More Data and More Tools Bring Growing Pains

Increasingly complex networks are now generating more data — 85% of firms report that they have recently increased the amount of data they collect — and many companies are eager to take advantage of this increase. But companies can quickly run out of quota or storage space, resulting in either short retention times or substantial cost increases, and 43.5% of respondents say that data storage is now a major challenge.

Networking teams often respond to more data with more tools because their current ones aren't sufficient. More than 50% of respondents said they don't believe they have a single network observability tool that can fully answer any network question. Yet adding more tools often requires expensive customization, according to 54% of respondents, and even once set up is done, 46% say that conflicts between observability tools are a major problem.

Actionable Insights Remain a Work in Progress

Networking teams need observability tools to provide them with immediate insight so they can take action, but in practice, getting insights often requires excessive time and effort. Only one-third of respondents say obtaining a global view of network operations is very easy, and four in five say they are not fully satisfied with the ability to obtain insights from the tools they use. It's no surprise that 84.8% of respondents cannot detect every network issue before problems arise, and 88.8% cannot remediate every issue before problems occur.

Another significant problem is the high rate of false alarms — tool alerts that are ultimately meaningless but require investigation anyway. Remarkably, respondents report that 53% of all alerts are false alarms. This represents a tremendous time sink that likely contributes to three in four respondents saying they are not fully satisfied with their network tooling.

For companies overwhelmed by data storage and a failure to obtain insight, it may be worth deploying observability agents on the edge where data is generated. Such agents can analyze data in real time, so networking teams can bypass the challenges associated with backhauling potentially unused raw data and obtain real-time insight for rapid issue detection and remediation.

Moving forward, it is essential for the people who build network observability tools to understand what networking teams need. This includes deep but dynamically defined data collection with meaningful insights, especially regarding network and application performance, network security, and the end-user experience.

Shannon Weyrick is VP of Research at NS1

Hot Topics

The Latest

For fifteen years, observability lived downstream of everything else. Code shipped, something broke, an engineer went to the dashboards. The job was forensic. The pillars we built, such as logs, metrics, and traces, were designed for that role: tell a human what just happened, fast enough that they can make it stop. That role has quietly ended ...

Hybrid IT has become the standard operating model for enterprises — but that companies are still looking for the right hybrid IT mix, according to the 2026 State of the Data Center Report from CoreSite. After years of cloud migration and hybrid adoption, organizations are shifting their focus from deciding whether to use cloud, colocation or on-premises infrastructure to determining which workloads belong in each environment ...

Pilots are everywhere, stakeholders are seeking results, businesses are pushing for new tools, and IT teams are being asked to make AI secure, reliable, and useful at scale. But as organizations move from testing AI to operationalizing it, many are discovering that the biggest barrier is not the model, the use case, or even the budget. It is the file data foundation within ...

Fast or cheap? For most of my career in engineering, speed and quality sat on opposite ends of a seesaw. The "OR" in "fast or cheap" was non-negotiable. It was expected that pushing for faster releases meant that something in quality would give way. Tightening quality controls meant the schedule slipped. Every engineering leader I know has lived some version of that tradeoff ... The seesaw is starting to level out ...

I have been building enterprise software for more than 20 years ... One thing stays true across all of it: You do not find out your foundation is wrong during the crisis. You find out when the debt comes due. For a lot of organizations, that bill is arriving now. New research ... puts hard numbers on something practitioners have been sensing for a while. The telemetry problem isn't coming. It's already here ...

The rapid growth of AI workloads is pushing traditional log management approaches to their limits, according to The State of Log Management 2026 report from Dynatrace. Modern logs have become critical to understanding, validating, and securing AI-driven decisions, helping organizations ensure reliability, compliance, and performance at scale. However, the volume and complexity of AI telemetry are overwhelming legacy tools ...

For years, secure connectivity has relied on a familiar pattern: route traffic back to centralized gateways, inspect it, and then allow access. This model worked when applications lived in a handful of data centers and users were largely confined to offices. That model is now under strain. Applications are distributed across clouds, users connect from everywhere, and real-time workloads demand performance that centralized inspection points struggle to deliver. As traffic volumes grow and latency expectations shrink, routing everything through a small number of control points has become both a performance bottleneck and a resilience risk. The future of secure connectivity requires a different approach ...

The AI experimentation phase is over, and the private cloud is where enterprise AI workloads are being deployed for security and scale, according to Private Cloud Outlook 2026, a new report from Broadcom ... 2026 marks an acceleration into a full AI tipping point. The shift is being shaped by three forces — costs, complexity, and control — that public cloud environments are increasingly failing to address for production AI at scale. Key findings from the report include ...

44% of organizations have reported an outage in the past year tied to suppressed or ignored alerts, and 78% had at least one incident where no alert was fired at all ... Engineers learned about failures from customers. That gap between what our tools report and what our customers experience is the problem DevOps teams have been quietly solving with GenAI tooling, even as most enterprises continue to run their NOCs on manual alert triage ...

Cloud outages are usually described as technical failures. When a service goes down, a dependency breaks, or a region has issues, the focus immediately shifts to infrastructure. But if you look closely at how these incidents actually unfold, the root cause is rarely the technology itself. It is almost always tied to decisions made earlier, during design, implementation, or day-to-day operations. The system behaves the way it was built. The real question is how it was built ...

Observability Tools Fall Short

Shannon Weyrick
NS1

As companies generate more data across their network footprints, they need network observability tools to help find meaning in that data for better decision-making and problem solving. It seems many companies believe that adding more tools leads to better and faster insights. Earlier this year, the research firm Enterprise Management Associates (EMA) found more than 35% of organizations used 11 or more tools for network operations, and more than 50% used six or more.

And yet, observability tools aren't meeting many companies' needs. In fact, adding more tools introduces new challenges. Only one in four companies say they are successful with their network observability tools, according to a recent EMA and NS1 survey of IT stakeholders, and just 15.2% can identify and fix every network issue before it harms the organization.

Observability strategies are being held back both by the strategies surrounding tool adoption, and the capabilities of the tools themselves. Companies are responding to increased data in ways that add complexity and cost, and networking teams aren't obtaining immediate insight from their observability tools, which leaves them unable to quickly find or remediate network issues.

Let's review the data surrounding these shortcomings:

More Data and More Tools Bring Growing Pains

Increasingly complex networks are now generating more data — 85% of firms report that they have recently increased the amount of data they collect — and many companies are eager to take advantage of this increase. But companies can quickly run out of quota or storage space, resulting in either short retention times or substantial cost increases, and 43.5% of respondents say that data storage is now a major challenge.

Networking teams often respond to more data with more tools because their current ones aren't sufficient. More than 50% of respondents said they don't believe they have a single network observability tool that can fully answer any network question. Yet adding more tools often requires expensive customization, according to 54% of respondents, and even once set up is done, 46% say that conflicts between observability tools are a major problem.

Actionable Insights Remain a Work in Progress

Networking teams need observability tools to provide them with immediate insight so they can take action, but in practice, getting insights often requires excessive time and effort. Only one-third of respondents say obtaining a global view of network operations is very easy, and four in five say they are not fully satisfied with the ability to obtain insights from the tools they use. It's no surprise that 84.8% of respondents cannot detect every network issue before problems arise, and 88.8% cannot remediate every issue before problems occur.

Another significant problem is the high rate of false alarms — tool alerts that are ultimately meaningless but require investigation anyway. Remarkably, respondents report that 53% of all alerts are false alarms. This represents a tremendous time sink that likely contributes to three in four respondents saying they are not fully satisfied with their network tooling.

For companies overwhelmed by data storage and a failure to obtain insight, it may be worth deploying observability agents on the edge where data is generated. Such agents can analyze data in real time, so networking teams can bypass the challenges associated with backhauling potentially unused raw data and obtain real-time insight for rapid issue detection and remediation.

Moving forward, it is essential for the people who build network observability tools to understand what networking teams need. This includes deep but dynamically defined data collection with meaningful insights, especially regarding network and application performance, network security, and the end-user experience.

Shannon Weyrick is VP of Research at NS1

Hot Topics

The Latest

For fifteen years, observability lived downstream of everything else. Code shipped, something broke, an engineer went to the dashboards. The job was forensic. The pillars we built, such as logs, metrics, and traces, were designed for that role: tell a human what just happened, fast enough that they can make it stop. That role has quietly ended ...

Hybrid IT has become the standard operating model for enterprises — but that companies are still looking for the right hybrid IT mix, according to the 2026 State of the Data Center Report from CoreSite. After years of cloud migration and hybrid adoption, organizations are shifting their focus from deciding whether to use cloud, colocation or on-premises infrastructure to determining which workloads belong in each environment ...

Pilots are everywhere, stakeholders are seeking results, businesses are pushing for new tools, and IT teams are being asked to make AI secure, reliable, and useful at scale. But as organizations move from testing AI to operationalizing it, many are discovering that the biggest barrier is not the model, the use case, or even the budget. It is the file data foundation within ...

Fast or cheap? For most of my career in engineering, speed and quality sat on opposite ends of a seesaw. The "OR" in "fast or cheap" was non-negotiable. It was expected that pushing for faster releases meant that something in quality would give way. Tightening quality controls meant the schedule slipped. Every engineering leader I know has lived some version of that tradeoff ... The seesaw is starting to level out ...

I have been building enterprise software for more than 20 years ... One thing stays true across all of it: You do not find out your foundation is wrong during the crisis. You find out when the debt comes due. For a lot of organizations, that bill is arriving now. New research ... puts hard numbers on something practitioners have been sensing for a while. The telemetry problem isn't coming. It's already here ...

The rapid growth of AI workloads is pushing traditional log management approaches to their limits, according to The State of Log Management 2026 report from Dynatrace. Modern logs have become critical to understanding, validating, and securing AI-driven decisions, helping organizations ensure reliability, compliance, and performance at scale. However, the volume and complexity of AI telemetry are overwhelming legacy tools ...

For years, secure connectivity has relied on a familiar pattern: route traffic back to centralized gateways, inspect it, and then allow access. This model worked when applications lived in a handful of data centers and users were largely confined to offices. That model is now under strain. Applications are distributed across clouds, users connect from everywhere, and real-time workloads demand performance that centralized inspection points struggle to deliver. As traffic volumes grow and latency expectations shrink, routing everything through a small number of control points has become both a performance bottleneck and a resilience risk. The future of secure connectivity requires a different approach ...

The AI experimentation phase is over, and the private cloud is where enterprise AI workloads are being deployed for security and scale, according to Private Cloud Outlook 2026, a new report from Broadcom ... 2026 marks an acceleration into a full AI tipping point. The shift is being shaped by three forces — costs, complexity, and control — that public cloud environments are increasingly failing to address for production AI at scale. Key findings from the report include ...

44% of organizations have reported an outage in the past year tied to suppressed or ignored alerts, and 78% had at least one incident where no alert was fired at all ... Engineers learned about failures from customers. That gap between what our tools report and what our customers experience is the problem DevOps teams have been quietly solving with GenAI tooling, even as most enterprises continue to run their NOCs on manual alert triage ...

Cloud outages are usually described as technical failures. When a service goes down, a dependency breaks, or a region has issues, the focus immediately shifts to infrastructure. But if you look closely at how these incidents actually unfold, the root cause is rarely the technology itself. It is almost always tied to decisions made earlier, during design, implementation, or day-to-day operations. The system behaves the way it was built. The real question is how it was built ...