Presenter

Sanari
sanari.ai

Connections

Sanari overlay. Collector in their DC — poll, no inbound webhooks. Writes only through allow-listed runbooks after a human types APPROVE.

Pilot live

9

This demo tenant

Ready

13

Collector present, not bound

Not this SOW

4

HubSpot, Kafka admin, pager, SIEM

Catalog

Official marks. Click one to open the adapter.

Tickets

Jira Data Center

Connected (demo)

https://jira.sanari.ai · project BAU

Access
Poll 10s
Writes
Comment + transition

On-prem. This is the connector their admin will inspect. Cloud Jira is a different adapter.

Last poll · 27m 32s ago · sanari.ai demo

ServiceNow Incident

Connected (demo)

https://snow.sanari.ai · table incident

Access
Poll 10s
Writes
Work notes

Subprod only in the pilot. Dedupes against Jira when both fire.

Last poll · 27m 34s ago · sanari.ai demo

ServiceNow Change

Ready — collector

https://snow.sanari.ai · table change_request

Access
On execute
Writes
Attach / open change before runbook

HITL still sits in front. Change record is the CAB paper trail for every write.

sanari.ai demo — not production

Evidence

Prometheus

Connected (demo)

https://metrics.sanari.ai

Access
Read
Writes
None

DB CPU, saturation, session counts. Overlay — we do not replace their dashboards.

Last poll · 27m 29s ago · sanari.ai demo

Grafana

Connected (demo)

https://grafana.sanari.ai

Access
Read
Writes
None

Same metrics plane as Prometheus. Used when their NOC already lives in Grafana folders.

Last poll · 27m 30s ago · sanari.ai demo

OpenTelemetry

Connected (demo)

https://apm.sanari.ai

Access
Read
Writes
None

Traces and RED metrics. Vendor APM below maps to this adapter when they already pay for one.

Last poll · 27m 31s ago · sanari.ai demo

Elastic (ELK)

Ready — collector

https://elastic.sanari.ai

Access
Read
Writes
None

Log slice around the fault window. Elasticsearch + Logstash + Kibana as they run it.

sanari.ai demo — not production

OpenSearch

Ready — collector

https://logs.sanari.ai

Access
Read
Writes
None

AWS fork of the ELK adapter. Bind this or Elastic — not both.

sanari.ai demo — not production

New Relic

Ready — collector

https://nr.sanari.ai

Access
Read
Writes
None

APM alternate. Same evidence plane as OpenTelemetry / Dynatrace — pick the one they have.

sanari.ai demo — not production

Dynatrace

Ready — collector

https://dynatrace.sanari.ai

Access
Read
Writes
None

APM alternate. Common in Indian enterprise. Read-only; we do not install OneAgent.

sanari.ai demo — not production

Data & CRM

Databricks

Ready — collector

https://dbx.sanari.ai

Access
Read
Writes
None

Job failures and warehouse health as incidents. Not a write path into notebooks.

sanari.ai demo — not production

Snowflake

Ready — collector

https://snowflake.sanari.ai

Access
Read
Writes
None

Query failures, warehouse queue, credit spikes. Case evidence only.

sanari.ai demo — not production

HubSpot

Not this SOW

https://hubspot.sanari.ai

Access
Read
Writes
None

Not on the incident path. Stakeholder list / change calendar if a tenant already lives here.

sanari.ai demo — not production

Identity & secrets

Microsoft Entra ID

Connected (demo)

https://login.sanari.ai

Access
SSO + groups
Writes
None

Who may type APPROVE. Okta and AD FS use the same SAML/OIDC adapter.

Last poll · 27m 36s ago · sanari.ai demo

HashiCorp Vault

Connected (demo)

https://vault.sanari.ai

Access
Check-out
Writes
None — short-lived creds only

Execute worker never stores DB or SSH secrets. CyberArk is the same pattern.

Last poll · 27m 33s ago · sanari.ai demo

Execute

PostgreSQL

Connected (demo)

orders-db-01 · postgres

Access
Allow-listed SQL
Writes
pg_terminate_backend after APPROVE

Named least-privilege account. Restart-database stays off and is not this connector.

Last poll · 27m 31s ago · sanari.ai demo

Ansible Automation

Connected (demo)

https://aap.sanari.ai

Access
Job templates
Writes
Restart API / rollback tag after APPROVE

Sanari does not SSH as a snowflake. Their existing job templates are the only write path.

Last poll · 27m 37s ago · sanari.ai demo

Kubernetes

Ready — collector

https://k8s.sanari.ai

Access
Rollout / restart
Writes
After APPROVE, allow-listed workloads only

Same HITL interrupt. Used when the API is a workload, not a systemd unit.

sanari.ai demo — not production

Kafka admin

Not this SOW

https://kafka.sanari.ai · admin

Access
Blocked
Writes
Reset offset / delete CG — not in this SOW

Write path stays off until a runbook exists and CAB has approved the pattern.

sanari.ai demo — not production

Topology

ServiceNow CMDB

Ready — collector

https://snow.sanari.ai · cmdb_ci_service

Access
Read
Writes
None

App → API → DB → Kafka → portal. This is the blast-radius graph for 20 applications.

sanari.ai demo — not production

Apache Kafka

Ready — collector

https://kafka.sanari.ai

Access
Lag, ISR, offsets
Writes
None

Consumer lag and topic health. Needed to rule Kafka in or out — not to mutate it.

sanari.ai demo — not production

Notify

Microsoft Teams

Ready — collector

https://teams.sanari.ai

Access
Channel post
Writes
Notify only — approve stays in Sanari

On-call channel for RCA-ready and awaiting-approval. Not a second approval surface.

sanari.ai demo — not production

SMTP (their relay)

Ready — collector

smtp.sanari.ai:587

Access
Send
Writes
Audit copy of APPROVE / execute

Their relay, their from-address. Demo actors @sanari.ai are not used in production.

sanari.ai demo — not production

PagerDuty

Not this SOW

https://page.sanari.ai

Access
Page
Writes
None unless they already page from here

Only if they already page here. We do not introduce a new pager.

sanari.ai demo — not production

Audit

Amazon S3

Ready — collector

s3://sanari.ai/cases

Access
Write snapshots
Writes
Sparklines + log slices on the case

RCA replay after metrics roll off. Bucket in their account, not ours.

sanari.ai demo — not production

Splunk

Not this SOW

syslog.sanari.ai:6514

Access
Stream
Writes
Every APPROVE and execute

SIEM / CEF. Banks and insurers will ask. Bajaj Auto may not on the first PO.

sanari.ai demo — not production