--- title: Cross-project search in Observability description: Learn how cross-project search (CPS) works in Elastic Observability, including app compatibility, scope selector behavior, and known limitations. url: https://docs-v3-preview.elastic.dev/elastic/docs-content/tree/main/solutions/observability/cross-project-search products: - Elastic Observability applies_to: - Elastic Cloud Serverless: Preview - Elastic Stack: Unavailable --- # Cross-project search in Observability [Cross-project search (CPS)](https://docs-v3-preview.elastic.dev/elastic/docs-content/tree/main/explore-analyze/cross-project-search) lets you run a single search request across multiple Serverless projects. When your observability data is split across projects to organize ownership, use cases, or environments, cross-project search lets you query all that data from a single origin project without searching each project individually. When projects are linked, platform apps like Discover and Dashboards automatically include data from all linked projects. Observability apps have varying levels of CPS support. Some apps show cross-project data automatically; others remain scoped to the origin project. Cross-project search is unavailable for Logs Essentials projects. For full details on CPS concepts, configuration, and search syntax, refer to: - [Cross-project search overview](https://docs-v3-preview.elastic.dev/elastic/docs-content/tree/main/explore-analyze/cross-project-search) - [Configure cross-project search](https://docs-v3-preview.elastic.dev/elastic/docs-content/tree/main/deploy-manage/cross-project-search-config) - [Manage cross-project search scope in your project apps](https://docs-v3-preview.elastic.dev/elastic/docs-content/tree/main/explore-analyze/cross-project-search/cross-project-search-manage-scope) ## Observability app compatibility The following table shows how each Observability app behaves with CPS at technical preview. | Observability app | CPS availability | |-------------------------------------------------------------------|--------------------------------------| | **APM** (Service Inventory, Traces, Dependencies) | Available (scope selector available) | | **Infrastructure** (Inventory, Hosts) | Available (scope selector available) | | **Observability Overview** (Hosts, Log Events, Service Inventory) | Not available | | **Observability AI Assistant** | Not available | | **SLOs** | Not available | | **Rules** (Custom Threshold, SLO Burn Rate) | Read-only | | **Synthetics** (monitors, TLS Certificates) | Not available | | **Streams** | Not available | ## Cross-project search scope selector in Observability apps The **CPS scope** selector (`cross_project_search`) in the project header lets you search **This project** or **All projects**. It is available in platform apps like Discover, Dashboards, and Lens, as well as in APM and Infrastructure apps. For other Observability-specific apps, the scope selector is not available. This means: - Those apps operate in their default scope, which varies by app (refer to [Observability app compatibility](#obs-cps-compatibility)). - The scope you select in platform apps like Discover does not carry over to Observability apps that don't support it. - Data volumes might change when switching between Discover (which shows cross-project data by default) and an Observability app (which is scoped to the origin project) for the same index pattern. For apps where the scope selector is available, refer to [Managing cross-project search scope in your project apps](https://docs-v3-preview.elastic.dev/elastic/docs-content/tree/main/explore-analyze/cross-project-search/cross-project-search-manage-scope). ## Navigating between Discover and Observability apps When CPS is enabled, Discover shows documents from all linked projects by default, unless the space-level default scope has been changed. Observability apps may not have the same scope, which can lead to differences when navigating between them. ### Discover to Streams Streams remains scoped to the origin project only and does not support CPS. If you open a stream from Discover and the document is from a linked project, Observability shows a warning that the stream is remote. The Streams UI then shows origin project data only, so counts can differ from Discover. ## Identifying the location of a document To determine whether a document comes from the origin project or a linked project, refer to [Identifying the location of a document](/elastic/docs-content/tree/main/explore-analyze/cross-project-search#cps-identify-documents). ## Known issues and limitations The following known issues and limitations apply to CPS in Observability apps. For an overview of Observability app compatibility, refer to [Observability app compatibility](#obs-cps-compatibility). ### Rules data scope inconsistency SLO burn rate rules query only origin project data, even when the underlying data view (for example, `logs-*`) returns cross-project data in Discover. This means Discover and rules may show different results for the same data view. Machine learning rules are not available in CPS. ### SLO visibility Only origin SLOs are visible, even when connected to a linked project. Tracking: [kibana#252955](https://github.com/elastic/kibana/issues/252955) ### No default data views in origin projects In a CPS origin project, Discover may show no data even when linked projects contain data due to missing data views in the origin project. Tracking: [kibana#260930](https://github.com/elastic/kibana/issues/260930) ### Alerts are origin only **Alerts** are from the origin project only, even when rules are configured to act on cross-project data. ### Synthetics is not available in CPS Synthetics monitors and TLS certificates are bound to saved objects and remain scoped to the origin project. Monitors from linked projects do not appear in the Synthetics UI of the origin project.