← Back to Leaderboard

gpt-5.4openai

🏆Ace
👁️Ops Hero
Score
90%
2800/3100
Passed
28
of 31
Failed
3
of 31
Avg Latency
1364ms
per challenge
Runs
2
total submissions
Cost
$0.114
per run

Domain Strengths

esql89%Observability100%Security83%20406080100

Difficulty Curve

0%25%50%75%100%67%beginner(3)100%intermediate(15)83%advanced(12)100%expert(1)

By Domain

esql
89%
17/19 passed
Observability
100%
6/6 passed
Security
83%
5/6 passed

Failed Challenges (3)

ChallengeDifficultyScoreFeedback
✗ES|QL Basic Filteringbeginner
0/100
Error: verification_exception Root causes: verification_exception: Found 1 problem line 1:86: Unknown column [views]
✗Post-Compromise Activity Analysisadvanced
0/100
Error: parsing_exception Caused by: no_viable_alt_exception: null Root causes: parsing_exception: line 1:101: no viable alternative at input '@timestamp > (FROM eq'
✗Create an IP Filter Rule Setadvanced
0/100
Missing "name" field. Missing "type" field (expected "ip"). Missing or empty "rules" array (expected at least one rule with source and description). Speed bonus: x1.15 (1128ms).

All Challenges

esql

ChallengeDifficultyScoreLatencyFeedback
✗
ES|QL Basic Filtering
esql-1-basic-filter
beginner
0/100
1101msError: verification_exception Root causes: verification_exception: Found 1 problem line 1:86: Unknown column [views]
✓
ES|QL Stats Aggregation
esql-2-stats-aggregation
beginner
100/100
1116msCorrect! Stats aggregation by category. Speed bonus: x1.15 (1116ms).
✓
ES|QL Computed Fields with EVAL
esql-3-eval-computed
intermediate
100/100
1073msCorrect! EVAL with CASE for conditional classification. Speed bonus: x1.15 (1073ms).
✓
ES|QL Log Error Analysis
esql-4-log-error-analysis
intermediate
100/100
1095msCorrect! Error analysis identifies incident services. Speed bonus: x1.15 (1095ms).
✓
ES|QL Time-Bucketed Log Analysis
esql-5-time-bucket
advanced
100/100
1067msCorrect! Time-bucketed log analysis with level breakdown. Speed bonus: x1.15 (1067ms).
✓
ES|QL Discovery and Query
esql-6-discover-and-query
advanced
100/100
2196msCorrect! Top authors by total views with multi-turn discovery.
✓
Cloud API Configuration
cloud-1-setup
beginner
100/100
1556msCorrect! Valid Cloud API configuration with apiKey, region, and baseUrl. Speed bonus: x1.15 (1556ms).
✓
Create a Serverless Project
cloud-2-create-project
intermediate
100/100
1492msCorrect! Valid Serverless project creation request. Speed bonus: x1.15 (1492ms).
✓
Update a Serverless Project
cloud-3-manage-project
intermediate
100/100
1104msCorrect! Valid project update request with name, search_power, and alias. Speed bonus: x1.15 (1104ms).
✓
Invite a User to the Organization
cloud-4-access-management
advanced
100/100
1068msCorrect! Valid user invitation with nested role assignments. Speed bonus: x1.15 (1068ms).
✗
Create an IP Filter Rule Set
cloud-5-network-security
advanced
0/100
1128msMissing "name" field. Missing "type" field (expected "ip"). Missing or empty "rules" array (expected at least one rule with source and description). Speed bonus: x1.15 (1128ms).
✓
Create a Kibana Alerting Rule
kibana-1-alerting-rules
intermediate
100/100
1155msCorrect! Valid alerting rule with schedule, params, and actions. Speed bonus: x1.15 (1155ms).
✓
Create a Webhook Connector
kibana-2-connectors
intermediate
100/100
1416msCorrect! Valid webhook connector with config and secrets. Speed bonus: x1.15 (1416ms).
✓
Create a Dashboard with a Lens Panel
kibana-3-dashboards
advanced
100/100
1091msCorrect! Valid dashboard with Lens panel, gridData, and panelConfig. Speed bonus: x1.15 (1091ms).
✓
Create a Kibana AI Agent
kibana-4-agent-builder
advanced
100/100
1060msCorrect! Valid AI agent configuration with model and tools. Speed bonus: x1.15 (1060ms).
✓
Audit Log: Failed Authentication Analysis
es-sec-1-audit-failed-auth
intermediate
100/100
1063msCorrect! Found 48 failed auth events across 10 users. Speed bonus: x1.15 (1063ms).
✓
Create an Elasticsearch API Key
es-sec-2-create-api-key
intermediate
100/100
1172msCorrect! API key body with proper role descriptors, cluster and index privileges. Speed bonus: x1.15 (1172ms).
✓
Create a Role with Document-Level Security
es-sec-3-create-role-dls
advanced
100/100
1967msCorrect! Role with DLS (region filter) and FLS (field grant list). Speed bonus: x1.15 (1967ms).
✓
Security Troubleshooting: 401 Unauthorized
es-sec-4-troubleshoot-401
advanced
100/100
1205msCorrect! Diagnostic query scoped to logstash_internal with relevant audit fields. Speed bonus: x1.15 (1205ms).

Observability

ChallengeDifficultyScoreLatencyFeedback
✓
Log Error Investigation with ES|QL
obs-esql-1-error-investigation
intermediate
100/100
1260msCorrect! Error timeline investigation across incident services. Speed bonus: x1.15 (1260ms).
✓
Service Error Count Breakdown
obs-esql-2-error-breakdown
intermediate
100/100
1518msCorrect! Service error breakdown by log level. Speed bonus: x1.15 (1518ms).
✓
Root Cause Investigation (Multi-Turn)
obs-esql-3-root-cause
advanced
100/100
3233msCorrect! Root cause identified: upstream stripe-api dependency failure.
✓
LLM Observability: Model Performance Analysis
obs-ext-1-llm-traces
intermediate
100/100
1779msCorrect! LLM performance analysis across 6 models. Speed bonus: x1.15 (1779ms).
✓
Create a Service Level Objective (SLO)
obs-ext-2-create-slo
intermediate
100/100
1099msCorrect! SLO body with KQL indicator, rolling window, and occurrences budgeting. Speed bonus: x1.15 (1099ms).
✓
Service Health Assessment via APM Data
obs-ext-3-service-health
advanced
100/100
1219msCorrect! Service health assessment — payment-service identified with ~19% error rate. Speed bonus: x1.15 (1219ms).

Security

ChallengeDifficultyScoreLatencyFeedback
✓
Brute Force Detection with ES|QL
sec-esql-1-brute-force
intermediate
100/100
1106msCorrect! Brute force detected: 10.0.0.50 with 12 attempts. Speed bonus: x1.15 (1106ms).
✗
Post-Compromise Activity Analysis
sec-esql-2-post-compromise
advanced
0/100
1091msError: parsing_exception Caused by: no_viable_alt_exception: null Root causes: parsing_exception: line 1:101: no viable alternative at input '@timestamp > (FROM eq'
✓
Full Attack Chain Investigation (Multi-Turn)
sec-esql-3-attack-chain
expert
100/100
2189msCorrect! Full attack chain: brute-force -> access -> post-exploitation.
✓
Create a Security Case
sec-ext-1-create-case
intermediate
100/100
1155msCorrect! Case created with proper title, severity, connector, and owner. Speed bonus: x1.15 (1155ms).
✓
Create a Detection Rule
sec-ext-2-create-detection-rule
advanced
100/100
1443msCorrect! Detection rule with EQL query, MITRE mapping, and proper severity/risk. Speed bonus: x1.15 (1443ms).
✓
Generate Security Sample Data
sec-ext-3-generate-sample-data
intermediate
100/100
1073msCorrect! Sample data generation request with APT simulation, anomalies, and host list. Speed bonus: x1.15 (1073ms).

Run History

DateScorePassedLatencyCost
3/16/2026, 6:58:23 PM90%28/311364ms$0.1139
3/16/2026, 6:58:18 PM87%27/311421ms$0.1230

Embed Badge

Add this badge to your README or documentation:

ElasticQuest badge
Markdown:
![ElasticQuest](https://elastic-quest-web-2t3s3mceqa-uc.a.run.app/api/badge/openrouter%3Aopenai%2Fgpt-5.4)
HTML:
<img src="https://elastic-quest-web-2t3s3mceqa-uc.a.run.app/api/badge/openrouter%3Aopenai%2Fgpt-5.4" alt="ElasticQuest score" />