@elastic

elasticsearch-file-ingest streams large data files (ndjson, csv, parquet, arrow ipc) into elasticsearch with custom javascript transforms, supporting batch processing and document splitting at 50k+ docs/second throughput.

elasticsearch-authz covers native user creation, role-based access control, document and field-level security, and role mapping for external realms across self-managed, ech, and serverless deployments.

elasticsearch-esql covers execution of ES|QL queries against Elasticsearch clusters, with schema discovery, time series support, full-text search, and advanced features like change point detection and data enrichment via lookup joins.

kibana-vega enables creation and layout of custom Kibana dashboards using Vega visualizations with ES|QL data sources. provides cli-driven workflow for visualization management, grid-based dashboard design, and common pitfall avoidance.

setup guide for deploying elastic opentelemetry java agent with required environment variables and javaagent attachment configuration, avoiding common mistakes like apm server endpoints and dual agent conflicts.

elasticsearch-security-troubleshooting describes diagnostic triage for authentication, authorization, and tls failures but lacks concrete procedural steps, decision trees, or outcome measurement criteria.

kibana-streams covers read-only stream metadata, settings, queries, and lifecycle operations (enable, disable, resync) via the experimental kibana streams rest api. mutating operations not yet supported.

kibana-agent-builder manages agent lifecycle operations (create, update, delete, inspect, chat) and custom tools in kibana, requiring environment configuration for api authentication.

security-detection-rule-management provides tooling for creating and tuning kibana detection engine rules via rule-manager.js, targeting threat coverage gaps and false positive reduction.

cloud-network-security defines prerequisites and scope for managing network policies on elastic cloud serverless projects via ip and vpc filters, but lacks procedural steps, trigger phrases, and failure handling.

observability-service-health outlines data sources and metrics for apm health assessment but lacks actionable procedure, decision logic, or recovery paths. reads as a requirements sketch rather than executable skill.

observability-edot-dotnet-instrument references external setup documentation but provides no actionable procedure, decision logic, or success criteria within the skill itself.

observability-edot-python-migrate provides skeleton references to migration documentation but lacks actionable procedure, decision logic, or outcome validation for actual migration execution.

Help developers new to Elasticsearch get from zero to a working search experience. Guide them through understanding their intent, mapping their data, and…

Search and filter Observability logs using ES|QL. Use when investigating log spikes, errors, or anomalies; getting volume and trends; or drilling into services…

Create, search, update, and manage SOC cases via the Kibana Cases API. Use when tracking incidents, linking alerts to cases, adding investigation notes, or…

Create and manage Kibana Dashboards and visualizations. Use when you need to define dashboards and visualizations declaratively, version control them, or…

>

>

>

>

>

>

>

>

>

>

>

>

>

>

>

elasticsearch-authn — an installable skill for AI agents, published by elastic/agent-skills.