Elasticsearch agent skills for Claude Code, Codex and other agents.

Create, search, update, and manage SOC cases via the Kibana Cases API.

elastic/agent-skills

Guides contributors through the Elastic Common Schema (ECS) RFC (Proposal) process: template sections, target maturity (alpha/beta), rfcs/text artifacts, and optional OTel mapping.

elastic/ecs

Create, tune, and manage Elastic Security detection rules (SIEM and Endpoint).

elastic/agent-skills

Create and manage Kibana Dashboards and Lens visualizations.

elastic/agent-skills

Generate sample security events, attack scenarios, and synthetic alerts for Elastic Security.

elastic/agent-skills

Onboard an Elastic Cloud organization: configure the elastic CLI's Cloud context and API key, establish a default region, then invite users, assign predefined or custom Serverless project roles, and…

elastic/agent-skills

Create and manage Elastic ML anomaly detection jobs via the API.

elastic/agent-skills

Explain Elasticsearch ML anomaly detection scores, model behavior, and result interpretation.

elastic/agent-skills

Design and review Elasticsearch index mappings for stated access patterns: correct field types, text+keyword multi-fields, docvalues tuning, mapping-explosion avoidance, and explicit shard settings.

elastic/agent-skills

Examines an existing Terraform resource or data source implementation and produces an OpenSpec requirements document under openspec/specs/.

elastic/terraform-provider-elasticstack

Execute ES|QL (Elasticsearch Query Language) queries, use when the user wants to query Elasticsearch data, analyze logs, aggregate metrics, explore data, or create charts and dashboards from ES|QL…

elastic/agent-skills

Load CSV and JSON files into Elasticsearch indices using the bulk API and explicit mappings when field types matter.

elastic/agent-skills

Analyzes an OpenSpec requirements spec for internal consistency, implementation compliance, and test opportunities; when a shell is available, run openspec validate first for structural checks.

elastic/terraform-provider-elasticstack

Help developers new to Elasticsearch get from zero to a working search experience.

elastic/agent-skills

Analyzes a Terraform resource schema and compares it to attributes used in the acceptance test suite (configs + assertions).

elastic/terraform-provider-elasticstack

Diagnose slow Elasticsearch Query DSL searches and propose measured fixes.

elastic/agent-skills

Guide Elasticsearch reindex for performance: local and remote, slicing, throttling, task API.

elastic/agent-skills

Improve Elasticsearch search relevance for content and catalog indices: pin or promote results with query rules (correct rule type, criteria, and rule-query wiring) and tune organic ranking with…

elastic/agent-skills

Create and manage Kibana Agent Builder agents and custom tools.

elastic/agent-skills

Create and manage Kibana alerting rules. An agent skill from elastic/agent-skills.

elastic/agent-skills

Author, validate, test, run, and inspect Elastic Workflow YAML definitions.

elastic/agent-skills

Answer questions about LLM and agentic-application behavior from data already ingested into Elastic: latency and error rate, token and cost utilization, response quality and guardrail events, and…

elastic/agent-skills

Onboard an application into Elastic Observability with the Elastic Distribution of OpenTelemetry (EDOT): route on language and runtime, detect and replace a classic Elastic APM agent, apply the…

elastic/agent-skills

Provision and operate Elastic Cloud infrastructure: create, connect to, update, and delete Serverless projects (Elasticsearch, Observability, Security); manage traffic filters (IP and AWS…

elastic/agent-skills

Diagnose a non-green Elasticsearch cluster and surface the single most likely cause with remediation.

elastic/agent-skills

Elastic ML anomaly detection — investigation/RCA, score explanation, job lifecycle troubleshooting, and job operations.

elastic/agent-skills

Investigate Kubernetes workload, node, and control-plane issues using OTel telemetry (EDOT).

elastic/agent-skills

Design and operate service reliability targets in Elastic Observability: choose an SLI type and a defensible target, pick a time window and budgeting method, create and maintain SLOs through the…

elastic/agent-skills

Triage a degraded or suspect service end to end: read SLO status and burn rate, check active alerting rules and ML anomalies, measure throughput, latency, and error rate, assess dependency health…

elastic/agent-skills

A skill your agent uses to deploy the vss-video-analytics-api REST service standalone (config-source, data-log bind, Elasticsearch, optional Kafka).

NVIDIA/skills

Guides migration, provisioning, search, log-analytics, trace-analytics, and Agentic AI Assistant workflows for Amazon OpenSearch Service and Serverless across six capabilities — migration…

aws/agent-toolkit-for-aws

Gathers initial requirements for a new Terraform resource or data source by examining API clients (go-elasticsearch, generated kbapi), Elastic API docs (Elastic docs MCP server and/or web), then…

elastic/terraform-provider-elasticstack

Guides use of the Qdrant Migration Tool CLI to move vectors, metadata, and sparse embeddings from another vector database into Qdrant.

qdrant/skills

Walks through adding a new built-in evlog drain adapter for an observability platform: source, build config, exports, tests, docs and PR scope.

evloghq/evlog

Guides work on LobeHub's own product search: the shared search repository, provider choice, Elasticsearch mappings, change syncing and reindexing.

lobehub/lobehub

Investigates a service incident to its root cause by querying a UModel object graph alongside metrics, logs, topology and recent deployments.

alibaba/UnifiedModel

Reviews code for correctness and potential bugs, pinpoints bug locations by file and line, and suggests concrete fixes.

aide-family/moon

Inspect local Aspire resource health, logs, traces, and browser telemetry.

exceptionless/Exceptionless

A skill your agent uses when the user wants to cut, publish, tag, or create a GitHub release for kt-search, especially when the task includes version bumping, validating that commits are pushed…

jillesvangurp/kt-search

Enable, configure, and query Elasticsearch security audit logs.

aspectrr/deer

Develops Go microservices with Kratos v2 following official design philosophy, DDD/Clean Architecture layout, Protobuf API, error/config/middleware patterns, and observability.

aide-family/moon

Query, aggregate, patch, or paginate Exceptionless data through its Elasticsearch repository abstractions.

exceptionless/Exceptionless

Authenticate to Elasticsearch using native, file-based, LDAP/AD, SAML, OIDC, Kerberos, JWT, or certificate realms.

aspectrr/deer

Manage Elasticsearch RBAC: native users, roles, role mappings, document- and field-level security.

aspectrr/deer

Implements backend modules from proto definitions for goddess, marksman, and rabbit apps.

aide-family/moon

Use Gradle Compose tasks to prepare and recover local Elasticsearch/OpenSearch test infrastructure in kt-search.

jillesvangurp/kt-search

Ingest and transform data files (CSV/JSON/Parquet/Arrow IPC) into Elasticsearch with stream processing and custom transforms.

aspectrr/deer

Diagnose and resolve Elasticsearch security errors: 401/403 failures, TLS problems, expired API keys, role mapping mismatches, and Kibana login issues.

aspectrr/deer