@skills · Owner
Agent skills by elastic
70 skills indexed from github.com/elastic. Reference any of them in AdaL, Claude Code, Cursor or any coding agent — nothing to install.
- agent-skills · Collection · 546 stars
- cloud · Collection · 546 stars
- cloud · Collection · 546 stars
- elasticsearch · Collection · 546 stars
- elasticsearch · Collection · 546 stars
- elasticsearch-esql · Skill · 546 stars
Execute ES|QL (Elasticsearch Query Language) queries, use when the user wants to query Elasticsearch data, analyze logs, aggregate metrics, explore data, o
- elasticsearch-esql · Skill · 546 stars
Execute ES|QL (Elasticsearch Query Language) queries, use when the user wants to query Elasticsearch data, analyze logs, aggregate metrics, explore data, o
- elasticsearch-onboarding · Skill · 546 stars
Help developers new to Elasticsearch get from zero to a working search experience. Guide them through understanding their intent, mapping their data, and b
- elasticsearch-onboarding · Skill · 546 stars
Help developers new to Elasticsearch get from zero to a working search experience. Guide them through understanding their intent, mapping their data, and b
- kibana · Collection · 546 stars
- kibana · Collection · 546 stars
- kibana-alerting-rules · Skill · 546 stars
Create and manage Kibana alerting rules. Use when creating, updating, or managing rule lifecycle (enable, disable, mute, snooze), choosing metric threshold
- kibana-alerting-rules · Skill · 546 stars
Create and manage Kibana alerting rules. Use when creating, updating, or managing rule lifecycle (enable, disable, mute, snooze), choosing metric threshold
- kibana-anomaly-detection · Skill · 546 stars
Elastic ML anomaly detection — investigation/RCA, score explanation, job lifecycle troubleshooting, and job operations. Use when answering "what broke?"/"w
- kibana-anomaly-detection · Skill · 546 stars
Elastic ML anomaly detection — investigation/RCA, score explanation, job lifecycle troubleshooting, and job operations. Use when answering "what broke?"/"w
- kibana-dashboards · Skill · 546 stars
Create and manage Kibana Dashboards and Lens visualizations. Use when you need to define dashboards and visualizations declaratively, version control them,
- kibana-dashboards · Skill · 546 stars
Create and manage Kibana Dashboards and Lens visualizations. Use when you need to define dashboards and visualizations declaratively, version control them,
- observability · Collection · 546 stars
- observability · Collection · 546 stars
- observability-k8s-investigation · Skill · 546 stars
Investigate Kubernetes workload, node, and control-plane issues using OTel telemetry (EDOT). Use when diagnosing pod failures (CrashLoopBackOff, OOMKilled,
- observability-k8s-investigation · Skill · 546 stars
Investigate Kubernetes workload, node, and control-plane issues using OTel telemetry (EDOT). Use when diagnosing pod failures (CrashLoopBackOff, OOMKilled,
- observability-llm-obs · Skill · 546 stars
Answer questions about LLM and agentic-application behavior from data already ingested into Elastic: latency and error rate, token and cost utilization, re
- observability-llm-obs · Skill · 546 stars
Answer questions about LLM and agentic-application behavior from data already ingested into Elastic: latency and error rate, token and cost utilization, re
- plugins · Collection · 546 stars
- security · Collection · 546 stars
- security · Collection · 546 stars
- security-alert-triage · Skill · 546 stars
Triage Elastic Security alerts — gather context, classify threats, create cases, and acknowledge. Use when triaging alerts, performing SOC analysis, or inv
- security-alert-triage · Skill · 546 stars
Triage Elastic Security alerts — gather context, classify threats, create cases, and acknowledge. Use when triaging alerts, performing SOC analysis, or inv
- security-case-management · Skill · 546 stars
Create, search, update, and manage SOC cases via the Kibana Cases API. Use when tracking incidents, linking alerts to cases, adding investigation notes, or
- security-case-management · Skill · 546 stars
Create, search, update, and manage SOC cases via the Kibana Cases API. Use when tracking incidents, linking alerts to cases, adding investigation notes, or
- security-detection-rule-management · Skill · 546 stars
Create, tune, and manage Elastic Security detection rules (SIEM and Endpoint). Use for false positives, exceptions, new coverage, noisy rules, or rule mana
- security-detection-rule-management · Skill · 546 stars
Create, tune, and manage Elastic Security detection rules (SIEM and Endpoint). Use for false positives, exceptions, new coverage, noisy rules, or rule mana
- security-generate-security-sample-data · Skill · 546 stars
Generate sample security events, attack scenarios, and synthetic alerts for Elastic Security. Use when demoing, populating dashboards, testing detection ru
- security-generate-security-sample-data · Skill · 546 stars
Generate sample security events, attack scenarios, and synthetic alerts for Elastic Security. Use when demoing, populating dashboards, testing detection ru
- skills · Collection · 546 stars
- skills · Collection · 546 stars
- skills · Collection · 546 stars
- skills · Collection · 546 stars
- skills · Collection · 546 stars
- skills · Collection · 546 stars
- cloud-onboarding · Skill
Onboard an Elastic Cloud organization: configure the `elastic` CLI's Cloud context and API key, establish a default region, then invite users, assign prede
- cloud-onboarding · Skill
Onboard an Elastic Cloud organization: configure the `elastic` CLI's Cloud context and API key, establish a default region, then invite users, assign prede
- cloud-provisioning · Skill
Provision and operate Elastic Cloud infrastructure: create, connect to, update, and delete Serverless projects (Elasticsearch, Observability, Security); ma
- cloud-provisioning · Skill
Provision and operate Elastic Cloud infrastructure: create, connect to, update, and delete Serverless projects (Elasticsearch, Observability, Security); ma
- elasticsearch-anomaly-detection · Skill
Create and manage Elastic ML anomaly detection jobs via the API. Use when setting up jobs on an index or data stream, configuring jobs and datafeeds, or op
- elasticsearch-anomaly-detection · Skill
Create and manage Elastic ML anomaly detection jobs via the API. Use when setting up jobs on an index or data stream, configuring jobs and datafeeds, or op
- elasticsearch-anomaly-detection-explainer · Skill
Explain Elasticsearch ML anomaly detection scores, model behavior, and result interpretation. Use when the user asks why a score is high or low, how the mo
- elasticsearch-anomaly-detection-explainer · Skill
Explain Elasticsearch ML anomaly detection scores, model behavior, and result interpretation. Use when the user asks why a score is high or low, how the mo
- elasticsearch-cluster-health · Skill
Diagnose a non-green Elasticsearch cluster and surface the single most likely cause with remediation. Use when an operator reports yellow or red status, un
- elasticsearch-cluster-health · Skill
Diagnose a non-green Elasticsearch cluster and surface the single most likely cause with remediation. Use when an operator reports yellow or red status, un
- elasticsearch-index-design · Skill
Design and review Elasticsearch index mappings for stated access patterns: correct field types, text+keyword multi-fields, doc_values tuning, mapping-explo
- elasticsearch-index-design · Skill
Design and review Elasticsearch index mappings for stated access patterns: correct field types, text+keyword multi-fields, doc_values tuning, mapping-explo
- elasticsearch-ingest · Skill
Load CSV and JSON files into Elasticsearch indices using the bulk API and explicit mappings when field types matter. Use when batch-importing local files,
- elasticsearch-ingest · Skill
Load CSV and JSON files into Elasticsearch indices using the bulk API and explicit mappings when field types matter. Use when batch-importing local files,
- elasticsearch-query-optimization · Skill
Diagnose slow Elasticsearch Query DSL searches and propose measured fixes. Use when a search is slow, profile output shows an expensive clause, exact-match
- elasticsearch-query-optimization · Skill
Diagnose slow Elasticsearch Query DSL searches and propose measured fixes. Use when a search is slow, profile output shows an expensive clause, exact-match
- elasticsearch-reindex · Skill
Guide Elasticsearch reindex for performance: local and remote, slicing, throttling, task API. Use when copying or migrating indices, changing mappings, or
- elasticsearch-reindex · Skill
Guide Elasticsearch reindex for performance: local and remote, slicing, throttling, task API. Use when copying or migrating indices, changing mappings, or
- elasticsearch-search-relevance · Skill
Improve Elasticsearch search relevance for content and catalog indices: pin or promote results with query rules (correct rule type, criteria, and rule-quer
- elasticsearch-search-relevance · Skill
Improve Elasticsearch search relevance for content and catalog indices: pin or promote results with query rules (correct rule type, criteria, and rule-quer
- kibana-agent-builder · Skill
Create and manage Kibana Agent Builder agents and custom tools. Use when asked to create, update, delete, test, or inspect agents or tools in Agent Builder
- kibana-agent-builder · Skill
Create and manage Kibana Agent Builder agents and custom tools. Use when asked to create, update, delete, test, or inspect agents or tools in Agent Builder
- kibana-workflows · Skill
Author, validate, test, run, and inspect Elastic Workflow YAML definitions. Use when the user wants to turn natural language into a Kibana workflow, fix wo
- kibana-workflows · Skill
Author, validate, test, run, and inspect Elastic Workflow YAML definitions. Use when the user wants to turn natural language into a Kibana workflow, fix wo
- observability-onboarding · Skill
Onboard an application into Elastic Observability with the Elastic Distribution of OpenTelemetry (EDOT): route on language and runtime, detect and replace
- observability-onboarding · Skill
Onboard an application into Elastic Observability with the Elastic Distribution of OpenTelemetry (EDOT): route on language and runtime, detect and replace
- observability-service-reliability · Skill
Design and operate service reliability targets in Elastic Observability: choose an SLI type and a defensible target, pick a time window and budgeting metho
- observability-service-reliability · Skill
Design and operate service reliability targets in Elastic Observability: choose an SLI type and a defensible target, pick a time window and budgeting metho
- observability-sre-triage · Skill
Triage a degraded or suspect service end to end: read SLO status and burn rate, check active alerting rules and ML anomalies, measure throughput, latency,
- observability-sre-triage · Skill
Triage a degraded or suspect service end to end: read SLO status and burn rate, check active alerting rules and ML anomalies, measure throughput, latency,