elastic avatar

elastic/agent-skills

Official
skills.sh installs
115.9K
skills
57

Install

$ npx -y skills add elastic/agent-skills --agent claude-code

Installs into .claude/skills of the current project.

Skills

1elastic avatarelasticsearch-esqlelastic/agent-skillsExecute ES|QL (Elasticsearch Query Language) queries, use when the user wants to query Elasticsearch data, analyze logs, aggregate metrics, explore data, or cre5.2Kskills.sh installs
2elastic avatarelasticsearch-onboardingelastic/agent-skillsHelp developers new to Elasticsearch get from zero to a working search experience. Guide them through understanding their intent, mapping their data, and buildi4.7Kskills.sh installs
3elastic avatarkibana-dashboardselastic/agent-skillsCreate and manage Kibana Dashboards and visualizations. Use when you need to define dashboards and visualizations declaratively, version control them, or automa4.6Kskills.sh installs
4elastic avatarsecurity-case-managementelastic/agent-skillsCreate, search, update, and manage SOC cases via the Kibana Cases API. Use when tracking incidents, linking alerts to cases, adding investigation notes, or mana4.4Kskills.sh installs
5elastic avatarkibana-alerting-ruleselastic/agent-skillsCreate and manage Kibana alerting rules via REST API or Terraform. Use when creating, updating, or managing rule lifecycle (enable, disable, mute, snooze) or ru4.3Kskills.sh installs
6elastic avatarkibana-agent-builderelastic/agent-skillsCreate and manage Agent Builder agents and custom tools in Kibana. Use when asked to create, update, delete, test, or inspect agents or tools in Agent Builder.4.3Kskills.sh installs
7elastic avatarobservability-llm-obselastic/agent-skillsMonitor LLMs and agentic apps: performance, token/cost, response quality, and workflow orchestration. Use when the user asks about LLM monitoring, GenAI observa4.2Kskills.sh installs
8elastic avatarsecurity-alert-triageelastic/agent-skillsTriage Elastic Security alerts — gather context, classify threats, create cases, and acknowledge. Use when triaging alerts, performing SOC analysis, or investig4.2Kskills.sh installs
9elastic avatarsecurity-detection-rule-managementelastic/agent-skillsCreate, tune, and manage Elastic Security detection rules (SIEM and Endpoint). Use for false positives, exceptions, new coverage, noisy rules, or rule managemen4.1Kskills.sh installs
10elastic avatarsecurity-generate-security-sample-dataelastic/agent-skillsGenerate sample security events, attack scenarios, and synthetic alerts for Elastic Security. Use when demoing, populating dashboards, testing detection rules, 4.1Kskills.sh installs
11elastic avatarkibana-anomaly-detectionelastic/agent-skillsElastic ML anomaly detection skill — investigation/RCA, score explanation, job operations (create, datafeed, start/stop, results), and troubleshooting (missing 3.4Kskills.sh installs
12elastic avatarobservability-k8s-investigationelastic/agent-skillsInvestigate Kubernetes workload, node, and control-plane issues using OTel telemetry (EDOT). Use when diagnosing pod failures (CrashLoopBackOff, OOMKilled, Erro3.3Kskills.sh installs
13elastic avatarobservability-logs-searchelastic/agent-skillsSearch and filter Observability logs using ES|QL. Use when investigating log spikes, errors, or anomalies; getting volume and trends; or drilling into services 3.2Kskills.sh installs
14elastic avatarelasticsearch-authnelastic/agent-skillsAuthenticate to Elasticsearch using native, file-based, LDAP/AD, SAML, OIDC, Kerberos, JWT, or certificate realms. Use when connecting with credentials, choosin3Kskills.sh installs
15elastic avatarelasticsearch-file-ingestelastic/agent-skillsIngest and transform data files (CSV/JSON/Parquet/Arrow IPC) into Elasticsearch with stream processing and custom transforms. Use when loading files or batch im3Kskills.sh installs
16elastic avatarelasticsearch-authzelastic/agent-skillsManage Elasticsearch RBAC: native users, roles, role mappings, document- and field-level security. Use when creating users or roles, assigning privileges, or ma2.9Kskills.sh installs
17elastic avatarelasticsearch-auditelastic/agent-skillsEnable, configure, and query Elasticsearch security audit logs. Use when the task involves audit logging setup, event filtering, or investigating security incid2.9Kskills.sh installs
18elastic avatarkibana-streamselastic/agent-skillsList, inspect, enable, disable, and resync Kibana Streams via the REST API. Use when the user needs stream details, ingest/query settings, queries, significant 2.9Kskills.sh installs
19elastic avatarkibana-connectorselastic/agent-skillsCreate and manage Kibana connectors for Slack, PagerDuty, Jira, webhooks, and more via REST API or Terraform. Use when configuring third-party integrations or m2.9Kskills.sh installs
20elastic avatarkibana-vegaelastic/agent-skillsCreate Vega and Vega-Lite visualizations with ES|QL data sources in Kibana. Use when building custom charts, dashboards, or programmatic panel layouts beyond st2.9Kskills.sh installs
21elastic avatarelasticsearch-security-troubleshootingelastic/agent-skillsDiagnose and resolve Elasticsearch security errors: 401/403 failures, TLS problems, expired API keys, role mapping mismatches, and Kibana login issues. Use when2.9Kskills.sh installs
22elastic avatarobservability-service-healthelastic/agent-skillsAssess APM service health using SLOs, alerts, ML, throughput, latency, error rate, and dependencies. Use when checking service status, performance, or when the 2.9Kskills.sh installs
23elastic avatarkibana-auditelastic/agent-skillsEnable and configure Kibana audit logging for saved object access, logins, and space operations. Use when setting up Kibana audit, filtering events, or correlat2.8Kskills.sh installs
24elastic avatarobservability-manage-sloselastic/agent-skillsCreate and manage SLOs in Elastic Observability using the Kibana API. Use when defining SLIs, setting error budgets, or managing SLO lifecycle.2.8Kskills.sh installs
25elastic avatarcloud-network-securityelastic/agent-skillsManage Serverless network security (traffic filters): create, update, and delete IP filters and AWS PrivateLink VPC filters. Use when restricting network access2.8Kskills.sh installs
26elastic avatarcloud-manage-projectelastic/agent-skillsManages existing Elastic Cloud Serverless projects: list, get, update, delete, reset credentials, resume, and load saved credentials. Connects to existing proje2.8Kskills.sh installs
27elastic avatarcloud-setupelastic/agent-skillsConfigures Elastic Cloud authentication and environment defaults. Use when setting up EC_API_KEY, configuring Cloud API access, or when another cloud skill requ2.7Kskills.sh installs
28elastic avatarobservability-edot-python-instrumentelastic/agent-skillsInstrument a Python application with the Elastic Distribution of OpenTelemetry (EDOT) Python agent for automatic tracing, metrics, and logs. Use when adding obs2.7Kskills.sh installs
29elastic avatarcloud-create-projectelastic/agent-skillsCreates Elastic Cloud Serverless projects (Elasticsearch, Observability, or Security) via the REST API, saves credentials to file, and bootstraps a scoped Elast2.7Kskills.sh installs
30elastic avatarobservability-edot-java-instrumentelastic/agent-skillsInstrument a Java application with the Elastic Distribution of OpenTelemetry (EDOT) Java agent for automatic tracing, metrics, and logs. Use when adding observa2.7Kskills.sh installs
31elastic avatarobservability-edot-dotnet-instrumentelastic/agent-skillsInstrument a .NET application with the Elastic Distribution of OpenTelemetry (EDOT) .NET SDK for automatic tracing, metrics, and logs. Use when adding observabi2.7Kskills.sh installs
32elastic avatarobservability-edot-dotnet-migrateelastic/agent-skillsMigrate a .NET application from the classic Elastic APM .NET agent to the EDOT .NET SDK. Use when switching from Elastic.Apm.* packages to Elastic.OpenTelemetry2.7Kskills.sh installs
33elastic avatarcloud-access-managementelastic/agent-skillsManage Elastic Cloud organization access: invite users, assign roles to Serverless projects, and create or revoke Cloud API keys. Use when granting, modifying, 2.7Kskills.sh installs
34elastic avatarobservability-edot-python-migrateelastic/agent-skillsMigrate a Python application from the classic Elastic APM Python agent to the EDOT Python agent. Use when switching from elastic-apm to elastic-opentelemetry.2.7Kskills.sh installs
35elastic avatarobservability-edot-java-migrateelastic/agent-skillsMigrate a Java application from the classic Elastic APM Java agent to the EDOT Java agent. Use when switching from elastic-apm-agent.jar to elastic-otel-javaage2.7Kskills.sh installs
36elastic avatarcloud-access-managementelastic/agent-skills>0skills.sh installs
37elastic avatarkibana-agent-builderelastic/agent-skills>0skills.sh installs
38elastic avatarsecurity-alert-triageelastic/agent-skills>0skills.sh installs
39elastic avatarsecurity-case-managementelastic/agent-skills>0skills.sh installs
40elastic avatarcloud-create-projectelastic/agent-skills>0skills.sh installs
41elastic avatarsecurity-detection-rule-managementelastic/agent-skills>0skills.sh installs
42elastic avatarobservability-edot-dotnet-instrumentelastic/agent-skills>0skills.sh installs
43elastic avatarobservability-edot-dotnet-migrateelastic/agent-skills>0skills.sh installs
44elastic avatarobservability-edot-java-instrumentelastic/agent-skills>0skills.sh installs
45elastic avatarobservability-edot-java-migrateelastic/agent-skills>0skills.sh installs
46elastic avatarobservability-edot-python-instrumentelastic/agent-skills>0skills.sh installs
47elastic avatarobservability-edot-python-migrateelastic/agent-skills>0skills.sh installs
48elastic avatarsecurity-generate-security-sample-dataelastic/agent-skills>0skills.sh installs
49elastic avatarobservability-k8s-investigationelastic/agent-skills>0skills.sh installs
50elastic avatarobservability-llm-obselastic/agent-skills>0skills.sh installs
51elastic avatarobservability-logs-searchelastic/agent-skills>0skills.sh installs
52elastic avatarcloud-manage-projectelastic/agent-skills>0skills.sh installs
53elastic avatarobservability-manage-sloselastic/agent-skills>0skills.sh installs
54elastic avatarcloud-network-securityelastic/agent-skills>0skills.sh installs
55elastic avatarobservability-service-healthelastic/agent-skills>0skills.sh installs
56elastic avatarcloud-setupelastic/agent-skills>0skills.sh installs
57elastic avatarkibana-streamselastic/agent-skills>0skills.sh installs