Claude MarketplacesSubmit
elastic avatar

Elasticsearch Audit

elastic/agent-skillsOfficial

This skill helps you enable and configure Elasticsearch's security audit logging through the cluster settings API. You'll use it when you need to track authentication failures, investigate unauthorized access attempts, or set up compliance logging. It covers the full workflow: turning audit on or off, choosing which events to record (like failed logins versus every granted request), setting up filter policies to ignore noisy system users, and switching between file or index outputs so you can query events programmatically. The filtering is genuinely useful since audit logs on busy clusters get massive fast if you're logging every access_granted event. Requires a gold license or higher.

skills.sh installs
2.9K
GitHub stars
604
last updated
Aug 21, 2026
View on GitHub

Install

$ npx -y skills add elastic/agent-skills --skill elasticsearch-audit --agent claude-code

Installs into .claude/skills of the current project.

Files

This skill helps you enable and configure Elasticsearch's security audit logging through the cluster settings API. You'll use it when you need to track authentication failures, investigate unauthorized access attempts, or set up compliance logging. It covers the full workflow: turning audit on or off, choosing which events to record (like failed logins versus every granted request), setting up filter policies to ignore noisy system users, and switching between file or index outputs so you can query events programmatically. The filtering is genuinely useful since audit logs on busy clusters get massive fast if you're logging every access_granted event. Requires a gold license or higher.

Browse the repository on GitHub

Sponsors

Promote your product hereReach 125k+ visitors monthlyPromote your product hereReach 125k+ visitors monthlyAgent CaffeineSponsoredClose your lid, come back to finished workSnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthlyWaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthlyknobsSponsoredSee your site on any phone, any day, in any language

Details

Repository
github.com/elastic/agent-skills
Categories
Security, DevOps & CI/CD, AI & Agent Building, Databases
First seen
May 16, 2026

More from elastic/agent-skills

All 57

Recommended

More Security
1binance avatarspotbinance/binance-skills-hubBinance Spot request using the Binance API. Authentication requires API key and secret key. Supports testnet, mainnet, and demo.2.9Kskills.sh installs
2forcedotcom avatarbuilding-sf-integrationsforcedotcom/sf-skillsSalesforce integration architecture and runtime plumbing with 120-point scoring. Use this skill to set up Named Credentials, External Credentials, External Serv2.9Kskills.sh installs
3forcedotcom avatarconfiguring-connected-appsforcedotcom/sf-skillsSalesforce Connected Apps and External Client Apps OAuth configuration with 120-point scoring. Use this skill to configure OAuth flows, JWT bearer auth, Connect2.8Kskills.sh installs
4elastic avatarcloud-setupelastic/agent-skillsConfigures Elastic Cloud authentication and environment defaults. Use when setting up EC_API_KEY, configuring Cloud API access, or when another cloud skill requ2.7Kskills.sh installs
5onewave-ai avatarcode-review-proonewave-ai/claude-skillsComprehensive code review covering security vulnerabilities, performance bottlenecks, best practices, and refactoring opportunities. Use when user requests code2.6Kskills.sh installs
6semgrep avatarsemgrepsemgrep/skillsRun Semgrep static analysis scans and create custom detection rules. Use when asked to scan code with Semgrep, find security vulnerabilities, write custom YAML 2.3Kskills.sh installs