Claude MarketplacesSubmit
elastic avatar

Kibana Audit

elastic/agent-skillsOfficial

If you need to track who's accessing, modifying, or deleting Kibana dashboards, visualizations, and other saved objects, this skill walks you through enabling and configuring audit logging via kibana.yml. It covers the setup for rolling file or console output, filtering out noisy events like saved_object_find, and the crucial bit about correlating Kibana events with Elasticsearch audit logs using trace.id. The skill includes practical examples for shipping Kibana audit logs to Elasticsearch with Filebeat so you can query everything in one place. It's thorough on the deployment differences between self-managed and cloud setups, and clearly distinguishes what Kibana audit captures versus what Elasticsearch audit handles.

skills.sh installs
2.8K
GitHub stars
604
last updated
Aug 21, 2026
View on GitHub

Install

$ npx -y skills add elastic/agent-skills --skill kibana-audit --agent claude-code

Installs into .claude/skills of the current project.

Files

If you need to track who's accessing, modifying, or deleting Kibana dashboards, visualizations, and other saved objects, this skill walks you through enabling and configuring audit logging via kibana.yml. It covers the setup for rolling file or console output, filtering out noisy events like saved_object_find, and the crucial bit about correlating Kibana events with Elasticsearch audit logs using trace.id. The skill includes practical examples for shipping Kibana audit logs to Elasticsearch with Filebeat so you can query everything in one place. It's thorough on the deployment differences between self-managed and cloud setups, and clearly distinguishes what Kibana audit captures versus what Elasticsearch audit handles.

Browse the repository on GitHub

Sponsors

Promote your product hereReach 125k+ visitors monthlyPromote your product hereReach 125k+ visitors monthlyAgent CaffeineSponsoredClose your lid, come back to finished workSnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthlyWaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthlyknobsSponsoredSee your site on any phone, any day, in any language

Details

Repository
github.com/elastic/agent-skills
Categories
DevOps & CI/CD, AI & Agent Building
First seen
May 16, 2026

More from elastic/agent-skills

All 57

Recommended

More DevOps & CI/CD
1hashicorp avatarazure-image-builderhashicorp/agent-skillsBuild Azure managed images and Azure Compute Gallery images with Packer. Use when creating custom images for Azure VMs.2.8Kskills.sh installs
2hashicorp avatarwindows-builderhashicorp/agent-skillsBuild Windows images with Packer using WinRM communicator and PowerShell provisioners. Use when creating Windows AMIs, Azure images, or VMware templates.2.8Kskills.sh installs
3nexu-io avatarfigma-generate-librarynexu-io/open-designBuild or update a professional-grade design system library in Figma from a codebase. Useful for keeping the Figma source of truth in sync with shipped component2.8Kskills.sh installs
4slavingia avatarmvpslavingia/skillsGuide building a minimum viable product the minimalist entrepreneur way — manual first, then processized, then productized. Use when someone is ready to build t2.8Kskills.sh installs
5dpearson2699 avatarcore-datadpearson2699/swift-ios-skillsBuild, review, or improve Core Data persistence in apps that have not adopted SwiftData. Use when working with NSManagedObject subclasses, NSFetchedResultsContr2.8Kskills.sh installs
6juliusbrussee avatarcavemanjuliusbrussee/cavekitCaveman encoding for SPEC.md and spec-adjacent writes. Loaded by /spec, /build, /check. Cuts tokens ~75% vs prose while staying precise. Triggers on any write t2.8Kskills.sh installs