elastic avatar

Observability Logs Search

When you're debugging production incidents in Elastic, this skill gives Claude direct access to your observability logs through ES|QL queries. It follows the same iterative workflow you'd use in Kibana Discover: set a time range, apply filters, then progressively narrow down with NOT clauses until you isolate the interesting stuff. You can view logs in context around a specific event or pivot to search by a different entity. The discipline here is good: it enforces ES|QL only and tells you upfront this is for logs, not metrics or traces. If you're already running the Elastic stack and want Claude to help investigate incidents without switching contexts, this handles the query mechanics so you can focus on the actual problem.

skills.sh installs
3.2K
GitHub stars
604
last updated
Aug 21, 2026

Install

$ npx -y skills add elastic/agent-skills --skill observability-logs-search --agent claude-code

Installs into .claude/skills of the current project.

Files

When you're debugging production incidents in Elastic, this skill gives Claude direct access to your observability logs through ES|QL queries. It follows the same iterative workflow you'd use in Kibana Discover: set a time range, apply filters, then progressively narrow down with NOT clauses until you isolate the interesting stuff. You can view logs in context around a specific event or pivot to search by a different entity. The discipline here is good: it enforces ES|QL only and tells you upfront this is for logs, not metrics or traces. If you're already running the Elastic stack and want Claude to help investigate incidents without switching contexts, this handles the query mechanics so you can focus on the actual problem.

Browse the repository on GitHub

Sponsors

Details

Repository
github.com/elastic/agent-skills
Categories
DevOps & CI/CD, AI & Agent Building
First seen
May 16, 2026

More from elastic/agent-skills

All 57
1anthropics avatarpipeline-reviewanthropics/knowledge-work-pluginsAnalyze pipeline health — prioritize deals, flag risks, get a weekly action plan. Use when running a weekly pipeline review, deciding which deals to focus on th2.9Kskills.sh installs
2elastic avatarobservability-manage-sloselastic/agent-skillsCreate and manage SLOs in Elastic Observability using the Kibana API. Use when defining SLIs, setting error budgets, or managing SLO lifecycle.2.8Kskills.sh installs
3juliusbrussee avatarbuildjuliusbrussee/cavekitPlan-then-execute implementation against SPEC.md. Native single-thread loop, no sub-agents. On test or build failure, auto-invokes the backprop skill before ret2.7Kskills.sh installs
4github avatargithub-actions-hardeninggithub/awesome-copilotSecurity hardening reviewer for GitHub Actions workflow files (.github/workflows/*.yml). Reasons about the Actions threat model that pattern matchers and genera2.6Kskills.sh installs
5rudrankriyam avatarasc-xcode-buildrudrankriyam/app-store-connect-cli-skillsasc xcode build2.5Kskills.sh installs
6github avatargithub-actions-efficiencygithub/awesome-copilotAudit GitHub Actions workflow efficiency and recommend fixes to reduce CI minutes and costs.2.4Kskills.sh installs