Security Generate Security Sample Data

If you're working with Elastic Security and need realistic test data to validate your dashboards, alerts, or Attack Discovery features, this generates ECS-compliant security events and multi-step attack scenarios. It's from the official Elastic agent-skills repo and includes a demo walkthrough script that spins up sample data and opens Kibana for you. Useful for testing detection rules without waiting for real incidents or manually crafting synthetic events. The generated data populates all the right places in Elastic Security, so you can see how your setup handles actual attack patterns. Saves you from the tedious work of creating believable security event data by hand.

skills.sh installs: 4.1K
GitHub stars: 604
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add elastic/agent-skills --skill security-generate-security-sample-data --agent claude-code

Installs into .claude/skills of the current project.

Files

Generate Security Sample Data

Generate ECS-compliant security events, multi-step attack scenarios, and synthetic alert documents that populate Elastic Security dashboards, the Alerts tab, and Attack Discovery.

Quick start

For a zero-friction experience that generates everything and opens Kibana:

node skills/security/generate-security-sample-data/scripts/demo-walkthrough.js

Workflow

- [ ] Step 1: Set environment variables
- [ ] Step 2: Generate sample data
- [ ] Step 3: Explore in Kibana
- [ ] Step 4: Clean up when done

Step 1: Set environment variables

export ELASTICSEARCH_URL="https://your-project.es.region.aws.elastic.cloud"
export ELASTICSEARCH_USERNAME="admin"
export ELASTICSEARCH_PASSWORD="your-password"
export KIBANA_URL="https://your-project.kb.region.aws.elastic.cloud"

Step 2: Generate sample data

Generate everything at once

node skills/security/generate-security-sample-data/scripts/sample-data.js \
  system endpoint okta aws windows --scenarios --alerts

Generate only events

SKILL.md on GitHub

Details

Repository: github.com/elastic/agent-skills
Categories: Testing & QA, Security, AI & Agent Building
First seen: May 16, 2026