elasticsearch

Manage Elasticsearch and Kibana operations via REST API calls.

27|6|Updated Feb 1, 2026
One-click install
npx skills add https://github.com/davidgeorgehope/elasticsearch-skill --skill elasticsearch-davidgeorgehope
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: elasticsearch
Source: https://github.com/davidgeorgehope/elasticsearch-skill/tree/main
Command: npx skills add https://github.com/davidgeorgehope/elasticsearch-skill --skill elasticsearch-davidgeorgehope

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

It removes the guesswork from working with Elasticsearch and Kibana by giving Claude a practical REST-based playbook for authentication, search, indexing, cluster checks, and dashboard operations.

Core Features & Use Cases

  • Search and Querying: Use Query DSL and ES|QL to find logs, inspect traces, and build precise filters.
  • Index and Document Management: Create indices, update mappings, run bulk ingest, reindex data, and manage aliases.
  • Observability and Operations: Check cluster health, shard allocation, ILM, ingest pipelines, and troubleshoot production issues.
  • Kibana Workflows: Work with data views, saved objects, dashboards, and alerting for reporting and visualization.
  • Use Case: An operator can investigate a spike in errors by querying recent events, grouping them with aggregations, and confirming shard or lifecycle issues from the same playbook.

Quick Start

Ask the skill to connect to your Elasticsearch cluster and perform the REST API task you need, such as searching recent errors or checking cluster health.

Frequently Asked Questions about elasticsearch

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I manage Elasticsearch and Kibana operations using curl instead of an SDK?

You can manage Elasticsearch and Kibana operations using curl by executing REST API calls with API key authentication. This approach handles search, indexing, mappings, aggregations, and cluster health checks without requiring SDKs or MCP tools.

How do I check Elasticsearch cluster health and shard allocation via REST API?

To check Elasticsearch cluster health and shard allocation via REST API, you use curl-based requests with your ES_API_KEY against your ES_URL. This allows you to execute cluster actions safely and troubleshoot production issues directly.

What's the best way to search logs in Elasticsearch using Query DSL and ES|QL?

The best way to search logs using Query DSL and ES|QL is through REST API requests. By calling the Elasticsearch API with curl, you can find logs, inspect traces, and build precise filters without integrating a dedicated SDK.

Can I create indices, update mappings, and run bulk ingest in Elasticsearch without SDKs?

Yes, you can create indices, update mappings, run bulk ingest, reindex data, and manage aliases by sending curl-based REST API calls to your Elasticsearch cluster. This requires setting your ES_URL and ES_API_KEY environment variables.

Does this approach support Kibana workflows like managing dashboards and data views?

Yes, this REST API approach supports Kibana workflows. By configuring the optional KIBANA_URL alongside your ES_URL, you can work with data views, saved objects, dashboards, and alerting for reporting and visualization.

Do I need an API key to authenticate Elasticsearch REST API requests?

Yes, you need an ES_API_KEY to authenticate curl-based REST API requests safely. Along with the ES_URL, these credentials allow you to execute search, indexing, and observability operations across self-managed and Elastic Cloud deployments.