elasticsearch-esql
Execute ES|QL (Elasticsearch Query Language) queries, use when the user wants to query Elasticsearch data, analyze logs, aggregate metrics, explore data, or create charts and dashboards from ES|QL results.
Install
With your agent
Install OMGSkills skill "elastic/agent-skills:elasticsearch-esql" into this agent's normal skills directory: call the OMGSkills MCP get_install_plan tool for your agent and run the script it returns (it installs only the pinned commit and verifies SKILL.md), and stop if MCP or the pin is unavailable. Do not overwrite or change existing skills without asking me.
Manual command
git clone https://github.com/elastic/agent-skills /tmp/agent-skills && ln -s /tmp/agent-skills/skills/elasticsearch/elasticsearch-esql ~/.claude/skills/elasticsearch-esql
From README
Elasticsearch ES|QL Execute ES|QL queries against Elasticsearch: discover the schema, choose the right ES|QL feature for the task, generate the simplest correct query, and run it. Environment Configuration This skill executes Elasticsearch operations through the elastic CLI. If the elastic CLI is not installed, tell the user what it is needed for. Do not guess credentials, call the HTTP API directly, or attempt other workarounds. This skill references operations in HTTP-shorthand form (e.g., GET /, GET /cat/indices, GET /{index}/mapping, GET /{index}/settings/index.mode, POST /query). The Operations table at the end of this document maps each shorthand to the equivalent elastic CLI command — always use the CLI rather than calling the HTTP API directly. What is ES|QL? ES|QL (Elasticsearch Query Language) is a piped query language for Elasticsearch.
More from this repo
elasticsearch-ingest
Load CSV, JSON, and NDJSON files into Elasticsearch indices using the bulk API and explicit mappings when field types...
elasticsearch-onboarding
Help developers new to Elasticsearch get from zero to a working search experience.
kibana-alerting-rules
Used to create and manage Kibana alerting rules.
