# elasticsearch-anomaly-detection

> Claude/Codex skill by [@elastic](https://omgskills.com/library/elastic/index.md) · 4 stars · Updated 2026-10-23

Create and manage Elastic ML anomaly detection jobs via the API. Use when setting up jobs on an index or data stream, configuring jobs and datafeeds, or opening, starting, or stopping them.

## Install

```sh
git clone https://github.com/elastic/claude-plugin /tmp/claude-plugin && ln -s /tmp/claude-plugin/skills/elasticsearch/elasticsearch-anomaly-detection ~/.claude/skills/elasticsearch-anomaly-detection
```

## From README

Elasticsearch Anomaly Detection Create, open, and start ML anomaly detection jobs on time-series data. Choose the right count-family detector direction, configure bucket span and time field, wire the datafeed to the correct index, and confirm running state from stats — not from assumptions. Environment Configuration This skill executes Elasticsearch operations through the elastic CLI. If the elastic CLI is not installed, tell the user what it is needed for. Do not guess credentials, call the HTTP API directly, or attempt other workarounds. This skill references operations in HTTP-shorthand form (e.g., GET /, GET /cat/indices, GET /{index}/mapping, GET /{index}/settings/index.mode, POST /query). The Operations table at the end of this document maps each shorthand to the equivalent elastic CLI command — always use the CLI rather than calling the HTTP API directly. Prerequisite: ML anomaly detection requires a Platinum-equivalent license on self-managed clusters.

## Links

- HTML page: https://omgskills.com/skills/elastic/claude-plugin/skills/elasticsearch/elasticsearch-anomaly-detection/
- GitHub: https://github.com/elastic/claude-plugin
- Author: [@elastic](https://omgskills.com/library/elastic/index.md)

## More from this repo

- [cloud-onboarding](https://omgskills.com/skills/elastic/claude-plugin/skills/cloud/onboarding/index.md) — Onboard an Elastic Cloud organization: configure the \`elastic\` CLI's Cloud context and API key, establish a default...
   - [@elastic](https://omgskills.com/library/elastic/index.md) · 4 stars
- [cloud-provisioning](https://omgskills.com/skills/elastic/claude-plugin/skills/cloud/provisioning/index.md) — Provision and operate Elastic Cloud infrastructure: create, connect to, update, and delete Serverless projects...
   - [@elastic](https://omgskills.com/library/elastic/index.md) · 4 stars
- [elasticsearch-anomaly-detection-explainer](https://omgskills.com/skills/elastic/claude-plugin/skills/elasticsearch/elasticsearch-anomaly-detection-explainer/index.md) — Explain Elasticsearch ML anomaly detection scores, model behavior, and result interpretation.
   - [@elastic](https://omgskills.com/library/elastic/index.md) · 4 stars