elastic/integration-skills
12 skills2.5k installs180 starsGitHub
Install
npx skills add https://github.com/elastic/integration-skillsSkills in this repo
1Integration TestingElastic integration testing skill for elastic-package test workflows. Covers pipeline fixture authoring with expected output files, system tests with mock API wiring, and script tests for failure path validation. Documents running tests locally, interpreting failures, updating expected outputs after intentional pipeline changes, and debugging mock server configuration. Essential for integration PRs that modify ingest behavior and need regression coverage before merge approval.216installs2Ingest PipelinesElastic integration skill for Elasticsearch ingest pipeline design. Covers single-path parsing, branching logic with conditional processors, sub-pipeline invocation, enrichment processors, and robust on_failure handling patterns. Used when building or modifying integration data streams that transform raw vendor events into ECS-aligned documents at ingest time. References processor catalog, grok and dissect patterns, and pipeline simulation for validation before deployment to Elastic Stack clusters.215installs3Dashboard GuidelinesElastic integration skill for Kibana dashboard authoring guidelines. Defines export JSON structure, panel naming conventions, visualization types, and data stream alignment requirements for integration package dashboards. Used when creating new dashboards or reviewing existing assets for compliance before merge. Ensures dashboards reference correct data stream names, use consistent time field configuration, and follow Elastic integration package layout conventions for kibana/ directory assets.214installs4Dashboard ReviewElastic integration dashboard review skill for PR and branch changes. Extracts structured dashboard descriptions with kbdash tool, compares before and after states, and checks compliance against dashboard-guidelines skill rules. Used when reviewing pull requests that modify Kibana dashboard JSON in integration packages, ensuring naming, data stream references, and panel structure meet package standards before approval.214installs5Research IntegrationElastic research integration orchestrator skill. Investigates vendors, products, and features to collect data collection methods, API or log documentation, sample data formats, field schemas, ECS mapping candidates, and configuration requirements. Delegates parallel research to write-capable subagents that download repos, run analysis scripts, and write findings to research_results/product/. Synthesizes subagent output with local reference material into a structured brief for downstream create-integration skill. Supports documentation URLs, local @-mentioned samples, scope constraints, and output name overrides.214installs6Ecs Field MappingsElastic integration ECS field mapping skill. Guides populating ecs.yml with ECS field references, selecting ECS categorization values for event.kind, category, type, and outcome, choosing custom field types when ECS fields are insufficient, and troubleshooting mapping conflicts. Used when defining field mappings for new or existing data streams in integration packages. Ensures documents align with Elastic Common Schema for cross-integration correlation and Kibana field compatibility.212installs7Anonymize LogsElastic integration skill for anonymizing log data in integration packages. Redacts PII, credentials, IP addresses, and vendor-specific sensitive fields from sample events, pipeline test fixtures, and documentation examples. Ensures test data and shared samples comply with privacy requirements before commit or publication. Covers consistent redaction patterns, hash-based pseudonymization where correlation is needed, and validation that anonymized fixtures still exercise pipeline logic correctly.211installs8Create IntegrationElastic create integration skill for new package scaffolding. Covers package layout questions, data stream creation, manifest configuration, ingest pipeline stubs, ecs.yml initialization, and end-to-end elastic-package build and test workflow. Primary input is often a research brief from research-integration skill. Guides developers through elastic-package CLI commands, package spec compliance, changelog initialization, and first successful build before opening PR for the new integration.211installs9Package SpecElastic package-spec skill for manifest and changelog compliance with upstream elastic/package-spec. Authoritative over legacy patterns in elastic/integrations repo. Covers format_version selection, conditions, variables at package policy template input and data stream levels, routing rules and required manifest flags, changelog schema with semantic version bumps, Handlebars template variable validation, and debugging elastic-package lint or check errors on metadata. Explicitly not for scaffolding, ingest pipelines, ECS mappings, or CEL programs.211installs10Review IntegrationElastic integration review skill for existing packages. Covers quality reviews of ingest pipelines, ecs.yml field mappings, CEL programs, package manifests, changelog entries, and test coverage. Identifies guideline violations, missing tests, ECS alignment issues, and documentation gaps before merge. Complements dashboard-review and maintain-integration skills with holistic package-level review criteria for PR approval of integration changes.211installs11Cel ProgramsUse for all CEL and mito work on integrations that collect from APIs writing CEL programs cel yml hbs templates manifest configuration mock-first development with the mito CLI system test mock setup and answering CEL mito questions Load this skill whenever any data stream uses the cel input type name cel-programs description Use for all CEL and mito work on integrations that collect from APIs writing CEL programs cel yml hbs templates manifest configuration mock-first development with the mito CLI system test mock setup and answering CEL mito questions Load this skill whenever any data stream uses the cel input type license Apache-2 0 metadata author elastic version 1 0 cel-programs When to use Use this skill when tasks include creating or editing cel yml hbs agent stream templates configuring data stream manifests for the cel input type writing CEL programs with pagination cursor management or authentication testing or debugging a CEL program locally with mito setting up system tests with mock APIs for CEL-based data streams prototyping a new209installs12Maintain IntegrationElastic maintain integration skill for ongoing package improvement. Covers quality reviews, targeted fixes to ingest pipelines, ecs.yml field mappings, CEL programs, package manifests, and changelog entries for existing integrations. Bridges review findings into concrete fixes and version bumps. Used when integrations need updates for vendor API changes, new event types, mapping corrections, or test failures without full rescaffold from create-integration.209installs