[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill-elastic-dashboard-guidelines":3,"mdc--uozz16-key":36,"related-org-elastic-dashboard-guidelines":829,"related-repo-elastic-dashboard-guidelines":1001},{"slug":4,"name":4,"fn":5,"description":6,"org":7,"tags":11,"stars":25,"repoUrl":26,"updatedAt":27,"license":28,"forks":29,"topics":30,"repo":31,"sourceUrl":34,"mdContent":35},"dashboard-guidelines","create and review Kibana dashboard assets","Use when creating or reviewing Kibana assets in packages, including dashboard export structure, naming, and data stream alignment.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},"elastic","Elastic","https:\u002F\u002Fpexgzepcugksgbtrxkhf.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Forg-logos\u002Felastic.png",[12,16,19,22],{"name":13,"slug":14,"type":15},"Dashboards","dashboards","tag",{"name":17,"slug":18,"type":15},"Kibana","kibana",{"name":20,"slug":21,"type":15},"Elasticsearch","elasticsearch",{"name":23,"slug":24,"type":15},"UI Components","ui-components",11,"https:\u002F\u002Fgithub.com\u002Felastic\u002Fintegration-skills","2026-07-12T07:47:07.702332","Apache-2.0",2,[],{"repoUrl":26,"stars":25,"forks":29,"topics":32,"description":33},[],null,"https:\u002F\u002Fgithub.com\u002Felastic\u002Fintegration-skills\u002Ftree\u002FHEAD\u002Fskills\u002Fdashboard-guidelines","---\nname: dashboard-guidelines\ndescription: \"Use when creating or reviewing Kibana assets in packages, including dashboard export structure, naming, and data stream alignment.\"\nlicense: Apache-2.0\nmetadata:\n  author: elastic\n  version: \"1.0\"\n---\n\n# dashboard-guidelines\n\n\n## When to use\n\nUse this skill when tasks include:\n- creating new Kibana dashboards for an integration package\n- reviewing dashboard JSON changes in `kibana\u002F` folders\n- exporting dashboard updates from Kibana into package source\n- verifying dashboard naming and file layout against package spec\n- checking dashboard\u002Fdata stream alignment through `data_stream.dataset` filtering\n\n## When not to use\n\nDo not use this skill as the primary guide for:\n- package and data stream directory scaffolding (`create-integration`, `package-structure`)\n- ingest pipeline parsing and normalization logic (`ingest-pipelines`)\n- package-wide command orchestration and stack lifecycle decisions (`elastic-package-cli`)\n- test suite selection outside dashboard-focused checks (`integration-testing`  → `references\u002Fsystem-testing.md`)\n\n## Preconditions\n\nBefore creating or updating dashboard assets, verify:\n1. you are in the correct package directory (`packages\u002F\u003Cpackage_name>\u002F`)\n2. Kibana\u002FElastic services are available for editing and exporting assets\n3. sample data exists and dashboards can be validated against realistic events\u002Fmetrics\n4. package `manifest.yml` compatibility constraints (`conditions.kibana.version`) are understood\n\n## Workflow: create, export, validate\n\n1. Build or update dashboards in Kibana.\n   - Prefer Lens for new visualizations.\n   - Keep panels in the dashboard itself (by value) unless shared-library behavior is intentionally required.\n2. Export assets back into the package.\n\n```bash\n# from package root\nelastic-package export\n```\n\n3. If you need to modify installed managed dashboards before exporting:\n\n```bash\nelastic-package edit dashboards\nelastic-package export dashboards\n```\n\n4. Review exported files under `kibana\u002F`:\n   - file names match package spec\n   - no stale field names after mapping changes\n   - dashboard filters are scoped to integration datasets\n\n5. Run package validation commands before opening a PR:\n\n```bash\nelastic-package check\n```\n\n## Naming conventions\n\nUse naming conventions from dashboard creation guidance:\n\n- Visualization title:\n  - `\u003CName>` (avoid repeating package name in each panel title)\n- Dashboard title:\n  - `[\u003CMetrics | Logs> \u003CPACKAGE NAME>] \u003CName>`\n  - examples: `[Metrics System] Host overview`, `[Logs Nginx] Access overview`\n- Dashboard asset file:\n  - `{PACKAGE_NAME}-{identifier}.json`\n  - example: `nginx-046212a0-a2a1-11e7-928f-5dbe6f6f5519.json`\n\n## Design and modeling best practices\n\n- Use stable released Kibana versions (avoid SNAPSHOT).\n- Keep dashboards focused; split overloaded boards and provide navigation links.\n- Prefer by-value panels so dashboards remain self-contained.\n- Prefer Lens over TSVB for new visualizations.\n- Add controls using dashboard-native **Controls** (not deprecated input controls visualization).\n- Include dataset-aware filtering to prevent broad `logs-*` \u002F `metrics-*` queries where possible.\n  - baseline recommendation: filter by `data_stream.dataset`\n- Keep visual hierarchy clear:\n  - most important summary panels near the top\n  - related charts grouped together\n  - margins enabled for readability\n- Use concise, self-explanatory panel titles and consistent accessible colors.\n\n## Quality checklist before PR\n\n- dashboard assets are in `kibana\u002Fdashboard\u002F` and follow expected naming pattern\n- dashboard content reflects current field names and types\n- visualizations are embedded by value unless there is a documented exception\n- dashboard or panel queries include integration-relevant filters (`data_stream.dataset` when applicable)\n- controls\u002Fdrilldowns\u002Fnavigation are coherent for multi-dashboard packages\n- exported dependencies are committed (dashboards plus required saved objects)\n- `elastic-package check` passes for the package\n\n## Common pitfalls\n\n- exporting from an unstable Kibana build and committing incompatible saved object data\n- using generic, unfiltered `logs-*`\u002F`metrics-*` queries that cause noisy or slow panels\n- keeping stale field references after pipeline\u002Ffield mapping changes\n- overloading one dashboard instead of splitting into overview and deep-dive views\n- relying on library visualizations unintentionally, causing hidden dependencies\n- inconsistent naming between dashboard title, file name, and package context\n\n## Handoff to other skills\n\nAfter dashboard updates are in place, continue with:\n1. `dashboard-review` for reviewing dashboard JSON changes in a PR or branch\n2. `integration-testing` → `references\u002Fsystem-testing.md` for system test validation\n3. `elastic-package-cli` for broader check\u002Flint\u002Ftest command selection\n4. `package-spec` when dashboard changes require a release note entry\n\n## References\n\n- `references\u002Fkibana-assets-layout.md`\n",{"data":37,"body":40},{"name":4,"description":6,"license":28,"metadata":38},{"author":8,"version":39},"1.0",{"type":41,"children":42},"root",[43,50,57,63,110,116,121,189,195,200,247,253,279,317,326,366,405,424,430,435,520,526,624,630,689,695,742,748,753,805,811,823],{"type":44,"tag":45,"props":46,"children":47},"element","h1",{"id":4},[48],{"type":49,"value":4},"text",{"type":44,"tag":51,"props":52,"children":54},"h2",{"id":53},"when-to-use",[55],{"type":49,"value":56},"When to use",{"type":44,"tag":58,"props":59,"children":60},"p",{},[61],{"type":49,"value":62},"Use this skill when tasks include:",{"type":44,"tag":64,"props":65,"children":66},"ul",{},[67,73,87,92,97],{"type":44,"tag":68,"props":69,"children":70},"li",{},[71],{"type":49,"value":72},"creating new Kibana dashboards for an integration package",{"type":44,"tag":68,"props":74,"children":75},{},[76,78,85],{"type":49,"value":77},"reviewing dashboard JSON changes in ",{"type":44,"tag":79,"props":80,"children":82},"code",{"className":81},[],[83],{"type":49,"value":84},"kibana\u002F",{"type":49,"value":86}," folders",{"type":44,"tag":68,"props":88,"children":89},{},[90],{"type":49,"value":91},"exporting dashboard updates from Kibana into package source",{"type":44,"tag":68,"props":93,"children":94},{},[95],{"type":49,"value":96},"verifying dashboard naming and file layout against package spec",{"type":44,"tag":68,"props":98,"children":99},{},[100,102,108],{"type":49,"value":101},"checking dashboard\u002Fdata stream alignment through ",{"type":44,"tag":79,"props":103,"children":105},{"className":104},[],[106],{"type":49,"value":107},"data_stream.dataset",{"type":49,"value":109}," filtering",{"type":44,"tag":51,"props":111,"children":113},{"id":112},"when-not-to-use",[114],{"type":49,"value":115},"When not to use",{"type":44,"tag":58,"props":117,"children":118},{},[119],{"type":49,"value":120},"Do not use this skill as the primary guide for:",{"type":44,"tag":64,"props":122,"children":123},{},[124,145,157,169],{"type":44,"tag":68,"props":125,"children":126},{},[127,129,135,137,143],{"type":49,"value":128},"package and data stream directory scaffolding (",{"type":44,"tag":79,"props":130,"children":132},{"className":131},[],[133],{"type":49,"value":134},"create-integration",{"type":49,"value":136},", ",{"type":44,"tag":79,"props":138,"children":140},{"className":139},[],[141],{"type":49,"value":142},"package-structure",{"type":49,"value":144},")",{"type":44,"tag":68,"props":146,"children":147},{},[148,150,156],{"type":49,"value":149},"ingest pipeline parsing and normalization logic (",{"type":44,"tag":79,"props":151,"children":153},{"className":152},[],[154],{"type":49,"value":155},"ingest-pipelines",{"type":49,"value":144},{"type":44,"tag":68,"props":158,"children":159},{},[160,162,168],{"type":49,"value":161},"package-wide command orchestration and stack lifecycle decisions (",{"type":44,"tag":79,"props":163,"children":165},{"className":164},[],[166],{"type":49,"value":167},"elastic-package-cli",{"type":49,"value":144},{"type":44,"tag":68,"props":170,"children":171},{},[172,174,180,182,188],{"type":49,"value":173},"test suite selection outside dashboard-focused checks (",{"type":44,"tag":79,"props":175,"children":177},{"className":176},[],[178],{"type":49,"value":179},"integration-testing",{"type":49,"value":181},"  → ",{"type":44,"tag":79,"props":183,"children":185},{"className":184},[],[186],{"type":49,"value":187},"references\u002Fsystem-testing.md",{"type":49,"value":144},{"type":44,"tag":51,"props":190,"children":192},{"id":191},"preconditions",[193],{"type":49,"value":194},"Preconditions",{"type":44,"tag":58,"props":196,"children":197},{},[198],{"type":49,"value":199},"Before creating or updating dashboard assets, verify:",{"type":44,"tag":201,"props":202,"children":203},"ol",{},[204,216,221,226],{"type":44,"tag":68,"props":205,"children":206},{},[207,209,215],{"type":49,"value":208},"you are in the correct package directory (",{"type":44,"tag":79,"props":210,"children":212},{"className":211},[],[213],{"type":49,"value":214},"packages\u002F\u003Cpackage_name>\u002F",{"type":49,"value":144},{"type":44,"tag":68,"props":217,"children":218},{},[219],{"type":49,"value":220},"Kibana\u002FElastic services are available for editing and exporting assets",{"type":44,"tag":68,"props":222,"children":223},{},[224],{"type":49,"value":225},"sample data exists and dashboards can be validated against realistic events\u002Fmetrics",{"type":44,"tag":68,"props":227,"children":228},{},[229,231,237,239,245],{"type":49,"value":230},"package ",{"type":44,"tag":79,"props":232,"children":234},{"className":233},[],[235],{"type":49,"value":236},"manifest.yml",{"type":49,"value":238}," compatibility constraints (",{"type":44,"tag":79,"props":240,"children":242},{"className":241},[],[243],{"type":49,"value":244},"conditions.kibana.version",{"type":49,"value":246},") are understood",{"type":44,"tag":51,"props":248,"children":250},{"id":249},"workflow-create-export-validate",[251],{"type":49,"value":252},"Workflow: create, export, validate",{"type":44,"tag":201,"props":254,"children":255},{},[256,274],{"type":44,"tag":68,"props":257,"children":258},{},[259,261],{"type":49,"value":260},"Build or update dashboards in Kibana.\n",{"type":44,"tag":64,"props":262,"children":263},{},[264,269],{"type":44,"tag":68,"props":265,"children":266},{},[267],{"type":49,"value":268},"Prefer Lens for new visualizations.",{"type":44,"tag":68,"props":270,"children":271},{},[272],{"type":49,"value":273},"Keep panels in the dashboard itself (by value) unless shared-library behavior is intentionally required.",{"type":44,"tag":68,"props":275,"children":276},{},[277],{"type":49,"value":278},"Export assets back into the package.",{"type":44,"tag":280,"props":281,"children":286},"pre",{"className":282,"code":283,"language":284,"meta":285,"style":285},"language-bash shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","# from package root\nelastic-package export\n","bash","",[287],{"type":44,"tag":79,"props":288,"children":289},{"__ignoreMap":285},[290,302],{"type":44,"tag":291,"props":292,"children":295},"span",{"class":293,"line":294},"line",1,[296],{"type":44,"tag":291,"props":297,"children":299},{"style":298},"--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic",[300],{"type":49,"value":301},"# from package root\n",{"type":44,"tag":291,"props":303,"children":304},{"class":293,"line":29},[305,311],{"type":44,"tag":291,"props":306,"children":308},{"style":307},"--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B",[309],{"type":49,"value":310},"elastic-package",{"type":44,"tag":291,"props":312,"children":314},{"style":313},"--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D",[315],{"type":49,"value":316}," export\n",{"type":44,"tag":201,"props":318,"children":320},{"start":319},3,[321],{"type":44,"tag":68,"props":322,"children":323},{},[324],{"type":49,"value":325},"If you need to modify installed managed dashboards before exporting:",{"type":44,"tag":280,"props":327,"children":329},{"className":282,"code":328,"language":284,"meta":285,"style":285},"elastic-package edit dashboards\nelastic-package export dashboards\n",[330],{"type":44,"tag":79,"props":331,"children":332},{"__ignoreMap":285},[333,350],{"type":44,"tag":291,"props":334,"children":335},{"class":293,"line":294},[336,340,345],{"type":44,"tag":291,"props":337,"children":338},{"style":307},[339],{"type":49,"value":310},{"type":44,"tag":291,"props":341,"children":342},{"style":313},[343],{"type":49,"value":344}," edit",{"type":44,"tag":291,"props":346,"children":347},{"style":313},[348],{"type":49,"value":349}," dashboards\n",{"type":44,"tag":291,"props":351,"children":352},{"class":293,"line":29},[353,357,362],{"type":44,"tag":291,"props":354,"children":355},{"style":307},[356],{"type":49,"value":310},{"type":44,"tag":291,"props":358,"children":359},{"style":313},[360],{"type":49,"value":361}," export",{"type":44,"tag":291,"props":363,"children":364},{"style":313},[365],{"type":49,"value":349},{"type":44,"tag":201,"props":367,"children":369},{"start":368},4,[370,400],{"type":44,"tag":68,"props":371,"children":372},{},[373,375,380,382],{"type":49,"value":374},"Review exported files under ",{"type":44,"tag":79,"props":376,"children":378},{"className":377},[],[379],{"type":49,"value":84},{"type":49,"value":381},":",{"type":44,"tag":64,"props":383,"children":384},{},[385,390,395],{"type":44,"tag":68,"props":386,"children":387},{},[388],{"type":49,"value":389},"file names match package spec",{"type":44,"tag":68,"props":391,"children":392},{},[393],{"type":49,"value":394},"no stale field names after mapping changes",{"type":44,"tag":68,"props":396,"children":397},{},[398],{"type":49,"value":399},"dashboard filters are scoped to integration datasets",{"type":44,"tag":68,"props":401,"children":402},{},[403],{"type":49,"value":404},"Run package validation commands before opening a PR:",{"type":44,"tag":280,"props":406,"children":408},{"className":282,"code":407,"language":284,"meta":285,"style":285},"elastic-package check\n",[409],{"type":44,"tag":79,"props":410,"children":411},{"__ignoreMap":285},[412],{"type":44,"tag":291,"props":413,"children":414},{"class":293,"line":294},[415,419],{"type":44,"tag":291,"props":416,"children":417},{"style":307},[418],{"type":49,"value":310},{"type":44,"tag":291,"props":420,"children":421},{"style":313},[422],{"type":49,"value":423}," check\n",{"type":44,"tag":51,"props":425,"children":427},{"id":426},"naming-conventions",[428],{"type":49,"value":429},"Naming conventions",{"type":44,"tag":58,"props":431,"children":432},{},[433],{"type":49,"value":434},"Use naming conventions from dashboard creation guidance:",{"type":44,"tag":64,"props":436,"children":437},{},[438,457,492],{"type":44,"tag":68,"props":439,"children":440},{},[441,443],{"type":49,"value":442},"Visualization title:\n",{"type":44,"tag":64,"props":444,"children":445},{},[446],{"type":44,"tag":68,"props":447,"children":448},{},[449,455],{"type":44,"tag":79,"props":450,"children":452},{"className":451},[],[453],{"type":49,"value":454},"\u003CName>",{"type":49,"value":456}," (avoid repeating package name in each panel title)",{"type":44,"tag":68,"props":458,"children":459},{},[460,462],{"type":49,"value":461},"Dashboard title:\n",{"type":44,"tag":64,"props":463,"children":464},{},[465,474],{"type":44,"tag":68,"props":466,"children":467},{},[468],{"type":44,"tag":79,"props":469,"children":471},{"className":470},[],[472],{"type":49,"value":473},"[\u003CMetrics | Logs> \u003CPACKAGE NAME>] \u003CName>",{"type":44,"tag":68,"props":475,"children":476},{},[477,479,485,486],{"type":49,"value":478},"examples: ",{"type":44,"tag":79,"props":480,"children":482},{"className":481},[],[483],{"type":49,"value":484},"[Metrics System] Host overview",{"type":49,"value":136},{"type":44,"tag":79,"props":487,"children":489},{"className":488},[],[490],{"type":49,"value":491},"[Logs Nginx] Access overview",{"type":44,"tag":68,"props":493,"children":494},{},[495,497],{"type":49,"value":496},"Dashboard asset file:\n",{"type":44,"tag":64,"props":498,"children":499},{},[500,509],{"type":44,"tag":68,"props":501,"children":502},{},[503],{"type":44,"tag":79,"props":504,"children":506},{"className":505},[],[507],{"type":49,"value":508},"{PACKAGE_NAME}-{identifier}.json",{"type":44,"tag":68,"props":510,"children":511},{},[512,514],{"type":49,"value":513},"example: ",{"type":44,"tag":79,"props":515,"children":517},{"className":516},[],[518],{"type":49,"value":519},"nginx-046212a0-a2a1-11e7-928f-5dbe6f6f5519.json",{"type":44,"tag":51,"props":521,"children":523},{"id":522},"design-and-modeling-best-practices",[524],{"type":49,"value":525},"Design and modeling best practices",{"type":44,"tag":64,"props":527,"children":528},{},[529,534,539,544,549,562,596,619],{"type":44,"tag":68,"props":530,"children":531},{},[532],{"type":49,"value":533},"Use stable released Kibana versions (avoid SNAPSHOT).",{"type":44,"tag":68,"props":535,"children":536},{},[537],{"type":49,"value":538},"Keep dashboards focused; split overloaded boards and provide navigation links.",{"type":44,"tag":68,"props":540,"children":541},{},[542],{"type":49,"value":543},"Prefer by-value panels so dashboards remain self-contained.",{"type":44,"tag":68,"props":545,"children":546},{},[547],{"type":49,"value":548},"Prefer Lens over TSVB for new visualizations.",{"type":44,"tag":68,"props":550,"children":551},{},[552,554,560],{"type":49,"value":553},"Add controls using dashboard-native ",{"type":44,"tag":555,"props":556,"children":557},"strong",{},[558],{"type":49,"value":559},"Controls",{"type":49,"value":561}," (not deprecated input controls visualization).",{"type":44,"tag":68,"props":563,"children":564},{},[565,567,573,575,581,583],{"type":49,"value":566},"Include dataset-aware filtering to prevent broad ",{"type":44,"tag":79,"props":568,"children":570},{"className":569},[],[571],{"type":49,"value":572},"logs-*",{"type":49,"value":574}," \u002F ",{"type":44,"tag":79,"props":576,"children":578},{"className":577},[],[579],{"type":49,"value":580},"metrics-*",{"type":49,"value":582}," queries where possible.\n",{"type":44,"tag":64,"props":584,"children":585},{},[586],{"type":44,"tag":68,"props":587,"children":588},{},[589,591],{"type":49,"value":590},"baseline recommendation: filter by ",{"type":44,"tag":79,"props":592,"children":594},{"className":593},[],[595],{"type":49,"value":107},{"type":44,"tag":68,"props":597,"children":598},{},[599,601],{"type":49,"value":600},"Keep visual hierarchy clear:\n",{"type":44,"tag":64,"props":602,"children":603},{},[604,609,614],{"type":44,"tag":68,"props":605,"children":606},{},[607],{"type":49,"value":608},"most important summary panels near the top",{"type":44,"tag":68,"props":610,"children":611},{},[612],{"type":49,"value":613},"related charts grouped together",{"type":44,"tag":68,"props":615,"children":616},{},[617],{"type":49,"value":618},"margins enabled for readability",{"type":44,"tag":68,"props":620,"children":621},{},[622],{"type":49,"value":623},"Use concise, self-explanatory panel titles and consistent accessible colors.",{"type":44,"tag":51,"props":625,"children":627},{"id":626},"quality-checklist-before-pr",[628],{"type":49,"value":629},"Quality checklist before PR",{"type":44,"tag":64,"props":631,"children":632},{},[633,646,651,656,668,673,678],{"type":44,"tag":68,"props":634,"children":635},{},[636,638,644],{"type":49,"value":637},"dashboard assets are in ",{"type":44,"tag":79,"props":639,"children":641},{"className":640},[],[642],{"type":49,"value":643},"kibana\u002Fdashboard\u002F",{"type":49,"value":645}," and follow expected naming pattern",{"type":44,"tag":68,"props":647,"children":648},{},[649],{"type":49,"value":650},"dashboard content reflects current field names and types",{"type":44,"tag":68,"props":652,"children":653},{},[654],{"type":49,"value":655},"visualizations are embedded by value unless there is a documented exception",{"type":44,"tag":68,"props":657,"children":658},{},[659,661,666],{"type":49,"value":660},"dashboard or panel queries include integration-relevant filters (",{"type":44,"tag":79,"props":662,"children":664},{"className":663},[],[665],{"type":49,"value":107},{"type":49,"value":667}," when applicable)",{"type":44,"tag":68,"props":669,"children":670},{},[671],{"type":49,"value":672},"controls\u002Fdrilldowns\u002Fnavigation are coherent for multi-dashboard packages",{"type":44,"tag":68,"props":674,"children":675},{},[676],{"type":49,"value":677},"exported dependencies are committed (dashboards plus required saved objects)",{"type":44,"tag":68,"props":679,"children":680},{},[681,687],{"type":44,"tag":79,"props":682,"children":684},{"className":683},[],[685],{"type":49,"value":686},"elastic-package check",{"type":49,"value":688}," passes for the package",{"type":44,"tag":51,"props":690,"children":692},{"id":691},"common-pitfalls",[693],{"type":49,"value":694},"Common pitfalls",{"type":44,"tag":64,"props":696,"children":697},{},[698,703,722,727,732,737],{"type":44,"tag":68,"props":699,"children":700},{},[701],{"type":49,"value":702},"exporting from an unstable Kibana build and committing incompatible saved object data",{"type":44,"tag":68,"props":704,"children":705},{},[706,708,713,715,720],{"type":49,"value":707},"using generic, unfiltered ",{"type":44,"tag":79,"props":709,"children":711},{"className":710},[],[712],{"type":49,"value":572},{"type":49,"value":714},"\u002F",{"type":44,"tag":79,"props":716,"children":718},{"className":717},[],[719],{"type":49,"value":580},{"type":49,"value":721}," queries that cause noisy or slow panels",{"type":44,"tag":68,"props":723,"children":724},{},[725],{"type":49,"value":726},"keeping stale field references after pipeline\u002Ffield mapping changes",{"type":44,"tag":68,"props":728,"children":729},{},[730],{"type":49,"value":731},"overloading one dashboard instead of splitting into overview and deep-dive views",{"type":44,"tag":68,"props":733,"children":734},{},[735],{"type":49,"value":736},"relying on library visualizations unintentionally, causing hidden dependencies",{"type":44,"tag":68,"props":738,"children":739},{},[740],{"type":49,"value":741},"inconsistent naming between dashboard title, file name, and package context",{"type":44,"tag":51,"props":743,"children":745},{"id":744},"handoff-to-other-skills",[746],{"type":49,"value":747},"Handoff to other skills",{"type":44,"tag":58,"props":749,"children":750},{},[751],{"type":49,"value":752},"After dashboard updates are in place, continue with:",{"type":44,"tag":201,"props":754,"children":755},{},[756,767,784,794],{"type":44,"tag":68,"props":757,"children":758},{},[759,765],{"type":44,"tag":79,"props":760,"children":762},{"className":761},[],[763],{"type":49,"value":764},"dashboard-review",{"type":49,"value":766}," for reviewing dashboard JSON changes in a PR or branch",{"type":44,"tag":68,"props":768,"children":769},{},[770,775,777,782],{"type":44,"tag":79,"props":771,"children":773},{"className":772},[],[774],{"type":49,"value":179},{"type":49,"value":776}," → ",{"type":44,"tag":79,"props":778,"children":780},{"className":779},[],[781],{"type":49,"value":187},{"type":49,"value":783}," for system test validation",{"type":44,"tag":68,"props":785,"children":786},{},[787,792],{"type":44,"tag":79,"props":788,"children":790},{"className":789},[],[791],{"type":49,"value":167},{"type":49,"value":793}," for broader check\u002Flint\u002Ftest command selection",{"type":44,"tag":68,"props":795,"children":796},{},[797,803],{"type":44,"tag":79,"props":798,"children":800},{"className":799},[],[801],{"type":49,"value":802},"package-spec",{"type":49,"value":804}," when dashboard changes require a release note entry",{"type":44,"tag":51,"props":806,"children":808},{"id":807},"references",[809],{"type":49,"value":810},"References",{"type":44,"tag":64,"props":812,"children":813},{},[814],{"type":44,"tag":68,"props":815,"children":816},{},[817],{"type":44,"tag":79,"props":818,"children":820},{"className":819},[],[821],{"type":49,"value":822},"references\u002Fkibana-assets-layout.md",{"type":44,"tag":824,"props":825,"children":826},"style",{},[827],{"type":49,"value":828},"html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}",{"items":830,"total":1000},[831,850,867,880,899,911,921,936,948,963,974,987],{"slug":832,"name":832,"fn":833,"description":834,"org":835,"tags":836,"stars":847,"repoUrl":848,"updatedAt":849},"accessing-benchmark-results","retrieve and analyze Rally benchmark results","Retrieve Rally benchmark results from an external Elasticsearch metrics store. Use to list past races, get a single race's overall (per-task) results, chart a metric's trend across multiple runs, compare two races, or check whether a run converged — e.g. \"show me recent geonames races\", \"what's the service_time trend for nyc_taxis over the last 30 days?\", \"compare these two race-ids\". Applies when datastore.type = elasticsearch is set in ~\u002F.rally\u002Frally.ini.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[837,840,843,844],{"name":838,"slug":839,"type":15},"Analytics","analytics",{"name":841,"slug":842,"type":15},"Data Analysis","data-analysis",{"name":9,"slug":8,"type":15},{"name":845,"slug":846,"type":15},"Performance","performance",2027,"https:\u002F\u002Fgithub.com\u002Felastic\u002Frally","2026-07-12T07:46:38.54144",{"slug":851,"name":851,"fn":852,"description":853,"org":854,"tags":855,"stars":847,"repoUrl":848,"updatedAt":866},"developing-rally","develop and debug Rally source code","Work on Rally's own codebase, not running benchmarks with it. Use when setting up the dev environment, running Rally's tests or linters, navigating its source, debugging Rally's own code, or making changes to Rally itself.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[856,859,860,863],{"name":857,"slug":858,"type":15},"Debugging","debugging",{"name":9,"slug":8,"type":15},{"name":861,"slug":862,"type":15},"Engineering","engineering",{"name":864,"slug":865,"type":15},"Local Development","local-development","2026-07-12T07:46:35.976807",{"slug":868,"name":868,"fn":869,"description":870,"org":871,"tags":872,"stars":847,"repoUrl":848,"updatedAt":879},"running-benchmarks","run Rally benchmarks against Elasticsearch","Run Rally benchmarks (races) against Elasticsearch — an existing\u002Fexternal cluster or a Rally-provisioned distribution — and read the summary report. Use when running a race (any pipeline, track, challenge, target-hosts, or auth) or when interpreting throughput, latency, and service_time results.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[873,874,875,876],{"name":9,"slug":8,"type":15},{"name":20,"slug":21,"type":15},{"name":845,"slug":846,"type":15},{"name":877,"slug":878,"type":15},"Testing","testing","2026-07-12T07:46:37.277964",{"slug":881,"name":881,"fn":882,"description":883,"org":884,"tags":885,"stars":896,"repoUrl":897,"updatedAt":898},"cloud-access-management","manage Elastic Cloud organization access","Manage Elastic Cloud organization access: invite users, assign roles to Serverless projects, and create or revoke Cloud API keys. Use when granting, modifying, or auditing user access.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[886,889,890,893],{"name":887,"slug":888,"type":15},"Cloud","cloud",{"name":9,"slug":8,"type":15},{"name":891,"slug":892,"type":15},"Operations","operations",{"name":894,"slug":895,"type":15},"Permissions","permissions",531,"https:\u002F\u002Fgithub.com\u002Felastic\u002Fagent-skills","2026-07-12T07:46:44.946285",{"slug":900,"name":900,"fn":901,"description":902,"org":903,"tags":904,"stars":896,"repoUrl":897,"updatedAt":910},"cloud-create-project","create Elastic Cloud Serverless projects","Creates Elastic Cloud Serverless projects (Elasticsearch, Observability, or Security) via the REST API, saves credentials to file, and bootstraps a scoped Elasticsearch API key. Use when creating a new serverless project, provisioning a search or observability environment, or spinning up a new Elastic Cloud project.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[905,906,909],{"name":887,"slug":888,"type":15},{"name":907,"slug":908,"type":15},"Deployment","deployment",{"name":20,"slug":21,"type":15},"2026-07-12T07:46:42.353362",{"slug":912,"name":912,"fn":913,"description":914,"org":915,"tags":916,"stars":896,"repoUrl":897,"updatedAt":920},"cloud-manage-project","manage Elastic Cloud Serverless projects","Manages existing Elastic Cloud Serverless projects: list, get, update, delete, reset credentials, resume, and load saved credentials. Connects to existing projects by resolving endpoints and acquiring scoped Elasticsearch API keys. Use when performing day-2 operations on serverless projects, connecting to an existing project, loading or resetting project credentials, or looking up project details.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[917,918,919],{"name":887,"slug":888,"type":15},{"name":20,"slug":21,"type":15},{"name":891,"slug":892,"type":15},"2026-07-12T07:46:41.097412",{"slug":922,"name":922,"fn":923,"description":924,"org":925,"tags":926,"stars":896,"repoUrl":897,"updatedAt":935},"cloud-network-security","manage Elastic Cloud network security","Manage Serverless network security (traffic filters): create, update, and delete IP filters and AWS PrivateLink VPC filters. Use when restricting network access or configuring private connectivity.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[927,928,929,932],{"name":887,"slug":888,"type":15},{"name":20,"slug":21,"type":15},{"name":930,"slug":931,"type":15},"Networking","networking",{"name":933,"slug":934,"type":15},"Security","security","2026-07-12T07:46:43.675992",{"slug":937,"name":937,"fn":938,"description":939,"org":940,"tags":941,"stars":896,"repoUrl":897,"updatedAt":947},"cloud-setup","configure Elastic Cloud authentication","Configures Elastic Cloud authentication and environment defaults. Use when setting up EC_API_KEY, configuring Cloud API access, or when another cloud skill requires credentials.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[942,945,946],{"name":943,"slug":944,"type":15},"Authentication","authentication",{"name":887,"slug":888,"type":15},{"name":20,"slug":21,"type":15},"2026-07-12T07:46:39.783105",{"slug":949,"name":949,"fn":950,"description":951,"org":952,"tags":953,"stars":896,"repoUrl":897,"updatedAt":962},"elasticsearch-audit","configure Elasticsearch security audit logs","Enable, configure, and query Elasticsearch security audit logs. Use when the task involves audit logging setup, event filtering, or investigating security incidents like failed logins.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[954,957,958,961],{"name":955,"slug":956,"type":15},"Audit","audit",{"name":20,"slug":21,"type":15},{"name":959,"slug":960,"type":15},"Logs","logs",{"name":933,"slug":934,"type":15},"2026-07-12T07:47:35.092599",{"slug":964,"name":964,"fn":965,"description":966,"org":967,"tags":968,"stars":896,"repoUrl":897,"updatedAt":973},"elasticsearch-authn","configure Elasticsearch authentication realms","Authenticate to Elasticsearch using native, file-based, LDAP\u002FAD, SAML, OIDC, Kerberos, JWT, or certificate realms. Use when connecting with credentials, choosing a realm, or managing API keys. Assumes the target realms are already configured.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[969,970,971,972],{"name":943,"slug":944,"type":15},{"name":9,"slug":8,"type":15},{"name":20,"slug":21,"type":15},{"name":933,"slug":934,"type":15},"2026-07-12T07:47:41.474547",{"slug":975,"name":975,"fn":976,"description":977,"org":978,"tags":979,"stars":896,"repoUrl":897,"updatedAt":986},"elasticsearch-authz","manage Elasticsearch RBAC and security roles","Manage Elasticsearch RBAC: native users, roles, role mappings, document- and field-level security. Use when creating users or roles, assigning privileges, or mapping external realms like LDAP\u002FSAML.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[980,981,982,985],{"name":9,"slug":8,"type":15},{"name":20,"slug":21,"type":15},{"name":983,"slug":984,"type":15},"RBAC","rbac",{"name":933,"slug":934,"type":15},"2026-07-12T07:47:36.394177",{"slug":988,"name":988,"fn":989,"description":990,"org":991,"tags":992,"stars":896,"repoUrl":897,"updatedAt":999},"elasticsearch-esql","query Elasticsearch data with ES|QL","Execute ES|QL (Elasticsearch Query Language) queries, use when the user wants to query Elasticsearch data, analyze logs, aggregate metrics, explore data, or create charts and dashboards from ES|QL results.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[993,994,995,996],{"name":838,"slug":839,"type":15},{"name":841,"slug":842,"type":15},{"name":20,"slug":21,"type":15},{"name":997,"slug":998,"type":15},"SQL","sql","2026-07-12T07:47:40.249533",86,{"items":1002,"total":1089},[1003,1018,1035,1043,1050,1062,1077],{"slug":1004,"name":1004,"fn":1005,"description":1006,"org":1007,"tags":1008,"stars":25,"repoUrl":26,"updatedAt":1017},"anonymize-logs","anonymize sensitive log data","Anonymize and sanitize customer-provided log files before they are committed as pipeline test fixtures or sample events. Performs a line-by-line review and replaces all sensitive values inline, preserving log structure and format exactly — never reformats, re-indents, or restructures content. Invoke manually with \u002Fanonymize-logs.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1009,1012,1013,1016],{"name":1010,"slug":1011,"type":15},"Data Cleaning","data-cleaning",{"name":959,"slug":960,"type":15},{"name":1014,"slug":1015,"type":15},"Privacy","privacy",{"name":933,"slug":934,"type":15},"2026-07-18T05:13:04.420121",{"slug":1019,"name":1019,"fn":1020,"description":1021,"org":1022,"tags":1023,"stars":25,"repoUrl":26,"updatedAt":1034},"cel-programs","write CEL programs for data collection","Use for all CEL and mito work on integrations that collect from APIs — writing CEL programs, cel.yml.hbs templates, manifest configuration, mock-first development with the mito CLI, system test mock setup, and answering CEL\u002Fmito questions. Load this skill whenever any data stream uses the cel input type.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1024,1027,1030,1031],{"name":1025,"slug":1026,"type":15},"API Development","api-development",{"name":1028,"slug":1029,"type":15},"Data Engineering","data-engineering",{"name":9,"slug":8,"type":15},{"name":1032,"slug":1033,"type":15},"Integrations","integrations","2026-07-12T07:47:10.207064",{"slug":134,"name":134,"fn":1036,"description":1037,"org":1038,"tags":1039,"stars":25,"repoUrl":26,"updatedAt":1042},"create Elastic integration packages","Use when creating a new Elastic integration package, scaffolding data streams, answering package layout or structure questions, or running the end-to-end integration build workflow. Covers package topology, scaffold commands, post-scaffold edits, and full orchestration of CEL\u002Fpipeline\u002Ftest subagents.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1040,1041],{"name":20,"slug":21,"type":15},{"name":1032,"slug":1033,"type":15},"2026-07-12T07:46:56.318866",{"slug":4,"name":4,"fn":5,"description":6,"org":1044,"tags":1045,"stars":25,"repoUrl":26,"updatedAt":27},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1046,1047,1048,1049],{"name":13,"slug":14,"type":15},{"name":20,"slug":21,"type":15},{"name":17,"slug":18,"type":15},{"name":23,"slug":24,"type":15},{"slug":764,"name":764,"fn":1051,"description":1052,"org":1053,"tags":1054,"stars":25,"repoUrl":26,"updatedAt":1061},"review Elastic dashboard JSON changes","Use when reviewing dashboard JSON changes in a PR or branch. Extracts structured descriptions with kbdash, compares before\u002Fafter, and checks guideline compliance.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1055,1058,1059,1060],{"name":1056,"slug":1057,"type":15},"Code Review","code-review",{"name":13,"slug":14,"type":15},{"name":9,"slug":8,"type":15},{"name":17,"slug":18,"type":15},"2026-07-12T07:47:06.493988",{"slug":1063,"name":1063,"fn":1064,"description":1065,"org":1066,"tags":1067,"stars":25,"repoUrl":26,"updatedAt":1076},"ecs-field-mappings","define ECS field mappings for integrations","Use when defining field mappings for data streams, populating ecs.yml with ECS field references, selecting ECS categorization values, choosing custom field types, or troubleshooting mapping validation failures.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1068,1071,1074,1075],{"name":1069,"slug":1070,"type":15},"Data Modeling","data-modeling",{"name":1072,"slug":1073,"type":15},"Data Quality","data-quality",{"name":9,"slug":8,"type":15},{"name":1032,"slug":1033,"type":15},"2026-07-12T07:47:13.472534",{"slug":167,"name":167,"fn":1078,"description":1079,"org":1080,"tags":1081,"stars":25,"repoUrl":26,"updatedAt":1088},"develop and validate Elastic integrations","Use when developing or validating Elastic integrations with elastic-package commands such as build, check, lint, format, test, stack, service, install, profiles, and benchmark.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1082,1085,1086,1087],{"name":1083,"slug":1084,"type":15},"CLI","cli",{"name":9,"slug":8,"type":15},{"name":1032,"slug":1033,"type":15},{"name":877,"slug":878,"type":15},"2026-07-12T07:46:57.647395",14]