[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill-elastic-docs-flag-jargon-skill":3,"mdc--dr1qzt-key":33,"related-repo-elastic-docs-flag-jargon-skill":1164,"related-org-elastic-docs-flag-jargon-skill":1241},{"slug":4,"name":4,"fn":5,"description":6,"org":7,"tags":11,"stars":20,"repoUrl":21,"updatedAt":22,"license":23,"forks":24,"topics":25,"repo":28,"sourceUrl":31,"mdContent":32},"docs-flag-jargon-skill","flag Elastic jargon in documentation","Flag Elastic-internal jargon in documentation and suggest plain-language replacements. Use when reviewing, writing, or editing docs to catch terms that external readers would not understand.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},"elastic","Elastic","https:\u002F\u002Fpexgzepcugksgbtrxkhf.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Forg-logos\u002Felastic.png",[12,16,17],{"name":13,"slug":14,"type":15},"Documentation","documentation","tag",{"name":9,"slug":8,"type":15},{"name":18,"slug":19,"type":15},"Technical Writing","technical-writing",71,"https:\u002F\u002Fgithub.com\u002Felastic\u002Felastic-docs-skills","2026-07-12T07:49:34.836748",null,9,[26,8,27],"docs","skills",{"repoUrl":21,"stars":20,"forks":24,"topics":29,"description":30},[26,8,27],"Instructions for code agents on how to author Elastic docs","https:\u002F\u002Fgithub.com\u002Felastic\u002Felastic-docs-skills\u002Ftree\u002FHEAD\u002Fskills\u002Freview\u002Fflag-jargon-skill","---\nname: docs-flag-jargon-skill\nversion: 1.0.1\ndescription: Flag Elastic-internal jargon in documentation and suggest plain-language replacements. Use when reviewing, writing, or editing docs to catch terms that external readers would not understand.\nargument-hint: \u003Cfile-or-directory>\ncontext: fork\nallowed-tools: Read, Grep, Glob\n---\n\u003C!-- Copyright Elasticsearch B.V. and\u002For licensed to Elasticsearch B.V. under one\nor more contributor license agreements. See the NOTICE file distributed with\nthis work for additional information regarding copyright\nownership. Elasticsearch B.V. licenses this file to you under\nthe Apache License, Version 2.0 (the \"License\"); you may\nnot use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n\thttp:\u002F\u002Fwww.apache.org\u002Flicenses\u002FLICENSE-2.0\n\nUnless required by applicable law or agreed to in writing,\nsoftware distributed under the License is distributed on an\n\"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY\nKIND, either express or implied.  See the License for the\nspecific language governing permissions and limitations\nunder the License. -->\n\nYou are a jargon reviewer for Elastic documentation. Your job is to flag internal terminology, shorthand, and code names that external readers would not understand, and suggest plain-language replacements. Never auto-fix — report only.\n\n## Inputs\n\n`$ARGUMENTS` is the file or directory to check. If empty, ask the user what to review.\n\n## Step 1: Read the document(s)\n\nGlob for `.md` files in `$ARGUMENTS` (or read the single file). Read each file fully.\n\n## Step 2: Scan for jargon\n\nCheck every document against the jargon list. For each match:\n\n1. **Context matters** — A term may be acceptable in some contexts. For example:\n   - \"Serverless\" is fine when preceded by \"Elastic\" and used as a proper product name.\n   - Acronyms are fine after they have been spelled out on first use in the same page.\n   - Code blocks, CLI output, and API field names are exempt.\n2. **Case-insensitive matching** — Flag both \"ess\" and \"ESS.\"\n3. **Partial matches** — Don't flag substrings. \"Classic\" in \"classical music\" is not a match.\n\n## Step 3: Generate the report\n\nPresent findings as a structured report. Group issues by category. For each issue:\n\n1. **File and line** — `path\u002Fto\u002Ffile.md:42`\n2. **Category** — one of: Internal Code Name, Internal Abbreviation, Outdated Term, Informal Shorthand, Unexplained Acronym\n3. **Term found** — the jargon as it appears\n4. **Suggestion** — plain-language replacement from the jargon list\n\n### Report format\n\n```\n## Jargon review: \u003Cfile or directory>\n\n### Summary\n- X jargon instances found across Y file(s)\n- Breakdown by category: ...\n\n### Findings\n\n#### Internal code names\n- `file.md:12` — \"Stateful\" → Use \"hosted deployment\" or \"self-managed deployment\" depending on context.\n\n#### Internal abbreviations\n- `file.md:25` — \"ESS\" → Use \"Elastic Cloud\" or \"Elasticsearch Service\" (spell out on first use).\n\n#### Outdated terms\n- `file.md:38` — \"index pattern\" → Use \"data view.\"\n\n...\n```\n\nIf no jargon is found, say so. Always end with a one-line summary.\n\n---\n\n## Jargon list\n\nTerms are grouped by category. Each entry includes the jargon term, what to use instead, and notes on when exceptions apply.\n\n### Internal code names\n\nThese are names used internally at Elastic to refer to deployment models, projects, or features. External readers will not recognize them without context.\n\n| Term | Use instead | Notes |\n|------|-------------|-------|\n| Stateful | \"hosted deployment\" or \"self-managed deployment\" | Acceptable only in deeply technical architecture docs where the stateful\u002Fstateless distinction is the topic. |\n| Serverless | \"Elastic Serverless\" or the specific project type (\"Elasticsearch Serverless,\" \"Elastic Observability Serverless,\" \"Elastic Security Serverless\") | Never use bare \"serverless\" to mean an Elastic product. Generic \"serverless\" (e.g., \"serverless architecture\") is fine. |\n| Classic | \"hosted deployment\" or specify the deployment type | Avoid as a label for non-serverless deployments. |\n| Cloud UI | \"Elastic Cloud Hosted\" | Don't use \"Cloud UI\" to refer to the product. |\n| Signal | \"alert\" (\"detection alert\" or \"Kibana alert\" depending on context) | Do not use in the context of Elastic Security. |\n| Solution | the specific product name (\"Elastic Observability,\" \"Elastic Security,\" \"Elasticsearch\") | \"Solution\" is vague. Name the product. |\n\n### Internal abbreviations\n\nShort forms used in Slack, internal docs, and meetings. Spell out or replace for external readers.\n\n| Term | Use instead | Notes |\n|------|-------------|-------|\n| ESS | \"Elastic Cloud\" or \"Elasticsearch Service\" | Spell out on first use. |\n| ECE | \"Elastic Cloud Enterprise\" | Spell out on first use. |\n| ECK | \"Elastic Cloud on Kubernetes\" | Spell out on first use. |\n| ECH | \"Elastic Cloud Hosted\" | Spell out on first use. |\n| EUI | \"Elastic UI framework\" | Spell out on first use. |\n| UIAM | \"Elastic Cloud API key\" | Internal name for the API key system. Use the user-facing term. |\n\n### Outdated terms\n\nTerms replaced by newer naming. Flag and suggest the current equivalent.\n\n| Term | Use instead | Notes |\n|------|-------------|-------|\n| index pattern | \"data view\" | Renamed in Kibana 8.0. |\n| master node | \"master-eligible node\" | Use role-based naming. |\n| master\u002Fslave | \"primary\u002Freplica\" or \"leader\u002Ffollower\" | Replaced for inclusivity. |\n| blacklist | \"blocklist\" or \"deny list\" | Replaced for inclusivity. |\n| whitelist | \"allowlist\" | Replaced for inclusivity. |\n| X-Pack | the specific feature name (\"Security,\" \"Machine Learning,\" \"Alerting\") | X-Pack was unbundled in 6.3. |\n\n### Informal shorthand\n\nCasual references that assume familiarity with the Elastic ecosystem.\n\n| Term | Use instead | Notes |\n|------|-------------|-------|\n| the Stack | \"Elastic Stack\" or list the specific products | Don't assume the reader knows what \"the Stack\" refers to. |\n| Beats | \"Beats\" with context (\"Beats data shippers\") on first use | Alone, \"beats\" is a common English word. |\n| Agent | \"Elastic Agent\" on first use | Bare \"agent\" is ambiguous. |\n| Fleet | \"Fleet\" with context (\"Fleet management UI\") on first use | Bare \"Fleet\" is ambiguous. |\n| Canvas | \"Canvas\" with context (\"the Canvas presentation tool in Kibana\") on first use | Bare \"Canvas\" is ambiguous. |\n| Lens | \"Lens\" with context (\"the Lens visualization editor in Kibana\") on first use | Bare \"Lens\" is ambiguous. |\n| Painless | \"Painless scripting language\" on first use | Bare \"Painless\" is confusing without context. |\n| Watcher | \"Watcher\" with context (\"the Watcher alerting feature\") on first use | Deprecated in favor of Kibana alerting, so also flag as potentially outdated. |\n| Dev Tools | \"Dev Tools\" with context (\"the Dev Tools console in Kibana\") on first use | Bare \"Dev Tools\" is ambiguous. |\n| Discover | \"Discover\" with context (\"the Discover app in Kibana\") on first use | Bare \"Discover\" is a common English word. |\n| Dashboard | \"Kibana dashboard\" on first use if the Kibana context is not already established | OK after context is set. |\n\n### Unexplained acronyms\n\nTechnical acronyms that must be spelled out on first use per page. Flag if they appear without expansion.\n\n| Term | Expansion |\n|------|-----------|\n| ILM | Index Lifecycle Management |\n| SLM | Snapshot Lifecycle Management |\n| CCR | Cross-cluster replication |\n| CCS | Cross-cluster search |\n| APM | Application Performance Monitoring |\n| SIEM | Security Information and Event Management |\n| TSDB | Time series data stream (or time series database, depending on context) |\n| ECS | Elastic Common Schema |\n| RBAC | Role-based access control |\n| KQL | Kibana Query Language |\n| EQL | Event Query Language |\n| ES|QL | Elasticsearch Query Language |\n| DSL | Domain-specific language (or \"Query DSL\" specifically) |\n| logsdb | Elasticsearch logsdb index mode. Secondary references: \"logsdb index mode.\" Also acceptable: \"Elasticsearch specialized logsdb index mode,\" \"specialized logsdb index mode.\" Always lowercase (\"logsdb,\" not \"LogsDB\") unless starting a sentence. |\n| ML | Machine learning |\n| NLP | Natural language processing |\n",{"data":34,"body":39},{"name":4,"version":35,"description":6,"argument-hint":36,"context":37,"allowed-tools":38},"1.0.1","\u003Cfile-or-directory>","fork","Read, Grep, Glob",{"type":40,"children":41},"root",[42,50,57,69,75,95,101,106,161,167,172,221,228,240,245,249,255,260,266,271,412,418,423,550,556,561,691,697,702,924,930,935],{"type":43,"tag":44,"props":45,"children":46},"element","p",{},[47],{"type":48,"value":49},"text","You are a jargon reviewer for Elastic documentation. Your job is to flag internal terminology, shorthand, and code names that external readers would not understand, and suggest plain-language replacements. Never auto-fix — report only.",{"type":43,"tag":51,"props":52,"children":54},"h2",{"id":53},"inputs",[55],{"type":48,"value":56},"Inputs",{"type":43,"tag":44,"props":58,"children":59},{},[60,67],{"type":43,"tag":61,"props":62,"children":64},"code",{"className":63},[],[65],{"type":48,"value":66},"$ARGUMENTS",{"type":48,"value":68}," is the file or directory to check. If empty, ask the user what to review.",{"type":43,"tag":51,"props":70,"children":72},{"id":71},"step-1-read-the-documents",[73],{"type":48,"value":74},"Step 1: Read the document(s)",{"type":43,"tag":44,"props":76,"children":77},{},[78,80,86,88,93],{"type":48,"value":79},"Glob for ",{"type":43,"tag":61,"props":81,"children":83},{"className":82},[],[84],{"type":48,"value":85},".md",{"type":48,"value":87}," files in ",{"type":43,"tag":61,"props":89,"children":91},{"className":90},[],[92],{"type":48,"value":66},{"type":48,"value":94}," (or read the single file). Read each file fully.",{"type":43,"tag":51,"props":96,"children":98},{"id":97},"step-2-scan-for-jargon",[99],{"type":48,"value":100},"Step 2: Scan for jargon",{"type":43,"tag":44,"props":102,"children":103},{},[104],{"type":48,"value":105},"Check every document against the jargon list. For each match:",{"type":43,"tag":107,"props":108,"children":109},"ol",{},[110,141,151],{"type":43,"tag":111,"props":112,"children":113},"li",{},[114,120,122],{"type":43,"tag":115,"props":116,"children":117},"strong",{},[118],{"type":48,"value":119},"Context matters",{"type":48,"value":121}," — A term may be acceptable in some contexts. For example:\n",{"type":43,"tag":123,"props":124,"children":125},"ul",{},[126,131,136],{"type":43,"tag":111,"props":127,"children":128},{},[129],{"type":48,"value":130},"\"Serverless\" is fine when preceded by \"Elastic\" and used as a proper product name.",{"type":43,"tag":111,"props":132,"children":133},{},[134],{"type":48,"value":135},"Acronyms are fine after they have been spelled out on first use in the same page.",{"type":43,"tag":111,"props":137,"children":138},{},[139],{"type":48,"value":140},"Code blocks, CLI output, and API field names are exempt.",{"type":43,"tag":111,"props":142,"children":143},{},[144,149],{"type":43,"tag":115,"props":145,"children":146},{},[147],{"type":48,"value":148},"Case-insensitive matching",{"type":48,"value":150}," — Flag both \"ess\" and \"ESS.\"",{"type":43,"tag":111,"props":152,"children":153},{},[154,159],{"type":43,"tag":115,"props":155,"children":156},{},[157],{"type":48,"value":158},"Partial matches",{"type":48,"value":160}," — Don't flag substrings. \"Classic\" in \"classical music\" is not a match.",{"type":43,"tag":51,"props":162,"children":164},{"id":163},"step-3-generate-the-report",[165],{"type":48,"value":166},"Step 3: Generate the report",{"type":43,"tag":44,"props":168,"children":169},{},[170],{"type":48,"value":171},"Present findings as a structured report. Group issues by category. For each issue:",{"type":43,"tag":107,"props":173,"children":174},{},[175,191,201,211],{"type":43,"tag":111,"props":176,"children":177},{},[178,183,185],{"type":43,"tag":115,"props":179,"children":180},{},[181],{"type":48,"value":182},"File and line",{"type":48,"value":184}," — ",{"type":43,"tag":61,"props":186,"children":188},{"className":187},[],[189],{"type":48,"value":190},"path\u002Fto\u002Ffile.md:42",{"type":43,"tag":111,"props":192,"children":193},{},[194,199],{"type":43,"tag":115,"props":195,"children":196},{},[197],{"type":48,"value":198},"Category",{"type":48,"value":200}," — one of: Internal Code Name, Internal Abbreviation, Outdated Term, Informal Shorthand, Unexplained Acronym",{"type":43,"tag":111,"props":202,"children":203},{},[204,209],{"type":43,"tag":115,"props":205,"children":206},{},[207],{"type":48,"value":208},"Term found",{"type":48,"value":210}," — the jargon as it appears",{"type":43,"tag":111,"props":212,"children":213},{},[214,219],{"type":43,"tag":115,"props":215,"children":216},{},[217],{"type":48,"value":218},"Suggestion",{"type":48,"value":220}," — plain-language replacement from the jargon list",{"type":43,"tag":222,"props":223,"children":225},"h3",{"id":224},"report-format",[226],{"type":48,"value":227},"Report format",{"type":43,"tag":229,"props":230,"children":234},"pre",{"className":231,"code":233,"language":48},[232],"language-text","## Jargon review: \u003Cfile or directory>\n\n### Summary\n- X jargon instances found across Y file(s)\n- Breakdown by category: ...\n\n### Findings\n\n#### Internal code names\n- `file.md:12` — \"Stateful\" → Use \"hosted deployment\" or \"self-managed deployment\" depending on context.\n\n#### Internal abbreviations\n- `file.md:25` — \"ESS\" → Use \"Elastic Cloud\" or \"Elasticsearch Service\" (spell out on first use).\n\n#### Outdated terms\n- `file.md:38` — \"index pattern\" → Use \"data view.\"\n\n...\n",[235],{"type":43,"tag":61,"props":236,"children":238},{"__ignoreMap":237},"",[239],{"type":48,"value":233},{"type":43,"tag":44,"props":241,"children":242},{},[243],{"type":48,"value":244},"If no jargon is found, say so. Always end with a one-line summary.",{"type":43,"tag":246,"props":247,"children":248},"hr",{},[],{"type":43,"tag":51,"props":250,"children":252},{"id":251},"jargon-list",[253],{"type":48,"value":254},"Jargon list",{"type":43,"tag":44,"props":256,"children":257},{},[258],{"type":48,"value":259},"Terms are grouped by category. Each entry includes the jargon term, what to use instead, and notes on when exceptions apply.",{"type":43,"tag":222,"props":261,"children":263},{"id":262},"internal-code-names",[264],{"type":48,"value":265},"Internal code names",{"type":43,"tag":44,"props":267,"children":268},{},[269],{"type":48,"value":270},"These are names used internally at Elastic to refer to deployment models, projects, or features. External readers will not recognize them without context.",{"type":43,"tag":272,"props":273,"children":274},"table",{},[275,299],{"type":43,"tag":276,"props":277,"children":278},"thead",{},[279],{"type":43,"tag":280,"props":281,"children":282},"tr",{},[283,289,294],{"type":43,"tag":284,"props":285,"children":286},"th",{},[287],{"type":48,"value":288},"Term",{"type":43,"tag":284,"props":290,"children":291},{},[292],{"type":48,"value":293},"Use instead",{"type":43,"tag":284,"props":295,"children":296},{},[297],{"type":48,"value":298},"Notes",{"type":43,"tag":300,"props":301,"children":302},"tbody",{},[303,322,340,358,376,394],{"type":43,"tag":280,"props":304,"children":305},{},[306,312,317],{"type":43,"tag":307,"props":308,"children":309},"td",{},[310],{"type":48,"value":311},"Stateful",{"type":43,"tag":307,"props":313,"children":314},{},[315],{"type":48,"value":316},"\"hosted deployment\" or \"self-managed deployment\"",{"type":43,"tag":307,"props":318,"children":319},{},[320],{"type":48,"value":321},"Acceptable only in deeply technical architecture docs where the stateful\u002Fstateless distinction is the topic.",{"type":43,"tag":280,"props":323,"children":324},{},[325,330,335],{"type":43,"tag":307,"props":326,"children":327},{},[328],{"type":48,"value":329},"Serverless",{"type":43,"tag":307,"props":331,"children":332},{},[333],{"type":48,"value":334},"\"Elastic Serverless\" or the specific project type (\"Elasticsearch Serverless,\" \"Elastic Observability Serverless,\" \"Elastic Security Serverless\")",{"type":43,"tag":307,"props":336,"children":337},{},[338],{"type":48,"value":339},"Never use bare \"serverless\" to mean an Elastic product. Generic \"serverless\" (e.g., \"serverless architecture\") is fine.",{"type":43,"tag":280,"props":341,"children":342},{},[343,348,353],{"type":43,"tag":307,"props":344,"children":345},{},[346],{"type":48,"value":347},"Classic",{"type":43,"tag":307,"props":349,"children":350},{},[351],{"type":48,"value":352},"\"hosted deployment\" or specify the deployment type",{"type":43,"tag":307,"props":354,"children":355},{},[356],{"type":48,"value":357},"Avoid as a label for non-serverless deployments.",{"type":43,"tag":280,"props":359,"children":360},{},[361,366,371],{"type":43,"tag":307,"props":362,"children":363},{},[364],{"type":48,"value":365},"Cloud UI",{"type":43,"tag":307,"props":367,"children":368},{},[369],{"type":48,"value":370},"\"Elastic Cloud Hosted\"",{"type":43,"tag":307,"props":372,"children":373},{},[374],{"type":48,"value":375},"Don't use \"Cloud UI\" to refer to the product.",{"type":43,"tag":280,"props":377,"children":378},{},[379,384,389],{"type":43,"tag":307,"props":380,"children":381},{},[382],{"type":48,"value":383},"Signal",{"type":43,"tag":307,"props":385,"children":386},{},[387],{"type":48,"value":388},"\"alert\" (\"detection alert\" or \"Kibana alert\" depending on context)",{"type":43,"tag":307,"props":390,"children":391},{},[392],{"type":48,"value":393},"Do not use in the context of Elastic Security.",{"type":43,"tag":280,"props":395,"children":396},{},[397,402,407],{"type":43,"tag":307,"props":398,"children":399},{},[400],{"type":48,"value":401},"Solution",{"type":43,"tag":307,"props":403,"children":404},{},[405],{"type":48,"value":406},"the specific product name (\"Elastic Observability,\" \"Elastic Security,\" \"Elasticsearch\")",{"type":43,"tag":307,"props":408,"children":409},{},[410],{"type":48,"value":411},"\"Solution\" is vague. Name the product.",{"type":43,"tag":222,"props":413,"children":415},{"id":414},"internal-abbreviations",[416],{"type":48,"value":417},"Internal abbreviations",{"type":43,"tag":44,"props":419,"children":420},{},[421],{"type":48,"value":422},"Short forms used in Slack, internal docs, and meetings. Spell out or replace for external readers.",{"type":43,"tag":272,"props":424,"children":425},{},[426,444],{"type":43,"tag":276,"props":427,"children":428},{},[429],{"type":43,"tag":280,"props":430,"children":431},{},[432,436,440],{"type":43,"tag":284,"props":433,"children":434},{},[435],{"type":48,"value":288},{"type":43,"tag":284,"props":437,"children":438},{},[439],{"type":48,"value":293},{"type":43,"tag":284,"props":441,"children":442},{},[443],{"type":48,"value":298},{"type":43,"tag":300,"props":445,"children":446},{},[447,465,482,499,515,532],{"type":43,"tag":280,"props":448,"children":449},{},[450,455,460],{"type":43,"tag":307,"props":451,"children":452},{},[453],{"type":48,"value":454},"ESS",{"type":43,"tag":307,"props":456,"children":457},{},[458],{"type":48,"value":459},"\"Elastic Cloud\" or \"Elasticsearch Service\"",{"type":43,"tag":307,"props":461,"children":462},{},[463],{"type":48,"value":464},"Spell out on first use.",{"type":43,"tag":280,"props":466,"children":467},{},[468,473,478],{"type":43,"tag":307,"props":469,"children":470},{},[471],{"type":48,"value":472},"ECE",{"type":43,"tag":307,"props":474,"children":475},{},[476],{"type":48,"value":477},"\"Elastic Cloud Enterprise\"",{"type":43,"tag":307,"props":479,"children":480},{},[481],{"type":48,"value":464},{"type":43,"tag":280,"props":483,"children":484},{},[485,490,495],{"type":43,"tag":307,"props":486,"children":487},{},[488],{"type":48,"value":489},"ECK",{"type":43,"tag":307,"props":491,"children":492},{},[493],{"type":48,"value":494},"\"Elastic Cloud on Kubernetes\"",{"type":43,"tag":307,"props":496,"children":497},{},[498],{"type":48,"value":464},{"type":43,"tag":280,"props":500,"children":501},{},[502,507,511],{"type":43,"tag":307,"props":503,"children":504},{},[505],{"type":48,"value":506},"ECH",{"type":43,"tag":307,"props":508,"children":509},{},[510],{"type":48,"value":370},{"type":43,"tag":307,"props":512,"children":513},{},[514],{"type":48,"value":464},{"type":43,"tag":280,"props":516,"children":517},{},[518,523,528],{"type":43,"tag":307,"props":519,"children":520},{},[521],{"type":48,"value":522},"EUI",{"type":43,"tag":307,"props":524,"children":525},{},[526],{"type":48,"value":527},"\"Elastic UI framework\"",{"type":43,"tag":307,"props":529,"children":530},{},[531],{"type":48,"value":464},{"type":43,"tag":280,"props":533,"children":534},{},[535,540,545],{"type":43,"tag":307,"props":536,"children":537},{},[538],{"type":48,"value":539},"UIAM",{"type":43,"tag":307,"props":541,"children":542},{},[543],{"type":48,"value":544},"\"Elastic Cloud API key\"",{"type":43,"tag":307,"props":546,"children":547},{},[548],{"type":48,"value":549},"Internal name for the API key system. Use the user-facing term.",{"type":43,"tag":222,"props":551,"children":553},{"id":552},"outdated-terms",[554],{"type":48,"value":555},"Outdated terms",{"type":43,"tag":44,"props":557,"children":558},{},[559],{"type":48,"value":560},"Terms replaced by newer naming. Flag and suggest the current equivalent.",{"type":43,"tag":272,"props":562,"children":563},{},[564,582],{"type":43,"tag":276,"props":565,"children":566},{},[567],{"type":43,"tag":280,"props":568,"children":569},{},[570,574,578],{"type":43,"tag":284,"props":571,"children":572},{},[573],{"type":48,"value":288},{"type":43,"tag":284,"props":575,"children":576},{},[577],{"type":48,"value":293},{"type":43,"tag":284,"props":579,"children":580},{},[581],{"type":48,"value":298},{"type":43,"tag":300,"props":583,"children":584},{},[585,603,621,639,656,673],{"type":43,"tag":280,"props":586,"children":587},{},[588,593,598],{"type":43,"tag":307,"props":589,"children":590},{},[591],{"type":48,"value":592},"index pattern",{"type":43,"tag":307,"props":594,"children":595},{},[596],{"type":48,"value":597},"\"data view\"",{"type":43,"tag":307,"props":599,"children":600},{},[601],{"type":48,"value":602},"Renamed in Kibana 8.0.",{"type":43,"tag":280,"props":604,"children":605},{},[606,611,616],{"type":43,"tag":307,"props":607,"children":608},{},[609],{"type":48,"value":610},"master node",{"type":43,"tag":307,"props":612,"children":613},{},[614],{"type":48,"value":615},"\"master-eligible node\"",{"type":43,"tag":307,"props":617,"children":618},{},[619],{"type":48,"value":620},"Use role-based naming.",{"type":43,"tag":280,"props":622,"children":623},{},[624,629,634],{"type":43,"tag":307,"props":625,"children":626},{},[627],{"type":48,"value":628},"master\u002Fslave",{"type":43,"tag":307,"props":630,"children":631},{},[632],{"type":48,"value":633},"\"primary\u002Freplica\" or \"leader\u002Ffollower\"",{"type":43,"tag":307,"props":635,"children":636},{},[637],{"type":48,"value":638},"Replaced for inclusivity.",{"type":43,"tag":280,"props":640,"children":641},{},[642,647,652],{"type":43,"tag":307,"props":643,"children":644},{},[645],{"type":48,"value":646},"blacklist",{"type":43,"tag":307,"props":648,"children":649},{},[650],{"type":48,"value":651},"\"blocklist\" or \"deny list\"",{"type":43,"tag":307,"props":653,"children":654},{},[655],{"type":48,"value":638},{"type":43,"tag":280,"props":657,"children":658},{},[659,664,669],{"type":43,"tag":307,"props":660,"children":661},{},[662],{"type":48,"value":663},"whitelist",{"type":43,"tag":307,"props":665,"children":666},{},[667],{"type":48,"value":668},"\"allowlist\"",{"type":43,"tag":307,"props":670,"children":671},{},[672],{"type":48,"value":638},{"type":43,"tag":280,"props":674,"children":675},{},[676,681,686],{"type":43,"tag":307,"props":677,"children":678},{},[679],{"type":48,"value":680},"X-Pack",{"type":43,"tag":307,"props":682,"children":683},{},[684],{"type":48,"value":685},"the specific feature name (\"Security,\" \"Machine Learning,\" \"Alerting\")",{"type":43,"tag":307,"props":687,"children":688},{},[689],{"type":48,"value":690},"X-Pack was unbundled in 6.3.",{"type":43,"tag":222,"props":692,"children":694},{"id":693},"informal-shorthand",[695],{"type":48,"value":696},"Informal shorthand",{"type":43,"tag":44,"props":698,"children":699},{},[700],{"type":48,"value":701},"Casual references that assume familiarity with the Elastic ecosystem.",{"type":43,"tag":272,"props":703,"children":704},{},[705,723],{"type":43,"tag":276,"props":706,"children":707},{},[708],{"type":43,"tag":280,"props":709,"children":710},{},[711,715,719],{"type":43,"tag":284,"props":712,"children":713},{},[714],{"type":48,"value":288},{"type":43,"tag":284,"props":716,"children":717},{},[718],{"type":48,"value":293},{"type":43,"tag":284,"props":720,"children":721},{},[722],{"type":48,"value":298},{"type":43,"tag":300,"props":724,"children":725},{},[726,744,762,780,798,816,834,852,870,888,906],{"type":43,"tag":280,"props":727,"children":728},{},[729,734,739],{"type":43,"tag":307,"props":730,"children":731},{},[732],{"type":48,"value":733},"the Stack",{"type":43,"tag":307,"props":735,"children":736},{},[737],{"type":48,"value":738},"\"Elastic Stack\" or list the specific products",{"type":43,"tag":307,"props":740,"children":741},{},[742],{"type":48,"value":743},"Don't assume the reader knows what \"the Stack\" refers to.",{"type":43,"tag":280,"props":745,"children":746},{},[747,752,757],{"type":43,"tag":307,"props":748,"children":749},{},[750],{"type":48,"value":751},"Beats",{"type":43,"tag":307,"props":753,"children":754},{},[755],{"type":48,"value":756},"\"Beats\" with context (\"Beats data shippers\") on first use",{"type":43,"tag":307,"props":758,"children":759},{},[760],{"type":48,"value":761},"Alone, \"beats\" is a common English word.",{"type":43,"tag":280,"props":763,"children":764},{},[765,770,775],{"type":43,"tag":307,"props":766,"children":767},{},[768],{"type":48,"value":769},"Agent",{"type":43,"tag":307,"props":771,"children":772},{},[773],{"type":48,"value":774},"\"Elastic Agent\" on first use",{"type":43,"tag":307,"props":776,"children":777},{},[778],{"type":48,"value":779},"Bare \"agent\" is ambiguous.",{"type":43,"tag":280,"props":781,"children":782},{},[783,788,793],{"type":43,"tag":307,"props":784,"children":785},{},[786],{"type":48,"value":787},"Fleet",{"type":43,"tag":307,"props":789,"children":790},{},[791],{"type":48,"value":792},"\"Fleet\" with context (\"Fleet management UI\") on first use",{"type":43,"tag":307,"props":794,"children":795},{},[796],{"type":48,"value":797},"Bare \"Fleet\" is ambiguous.",{"type":43,"tag":280,"props":799,"children":800},{},[801,806,811],{"type":43,"tag":307,"props":802,"children":803},{},[804],{"type":48,"value":805},"Canvas",{"type":43,"tag":307,"props":807,"children":808},{},[809],{"type":48,"value":810},"\"Canvas\" with context (\"the Canvas presentation tool in Kibana\") on first use",{"type":43,"tag":307,"props":812,"children":813},{},[814],{"type":48,"value":815},"Bare \"Canvas\" is ambiguous.",{"type":43,"tag":280,"props":817,"children":818},{},[819,824,829],{"type":43,"tag":307,"props":820,"children":821},{},[822],{"type":48,"value":823},"Lens",{"type":43,"tag":307,"props":825,"children":826},{},[827],{"type":48,"value":828},"\"Lens\" with context (\"the Lens visualization editor in Kibana\") on first use",{"type":43,"tag":307,"props":830,"children":831},{},[832],{"type":48,"value":833},"Bare \"Lens\" is ambiguous.",{"type":43,"tag":280,"props":835,"children":836},{},[837,842,847],{"type":43,"tag":307,"props":838,"children":839},{},[840],{"type":48,"value":841},"Painless",{"type":43,"tag":307,"props":843,"children":844},{},[845],{"type":48,"value":846},"\"Painless scripting language\" on first use",{"type":43,"tag":307,"props":848,"children":849},{},[850],{"type":48,"value":851},"Bare \"Painless\" is confusing without context.",{"type":43,"tag":280,"props":853,"children":854},{},[855,860,865],{"type":43,"tag":307,"props":856,"children":857},{},[858],{"type":48,"value":859},"Watcher",{"type":43,"tag":307,"props":861,"children":862},{},[863],{"type":48,"value":864},"\"Watcher\" with context (\"the Watcher alerting feature\") on first use",{"type":43,"tag":307,"props":866,"children":867},{},[868],{"type":48,"value":869},"Deprecated in favor of Kibana alerting, so also flag as potentially outdated.",{"type":43,"tag":280,"props":871,"children":872},{},[873,878,883],{"type":43,"tag":307,"props":874,"children":875},{},[876],{"type":48,"value":877},"Dev Tools",{"type":43,"tag":307,"props":879,"children":880},{},[881],{"type":48,"value":882},"\"Dev Tools\" with context (\"the Dev Tools console in Kibana\") on first use",{"type":43,"tag":307,"props":884,"children":885},{},[886],{"type":48,"value":887},"Bare \"Dev Tools\" is ambiguous.",{"type":43,"tag":280,"props":889,"children":890},{},[891,896,901],{"type":43,"tag":307,"props":892,"children":893},{},[894],{"type":48,"value":895},"Discover",{"type":43,"tag":307,"props":897,"children":898},{},[899],{"type":48,"value":900},"\"Discover\" with context (\"the Discover app in Kibana\") on first use",{"type":43,"tag":307,"props":902,"children":903},{},[904],{"type":48,"value":905},"Bare \"Discover\" is a common English word.",{"type":43,"tag":280,"props":907,"children":908},{},[909,914,919],{"type":43,"tag":307,"props":910,"children":911},{},[912],{"type":48,"value":913},"Dashboard",{"type":43,"tag":307,"props":915,"children":916},{},[917],{"type":48,"value":918},"\"Kibana dashboard\" on first use if the Kibana context is not already established",{"type":43,"tag":307,"props":920,"children":921},{},[922],{"type":48,"value":923},"OK after context is set.",{"type":43,"tag":222,"props":925,"children":927},{"id":926},"unexplained-acronyms",[928],{"type":48,"value":929},"Unexplained acronyms",{"type":43,"tag":44,"props":931,"children":932},{},[933],{"type":48,"value":934},"Technical acronyms that must be spelled out on first use per page. Flag if they appear without expansion.",{"type":43,"tag":272,"props":936,"children":937},{},[938,953],{"type":43,"tag":276,"props":939,"children":940},{},[941],{"type":43,"tag":280,"props":942,"children":943},{},[944,948],{"type":43,"tag":284,"props":945,"children":946},{},[947],{"type":48,"value":288},{"type":43,"tag":284,"props":949,"children":950},{},[951],{"type":48,"value":952},"Expansion",{"type":43,"tag":300,"props":954,"children":955},{},[956,969,982,995,1008,1021,1034,1047,1060,1073,1086,1099,1112,1125,1138,1151],{"type":43,"tag":280,"props":957,"children":958},{},[959,964],{"type":43,"tag":307,"props":960,"children":961},{},[962],{"type":48,"value":963},"ILM",{"type":43,"tag":307,"props":965,"children":966},{},[967],{"type":48,"value":968},"Index Lifecycle Management",{"type":43,"tag":280,"props":970,"children":971},{},[972,977],{"type":43,"tag":307,"props":973,"children":974},{},[975],{"type":48,"value":976},"SLM",{"type":43,"tag":307,"props":978,"children":979},{},[980],{"type":48,"value":981},"Snapshot Lifecycle Management",{"type":43,"tag":280,"props":983,"children":984},{},[985,990],{"type":43,"tag":307,"props":986,"children":987},{},[988],{"type":48,"value":989},"CCR",{"type":43,"tag":307,"props":991,"children":992},{},[993],{"type":48,"value":994},"Cross-cluster replication",{"type":43,"tag":280,"props":996,"children":997},{},[998,1003],{"type":43,"tag":307,"props":999,"children":1000},{},[1001],{"type":48,"value":1002},"CCS",{"type":43,"tag":307,"props":1004,"children":1005},{},[1006],{"type":48,"value":1007},"Cross-cluster search",{"type":43,"tag":280,"props":1009,"children":1010},{},[1011,1016],{"type":43,"tag":307,"props":1012,"children":1013},{},[1014],{"type":48,"value":1015},"APM",{"type":43,"tag":307,"props":1017,"children":1018},{},[1019],{"type":48,"value":1020},"Application Performance Monitoring",{"type":43,"tag":280,"props":1022,"children":1023},{},[1024,1029],{"type":43,"tag":307,"props":1025,"children":1026},{},[1027],{"type":48,"value":1028},"SIEM",{"type":43,"tag":307,"props":1030,"children":1031},{},[1032],{"type":48,"value":1033},"Security Information and Event Management",{"type":43,"tag":280,"props":1035,"children":1036},{},[1037,1042],{"type":43,"tag":307,"props":1038,"children":1039},{},[1040],{"type":48,"value":1041},"TSDB",{"type":43,"tag":307,"props":1043,"children":1044},{},[1045],{"type":48,"value":1046},"Time series data stream (or time series database, depending on context)",{"type":43,"tag":280,"props":1048,"children":1049},{},[1050,1055],{"type":43,"tag":307,"props":1051,"children":1052},{},[1053],{"type":48,"value":1054},"ECS",{"type":43,"tag":307,"props":1056,"children":1057},{},[1058],{"type":48,"value":1059},"Elastic Common Schema",{"type":43,"tag":280,"props":1061,"children":1062},{},[1063,1068],{"type":43,"tag":307,"props":1064,"children":1065},{},[1066],{"type":48,"value":1067},"RBAC",{"type":43,"tag":307,"props":1069,"children":1070},{},[1071],{"type":48,"value":1072},"Role-based access control",{"type":43,"tag":280,"props":1074,"children":1075},{},[1076,1081],{"type":43,"tag":307,"props":1077,"children":1078},{},[1079],{"type":48,"value":1080},"KQL",{"type":43,"tag":307,"props":1082,"children":1083},{},[1084],{"type":48,"value":1085},"Kibana Query Language",{"type":43,"tag":280,"props":1087,"children":1088},{},[1089,1094],{"type":43,"tag":307,"props":1090,"children":1091},{},[1092],{"type":48,"value":1093},"EQL",{"type":43,"tag":307,"props":1095,"children":1096},{},[1097],{"type":48,"value":1098},"Event Query Language",{"type":43,"tag":280,"props":1100,"children":1101},{},[1102,1107],{"type":43,"tag":307,"props":1103,"children":1104},{},[1105],{"type":48,"value":1106},"ES",{"type":43,"tag":307,"props":1108,"children":1109},{},[1110],{"type":48,"value":1111},"QL",{"type":43,"tag":280,"props":1113,"children":1114},{},[1115,1120],{"type":43,"tag":307,"props":1116,"children":1117},{},[1118],{"type":48,"value":1119},"DSL",{"type":43,"tag":307,"props":1121,"children":1122},{},[1123],{"type":48,"value":1124},"Domain-specific language (or \"Query DSL\" specifically)",{"type":43,"tag":280,"props":1126,"children":1127},{},[1128,1133],{"type":43,"tag":307,"props":1129,"children":1130},{},[1131],{"type":48,"value":1132},"logsdb",{"type":43,"tag":307,"props":1134,"children":1135},{},[1136],{"type":48,"value":1137},"Elasticsearch logsdb index mode. Secondary references: \"logsdb index mode.\" Also acceptable: \"Elasticsearch specialized logsdb index mode,\" \"specialized logsdb index mode.\" Always lowercase (\"logsdb,\" not \"LogsDB\") unless starting a sentence.",{"type":43,"tag":280,"props":1139,"children":1140},{},[1141,1146],{"type":43,"tag":307,"props":1142,"children":1143},{},[1144],{"type":48,"value":1145},"ML",{"type":43,"tag":307,"props":1147,"children":1148},{},[1149],{"type":48,"value":1150},"Machine learning",{"type":43,"tag":280,"props":1152,"children":1153},{},[1154,1159],{"type":43,"tag":307,"props":1155,"children":1156},{},[1157],{"type":48,"value":1158},"NLP",{"type":43,"tag":307,"props":1160,"children":1161},{},[1162],{"type":48,"value":1163},"Natural language processing",{"items":1165,"total":1240},[1166,1176,1189,1199,1208,1221,1227],{"slug":1167,"name":1167,"fn":1168,"description":1169,"org":1170,"tags":1171,"stars":20,"repoUrl":21,"updatedAt":1175},"docs-applies-to-tagging","validate applies_to tags in Elastic documentation","Validate and generate applies_to tags in Elastic documentation, including for cumulative docs across versions and deployment types. Use when writing new docs pages, reviewing existing pages for correct applies_to usage, deciding whether to preserve or replace existing version-scoped content, or when content changes lifecycle state (experimental, preview, beta, GA, deprecated, removed).",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1172,1173,1174],{"name":13,"slug":14,"type":15},{"name":9,"slug":8,"type":15},{"name":18,"slug":19,"type":15},"2026-07-12T07:50:42.801473",{"slug":1177,"name":1177,"fn":1178,"description":1179,"org":1180,"tags":1181,"stars":20,"repoUrl":21,"updatedAt":1188},"docs-check-style","check documentation for Elastic style compliance","Check documentation for Elastic style guide compliance using Vale linter output and style rules. Use when writing, editing, or reviewing docs to catch voice, tone, grammar, formatting, accessibility, and word choice issues.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1182,1185,1186,1187],{"name":1183,"slug":1184,"type":15},"Accessibility","accessibility",{"name":13,"slug":14,"type":15},{"name":9,"slug":8,"type":15},{"name":18,"slug":19,"type":15},"2026-07-12T07:49:36.112751",{"slug":1190,"name":1190,"fn":1191,"description":1192,"org":1193,"tags":1194,"stars":20,"repoUrl":21,"updatedAt":1198},"docs-content-type-checker","check Elastic documentation content types","Check a docs-content page against Elastic content type guidelines (overview, how-to, tutorial, troubleshooting, changelog), or classify a proposed page idea against the content types before drafting. Use when the user asks to check content type compliance, validate page structure, review a doc against content type standards, or decide which content type a planned page should use.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1195,1196,1197],{"name":13,"slug":14,"type":15},{"name":9,"slug":8,"type":15},{"name":18,"slug":19,"type":15},"2026-07-12T07:50:36.826563",{"slug":1200,"name":1200,"fn":1201,"description":1202,"org":1203,"tags":1204,"stars":20,"repoUrl":21,"updatedAt":1207},"docs-draft-workflow-docs","draft Elastic Workflows documentation","Draft or update Elastic Workflows documentation pages in explore-analyze\u002Fworkflows\u002F — step references, use cases, how-tos, concepts, and overviews. Use when writing Workflows docs, documenting a step type, turning workflow YAML into documentation, drafting from a doc issue in docs-content or docs-content-internal, or creating a new page under the Workflows docset.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1205,1206],{"name":13,"slug":14,"type":15},{"name":18,"slug":19,"type":15},"2026-07-12T07:48:02.16095",{"slug":1209,"name":1209,"fn":1210,"description":1211,"org":1212,"tags":1213,"stars":20,"repoUrl":21,"updatedAt":1220},"docs-fix-changelog","improve Elastic changelog YAML files","Suggest improved text for changelog YAML files against current Elastic standards. Mirrors the pattern catalog from docs-review-changelog to provide consistent fixes. Includes type-title alignment checking and technical content assessment to catch overly technical titles that need user-focused rewrites. Features repository-aware area validation and enhanced confidence scoring. Supports single files or directories. Fetches canonical guidance to stay in sync. Use after review identifies quality issues, or when drafting new changelogs.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1214,1215,1216,1217],{"name":13,"slug":14,"type":15},{"name":9,"slug":8,"type":15},{"name":18,"slug":19,"type":15},{"name":1218,"slug":1219,"type":15},"YAML","yaml","2026-07-12T07:48:58.570382",{"slug":4,"name":4,"fn":5,"description":6,"org":1222,"tags":1223,"stars":20,"repoUrl":21,"updatedAt":22},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1224,1225,1226],{"name":13,"slug":14,"type":15},{"name":9,"slug":8,"type":15},{"name":18,"slug":19,"type":15},{"slug":1228,"name":1228,"fn":1229,"description":1230,"org":1231,"tags":1232,"stars":20,"repoUrl":21,"updatedAt":1239},"docs-frontmatter-audit","audit Elastic documentation frontmatter","Audit Elastic documentation files for frontmatter completeness and correctness. Checks products, description, and navigation_title fields across a directory. Use when auditing docs metadata, checking frontmatter quality before publishing, or validating a batch of files.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1233,1236,1237,1238],{"name":1234,"slug":1235,"type":15},"Audit","audit",{"name":13,"slug":14,"type":15},{"name":9,"slug":8,"type":15},{"name":18,"slug":19,"type":15},"2026-07-12T07:49:39.883351",18,{"items":1242,"total":1411},[1243,1262,1279,1294,1313,1325,1335,1350,1362,1375,1386,1398],{"slug":1244,"name":1244,"fn":1245,"description":1246,"org":1247,"tags":1248,"stars":1259,"repoUrl":1260,"updatedAt":1261},"accessing-benchmark-results","retrieve and analyze Rally benchmark results","Retrieve Rally benchmark results from an external Elasticsearch metrics store. Use to list past races, get a single race's overall (per-task) results, chart a metric's trend across multiple runs, compare two races, or check whether a run converged — e.g. \"show me recent geonames races\", \"what's the service_time trend for nyc_taxis over the last 30 days?\", \"compare these two race-ids\". Applies when datastore.type = elasticsearch is set in ~\u002F.rally\u002Frally.ini.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1249,1252,1255,1256],{"name":1250,"slug":1251,"type":15},"Analytics","analytics",{"name":1253,"slug":1254,"type":15},"Data Analysis","data-analysis",{"name":9,"slug":8,"type":15},{"name":1257,"slug":1258,"type":15},"Performance","performance",2027,"https:\u002F\u002Fgithub.com\u002Felastic\u002Frally","2026-07-12T07:46:38.54144",{"slug":1263,"name":1263,"fn":1264,"description":1265,"org":1266,"tags":1267,"stars":1259,"repoUrl":1260,"updatedAt":1278},"developing-rally","develop and debug Rally source code","Work on Rally's own codebase, not running benchmarks with it. Use when setting up the dev environment, running Rally's tests or linters, navigating its source, debugging Rally's own code, or making changes to Rally itself.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1268,1271,1272,1275],{"name":1269,"slug":1270,"type":15},"Debugging","debugging",{"name":9,"slug":8,"type":15},{"name":1273,"slug":1274,"type":15},"Engineering","engineering",{"name":1276,"slug":1277,"type":15},"Local Development","local-development","2026-07-12T07:46:35.976807",{"slug":1280,"name":1280,"fn":1281,"description":1282,"org":1283,"tags":1284,"stars":1259,"repoUrl":1260,"updatedAt":1293},"running-benchmarks","run Rally benchmarks against Elasticsearch","Run Rally benchmarks (races) against Elasticsearch — an existing\u002Fexternal cluster or a Rally-provisioned distribution — and read the summary report. Use when running a race (any pipeline, track, challenge, target-hosts, or auth) or when interpreting throughput, latency, and service_time results.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1285,1286,1289,1290],{"name":9,"slug":8,"type":15},{"name":1287,"slug":1288,"type":15},"Elasticsearch","elasticsearch",{"name":1257,"slug":1258,"type":15},{"name":1291,"slug":1292,"type":15},"Testing","testing","2026-07-12T07:46:37.277964",{"slug":1295,"name":1295,"fn":1296,"description":1297,"org":1298,"tags":1299,"stars":1310,"repoUrl":1311,"updatedAt":1312},"cloud-access-management","manage Elastic Cloud organization access","Manage Elastic Cloud organization access: invite users, assign roles to Serverless projects, and create or revoke Cloud API keys. Use when granting, modifying, or auditing user access.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1300,1303,1304,1307],{"name":1301,"slug":1302,"type":15},"Cloud","cloud",{"name":9,"slug":8,"type":15},{"name":1305,"slug":1306,"type":15},"Operations","operations",{"name":1308,"slug":1309,"type":15},"Permissions","permissions",531,"https:\u002F\u002Fgithub.com\u002Felastic\u002Fagent-skills","2026-07-12T07:46:44.946285",{"slug":1314,"name":1314,"fn":1315,"description":1316,"org":1317,"tags":1318,"stars":1310,"repoUrl":1311,"updatedAt":1324},"cloud-create-project","create Elastic Cloud Serverless projects","Creates Elastic Cloud Serverless projects (Elasticsearch, Observability, or Security) via the REST API, saves credentials to file, and bootstraps a scoped Elasticsearch API key. Use when creating a new serverless project, provisioning a search or observability environment, or spinning up a new Elastic Cloud project.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1319,1320,1323],{"name":1301,"slug":1302,"type":15},{"name":1321,"slug":1322,"type":15},"Deployment","deployment",{"name":1287,"slug":1288,"type":15},"2026-07-12T07:46:42.353362",{"slug":1326,"name":1326,"fn":1327,"description":1328,"org":1329,"tags":1330,"stars":1310,"repoUrl":1311,"updatedAt":1334},"cloud-manage-project","manage Elastic Cloud Serverless projects","Manages existing Elastic Cloud Serverless projects: list, get, update, delete, reset credentials, resume, and load saved credentials. Connects to existing projects by resolving endpoints and acquiring scoped Elasticsearch API keys. Use when performing day-2 operations on serverless projects, connecting to an existing project, loading or resetting project credentials, or looking up project details.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1331,1332,1333],{"name":1301,"slug":1302,"type":15},{"name":1287,"slug":1288,"type":15},{"name":1305,"slug":1306,"type":15},"2026-07-12T07:46:41.097412",{"slug":1336,"name":1336,"fn":1337,"description":1338,"org":1339,"tags":1340,"stars":1310,"repoUrl":1311,"updatedAt":1349},"cloud-network-security","manage Elastic Cloud network security","Manage Serverless network security (traffic filters): create, update, and delete IP filters and AWS PrivateLink VPC filters. Use when restricting network access or configuring private connectivity.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1341,1342,1343,1346],{"name":1301,"slug":1302,"type":15},{"name":1287,"slug":1288,"type":15},{"name":1344,"slug":1345,"type":15},"Networking","networking",{"name":1347,"slug":1348,"type":15},"Security","security","2026-07-12T07:46:43.675992",{"slug":1351,"name":1351,"fn":1352,"description":1353,"org":1354,"tags":1355,"stars":1310,"repoUrl":1311,"updatedAt":1361},"cloud-setup","configure Elastic Cloud authentication","Configures Elastic Cloud authentication and environment defaults. Use when setting up EC_API_KEY, configuring Cloud API access, or when another cloud skill requires credentials.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1356,1359,1360],{"name":1357,"slug":1358,"type":15},"Authentication","authentication",{"name":1301,"slug":1302,"type":15},{"name":1287,"slug":1288,"type":15},"2026-07-12T07:46:39.783105",{"slug":1363,"name":1363,"fn":1364,"description":1365,"org":1366,"tags":1367,"stars":1310,"repoUrl":1311,"updatedAt":1374},"elasticsearch-audit","configure Elasticsearch security audit logs","Enable, configure, and query Elasticsearch security audit logs. Use when the task involves audit logging setup, event filtering, or investigating security incidents like failed logins.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1368,1369,1370,1373],{"name":1234,"slug":1235,"type":15},{"name":1287,"slug":1288,"type":15},{"name":1371,"slug":1372,"type":15},"Logs","logs",{"name":1347,"slug":1348,"type":15},"2026-07-12T07:47:35.092599",{"slug":1376,"name":1376,"fn":1377,"description":1378,"org":1379,"tags":1380,"stars":1310,"repoUrl":1311,"updatedAt":1385},"elasticsearch-authn","configure Elasticsearch authentication realms","Authenticate to Elasticsearch using native, file-based, LDAP\u002FAD, SAML, OIDC, Kerberos, JWT, or certificate realms. Use when connecting with credentials, choosing a realm, or managing API keys. Assumes the target realms are already configured.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1381,1382,1383,1384],{"name":1357,"slug":1358,"type":15},{"name":9,"slug":8,"type":15},{"name":1287,"slug":1288,"type":15},{"name":1347,"slug":1348,"type":15},"2026-07-12T07:47:41.474547",{"slug":1387,"name":1387,"fn":1388,"description":1389,"org":1390,"tags":1391,"stars":1310,"repoUrl":1311,"updatedAt":1397},"elasticsearch-authz","manage Elasticsearch RBAC and security roles","Manage Elasticsearch RBAC: native users, roles, role mappings, document- and field-level security. Use when creating users or roles, assigning privileges, or mapping external realms like LDAP\u002FSAML.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1392,1393,1394,1396],{"name":9,"slug":8,"type":15},{"name":1287,"slug":1288,"type":15},{"name":1067,"slug":1395,"type":15},"rbac",{"name":1347,"slug":1348,"type":15},"2026-07-12T07:47:36.394177",{"slug":1399,"name":1399,"fn":1400,"description":1401,"org":1402,"tags":1403,"stars":1310,"repoUrl":1311,"updatedAt":1410},"elasticsearch-esql","query Elasticsearch data with ES|QL","Execute ES|QL (Elasticsearch Query Language) queries, use when the user wants to query Elasticsearch data, analyze logs, aggregate metrics, explore data, or create charts and dashboards from ES|QL results.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[1404,1405,1406,1407],{"name":1250,"slug":1251,"type":15},{"name":1253,"slug":1254,"type":15},{"name":1287,"slug":1288,"type":15},{"name":1408,"slug":1409,"type":15},"SQL","sql","2026-07-12T07:47:40.249533",86]