[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill-elastic-observability-manage-slos":3,"mdc-t3pxy6-key":34,"related-repo-elastic-observability-manage-slos":765,"related-org-elastic-observability-manage-slos":860},{"slug":4,"name":4,"fn":5,"description":6,"org":7,"tags":11,"stars":23,"repoUrl":24,"updatedAt":25,"license":26,"forks":27,"topics":28,"repo":29,"sourceUrl":32,"mdContent":33},"observability-manage-slos","manage SLOs in Elastic Observability","Create and manage SLOs in Elastic Observability using the Kibana API. Use when defining SLIs, setting error budgets, or managing SLO lifecycle.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},"elastic","Elastic","https:\u002F\u002Fpexgzepcugksgbtrxkhf.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Forg-logos\u002Felastic.png",[12,16,19,20],{"name":13,"slug":14,"type":15},"Observability","observability","tag",{"name":17,"slug":18,"type":15},"Monitoring","monitoring",{"name":9,"slug":8,"type":15},{"name":21,"slug":22,"type":15},"Kibana","kibana",531,"https:\u002F\u002Fgithub.com\u002Felastic\u002Fagent-skills","2026-07-12T07:47:32.554945",null,41,[],{"repoUrl":24,"stars":23,"forks":27,"topics":30,"description":31},[],"Official Elastic Skills","https:\u002F\u002Fgithub.com\u002Felastic\u002Fagent-skills\u002Ftree\u002FHEAD\u002Fplugins\u002Fobservability\u002Fskills\u002Fmanage-slos","---\nname: observability-manage-slos\ndescription: >\n  Create and manage SLOs in Elastic Observability using the Kibana API. Use when defining\n  SLIs, setting error budgets, or managing SLO lifecycle.\nmetadata:\n  author: elastic\n  version: 0.2.0\n---\n\n# Service-Level Objectives (SLOs)\n\nCreate and manage SLOs in Elastic Observability. SLOs track service performance against measurable targets using\nservice-level indicators (SLIs) computed from Elasticsearch data.\n\n## Authentication\n\nSLO operations go through the Kibana API. Authenticate with either an API key or basic auth:\n\n```bash\n# API key\ncurl -H \"Authorization: ApiKey \u003Cbase64-encoded-key>\" -H \"kbn-xsrf: true\" \u003CKIBANA_URL>\u002Fapi\u002Fobservability\u002Fslos\n\n# Basic auth\ncurl -u \"$KIBANA_USER:$KIBANA_PASSWORD\" -H \"kbn-xsrf: true\" \u003CKIBANA_URL>\u002Fapi\u002Fobservability\u002Fslos\n```\n\nFor non-default spaces, prefix the path: `\u002Fs\u002F\u003Cspace_id>\u002Fapi\u002Fobservability\u002Fslos`.\n\nInclude `kbn-xsrf: true` on all POST, PUT, and DELETE requests.\n\n## SLI Types\n\n| Type                    | API value                      | Use case                                    |\n| ----------------------- | ------------------------------ | ------------------------------------------- |\n| Custom KQL              | `sli.kql.custom`               | Raw logs — good\u002Ftotal using KQL queries     |\n| Custom metric           | `sli.metric.custom`            | Metric fields — equations with aggregations |\n| Timeslice metric        | `sli.metric.timeslice`         | Metric fields — per-slice threshold check   |\n| Histogram metric        | `sli.histogram.custom`         | Histogram fields — range\u002Fvalue_count        |\n| APM latency             | `sli.apm.transactionDuration`  | APM — latency threshold                     |\n| APM availability        | `sli.apm.transactionErrorRate` | APM — success rate                          |\n| Synthetics availability | `sli.synthetics.availability`  | Synthetics monitors — uptime percentage     |\n\n## Guidelines\n\n- `objective.target` is a decimal between 0 and 1 (for example `0.995` for 99.5%).\n- Timeslice metric indicators require `budgetingMethod: \"timeslices\"`.\n- Updating an SLO resets the underlying transform — historical data is recomputed.\n- The cluster needs nodes with both `transform` and `ingest` roles.\n- Use `POST ...\u002Fslos\u002F{id}\u002F_reset` when an SLO is stuck or after index mapping changes.\n- Group-by SLOs create one instance per unique value — avoid high-cardinality fields.\n- Synthetics SLOs are auto-grouped by monitor and location; do not set `groupBy` manually.\n- Burn rate alert rules are not auto-created using the API — set them up separately.\n\n## Additional references\n\nFor official documentation, refer to the following resources:\n\n### SLO documentation\n\n- [Service-level objectives (SLOs)](https:\u002F\u002Fwww.elastic.co\u002Fdocs\u002Fsolutions\u002Fobservability\u002Fincident-management\u002Fservice-level-objectives-slos)\n  — concepts, SLI types, budgeting methods, and dashboard panels.\n- [Create an SLO](https:\u002F\u002Fwww.elastic.co\u002Fdocs\u002Fsolutions\u002Fobservability\u002Fincident-management\u002Fcreate-an-slo) — step-by-step\n  guide for creating SLOs in the Kibana UI.\n- [View and manage SLOs](https:\u002F\u002Fwww.elastic.co\u002Fdocs\u002Fsolutions\u002Fobservability\u002Fincident-management\u002Fslo-management) —\n  searching, filtering, and managing existing SLOs.\n\n### Kibana SLO API\n\n- [Create an SLO](https:\u002F\u002Fwww.elastic.co\u002Fdocs\u002Fapi\u002Fdoc\u002Fkibana\u002Foperation\u002Foperation-createsloop) — full request body schema\n  with all SLI type payloads.\n- [Get an SLO](https:\u002F\u002Fwww.elastic.co\u002Fdocs\u002Fapi\u002Fdoc\u002Fkibana\u002Foperation\u002Foperation-getsloop) |\n  [Update](https:\u002F\u002Fwww.elastic.co\u002Fdocs\u002Fapi\u002Fdoc\u002Fkibana\u002Foperation\u002Foperation-updatesloop) |\n  [Delete](https:\u002F\u002Fwww.elastic.co\u002Fdocs\u002Fapi\u002Fdoc\u002Fkibana\u002Foperation\u002Foperation-deletesloop) |\n  [Reset](https:\u002F\u002Fwww.elastic.co\u002Fdocs\u002Fapi\u002Fdoc\u002Fkibana\u002Foperation\u002Foperation-resetsloop)\n- [Enable](https:\u002F\u002Fwww.elastic.co\u002Fdocs\u002Fapi\u002Fdoc\u002Fkibana\u002Foperation\u002Foperation-enablesloop) |\n  [Disable](https:\u002F\u002Fwww.elastic.co\u002Fdocs\u002Fapi\u002Fdoc\u002Fkibana\u002Foperation\u002Foperation-disablesloop) |\n  [Get definitions](https:\u002F\u002Fwww.elastic.co\u002Fdocs\u002Fapi\u002Fdoc\u002Fkibana\u002Foperation\u002Foperation-getdefinitionsop)\n\n### Troubleshooting and access\n\n- [Troubleshoot SLOs](https:\u002F\u002Fwww.elastic.co\u002Fdocs\u002Ftroubleshoot\u002Fobservability\u002Ftroubleshoot-service-level-objectives-slos)\n- [Configure SLO access](https:\u002F\u002Fwww.elastic.co\u002Fdocs\u002Fsolutions\u002Fobservability\u002Fincident-management\u002Fconfigure-service-level-objective-slo-access)\n- [Create an SLO burn rate rule](https:\u002F\u002Fwww.elastic.co\u002Fdocs\u002Fsolutions\u002Fobservability\u002Fincident-management\u002Fcreate-an-slo-burn-rate-rule)\n",{"data":35,"body":38},{"name":4,"description":6,"metadata":36},{"author":8,"version":37},"0.2.0",{"type":39,"children":40},"root",[41,50,56,63,68,258,271,283,289,476,482,580,586,591,598,639,645,720,726,759],{"type":42,"tag":43,"props":44,"children":46},"element","h1",{"id":45},"service-level-objectives-slos",[47],{"type":48,"value":49},"text","Service-Level Objectives (SLOs)",{"type":42,"tag":51,"props":52,"children":53},"p",{},[54],{"type":48,"value":55},"Create and manage SLOs in Elastic Observability. SLOs track service performance against measurable targets using\nservice-level indicators (SLIs) computed from Elasticsearch data.",{"type":42,"tag":57,"props":58,"children":60},"h2",{"id":59},"authentication",[61],{"type":48,"value":62},"Authentication",{"type":42,"tag":51,"props":64,"children":65},{},[66],{"type":48,"value":67},"SLO operations go through the Kibana API. Authenticate with either an API key or basic auth:",{"type":42,"tag":69,"props":70,"children":75},"pre",{"className":71,"code":72,"language":73,"meta":74,"style":74},"language-bash shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","# API key\ncurl -H \"Authorization: ApiKey \u003Cbase64-encoded-key>\" -H \"kbn-xsrf: true\" \u003CKIBANA_URL>\u002Fapi\u002Fobservability\u002Fslos\n\n# Basic auth\ncurl -u \"$KIBANA_USER:$KIBANA_PASSWORD\" -H \"kbn-xsrf: true\" \u003CKIBANA_URL>\u002Fapi\u002Fobservability\u002Fslos\n","bash","",[76],{"type":42,"tag":77,"props":78,"children":79},"code",{"__ignoreMap":74},[80,92,167,177,186],{"type":42,"tag":81,"props":82,"children":85},"span",{"class":83,"line":84},"line",1,[86],{"type":42,"tag":81,"props":87,"children":89},{"style":88},"--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic",[90],{"type":48,"value":91},"# API key\n",{"type":42,"tag":81,"props":93,"children":95},{"class":83,"line":94},2,[96,102,108,114,119,124,128,132,137,141,146,151,157,162],{"type":42,"tag":81,"props":97,"children":99},{"style":98},"--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B",[100],{"type":48,"value":101},"curl",{"type":42,"tag":81,"props":103,"children":105},{"style":104},"--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D",[106],{"type":48,"value":107}," -H",{"type":42,"tag":81,"props":109,"children":111},{"style":110},"--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF",[112],{"type":48,"value":113}," \"",{"type":42,"tag":81,"props":115,"children":116},{"style":104},[117],{"type":48,"value":118},"Authorization: ApiKey \u003Cbase64-encoded-key>",{"type":42,"tag":81,"props":120,"children":121},{"style":110},[122],{"type":48,"value":123},"\"",{"type":42,"tag":81,"props":125,"children":126},{"style":104},[127],{"type":48,"value":107},{"type":42,"tag":81,"props":129,"children":130},{"style":110},[131],{"type":48,"value":113},{"type":42,"tag":81,"props":133,"children":134},{"style":104},[135],{"type":48,"value":136},"kbn-xsrf: true",{"type":42,"tag":81,"props":138,"children":139},{"style":110},[140],{"type":48,"value":123},{"type":42,"tag":81,"props":142,"children":143},{"style":110},[144],{"type":48,"value":145}," \u003C",{"type":42,"tag":81,"props":147,"children":148},{"style":104},[149],{"type":48,"value":150},"KIBANA_UR",{"type":42,"tag":81,"props":152,"children":154},{"style":153},"--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8",[155],{"type":48,"value":156},"L",{"type":42,"tag":81,"props":158,"children":159},{"style":110},[160],{"type":48,"value":161},">",{"type":42,"tag":81,"props":163,"children":164},{"style":104},[165],{"type":48,"value":166},"\u002Fapi\u002Fobservability\u002Fslos\n",{"type":42,"tag":81,"props":168,"children":170},{"class":83,"line":169},3,[171],{"type":42,"tag":81,"props":172,"children":174},{"emptyLinePlaceholder":173},true,[175],{"type":48,"value":176},"\n",{"type":42,"tag":81,"props":178,"children":180},{"class":83,"line":179},4,[181],{"type":42,"tag":81,"props":182,"children":183},{"style":88},[184],{"type":48,"value":185},"# Basic auth\n",{"type":42,"tag":81,"props":187,"children":189},{"class":83,"line":188},5,[190,194,199,203,208,213,218,222,226,230,234,238,242,246,250,254],{"type":42,"tag":81,"props":191,"children":192},{"style":98},[193],{"type":48,"value":101},{"type":42,"tag":81,"props":195,"children":196},{"style":104},[197],{"type":48,"value":198}," -u",{"type":42,"tag":81,"props":200,"children":201},{"style":110},[202],{"type":48,"value":113},{"type":42,"tag":81,"props":204,"children":205},{"style":153},[206],{"type":48,"value":207},"$KIBANA_USER",{"type":42,"tag":81,"props":209,"children":210},{"style":104},[211],{"type":48,"value":212},":",{"type":42,"tag":81,"props":214,"children":215},{"style":153},[216],{"type":48,"value":217},"$KIBANA_PASSWORD",{"type":42,"tag":81,"props":219,"children":220},{"style":110},[221],{"type":48,"value":123},{"type":42,"tag":81,"props":223,"children":224},{"style":104},[225],{"type":48,"value":107},{"type":42,"tag":81,"props":227,"children":228},{"style":110},[229],{"type":48,"value":113},{"type":42,"tag":81,"props":231,"children":232},{"style":104},[233],{"type":48,"value":136},{"type":42,"tag":81,"props":235,"children":236},{"style":110},[237],{"type":48,"value":123},{"type":42,"tag":81,"props":239,"children":240},{"style":110},[241],{"type":48,"value":145},{"type":42,"tag":81,"props":243,"children":244},{"style":104},[245],{"type":48,"value":150},{"type":42,"tag":81,"props":247,"children":248},{"style":153},[249],{"type":48,"value":156},{"type":42,"tag":81,"props":251,"children":252},{"style":110},[253],{"type":48,"value":161},{"type":42,"tag":81,"props":255,"children":256},{"style":104},[257],{"type":48,"value":166},{"type":42,"tag":51,"props":259,"children":260},{},[261,263,269],{"type":48,"value":262},"For non-default spaces, prefix the path: ",{"type":42,"tag":77,"props":264,"children":266},{"className":265},[],[267],{"type":48,"value":268},"\u002Fs\u002F\u003Cspace_id>\u002Fapi\u002Fobservability\u002Fslos",{"type":48,"value":270},".",{"type":42,"tag":51,"props":272,"children":273},{},[274,276,281],{"type":48,"value":275},"Include ",{"type":42,"tag":77,"props":277,"children":279},{"className":278},[],[280],{"type":48,"value":136},{"type":48,"value":282}," on all POST, PUT, and DELETE requests.",{"type":42,"tag":57,"props":284,"children":286},{"id":285},"sli-types",[287],{"type":48,"value":288},"SLI Types",{"type":42,"tag":290,"props":291,"children":292},"table",{},[293,317],{"type":42,"tag":294,"props":295,"children":296},"thead",{},[297],{"type":42,"tag":298,"props":299,"children":300},"tr",{},[301,307,312],{"type":42,"tag":302,"props":303,"children":304},"th",{},[305],{"type":48,"value":306},"Type",{"type":42,"tag":302,"props":308,"children":309},{},[310],{"type":48,"value":311},"API value",{"type":42,"tag":302,"props":313,"children":314},{},[315],{"type":48,"value":316},"Use case",{"type":42,"tag":318,"props":319,"children":320},"tbody",{},[321,344,366,388,410,432,454],{"type":42,"tag":298,"props":322,"children":323},{},[324,330,339],{"type":42,"tag":325,"props":326,"children":327},"td",{},[328],{"type":48,"value":329},"Custom KQL",{"type":42,"tag":325,"props":331,"children":332},{},[333],{"type":42,"tag":77,"props":334,"children":336},{"className":335},[],[337],{"type":48,"value":338},"sli.kql.custom",{"type":42,"tag":325,"props":340,"children":341},{},[342],{"type":48,"value":343},"Raw logs — good\u002Ftotal using KQL queries",{"type":42,"tag":298,"props":345,"children":346},{},[347,352,361],{"type":42,"tag":325,"props":348,"children":349},{},[350],{"type":48,"value":351},"Custom metric",{"type":42,"tag":325,"props":353,"children":354},{},[355],{"type":42,"tag":77,"props":356,"children":358},{"className":357},[],[359],{"type":48,"value":360},"sli.metric.custom",{"type":42,"tag":325,"props":362,"children":363},{},[364],{"type":48,"value":365},"Metric fields — equations with aggregations",{"type":42,"tag":298,"props":367,"children":368},{},[369,374,383],{"type":42,"tag":325,"props":370,"children":371},{},[372],{"type":48,"value":373},"Timeslice metric",{"type":42,"tag":325,"props":375,"children":376},{},[377],{"type":42,"tag":77,"props":378,"children":380},{"className":379},[],[381],{"type":48,"value":382},"sli.metric.timeslice",{"type":42,"tag":325,"props":384,"children":385},{},[386],{"type":48,"value":387},"Metric fields — per-slice threshold check",{"type":42,"tag":298,"props":389,"children":390},{},[391,396,405],{"type":42,"tag":325,"props":392,"children":393},{},[394],{"type":48,"value":395},"Histogram metric",{"type":42,"tag":325,"props":397,"children":398},{},[399],{"type":42,"tag":77,"props":400,"children":402},{"className":401},[],[403],{"type":48,"value":404},"sli.histogram.custom",{"type":42,"tag":325,"props":406,"children":407},{},[408],{"type":48,"value":409},"Histogram fields — range\u002Fvalue_count",{"type":42,"tag":298,"props":411,"children":412},{},[413,418,427],{"type":42,"tag":325,"props":414,"children":415},{},[416],{"type":48,"value":417},"APM latency",{"type":42,"tag":325,"props":419,"children":420},{},[421],{"type":42,"tag":77,"props":422,"children":424},{"className":423},[],[425],{"type":48,"value":426},"sli.apm.transactionDuration",{"type":42,"tag":325,"props":428,"children":429},{},[430],{"type":48,"value":431},"APM — latency threshold",{"type":42,"tag":298,"props":433,"children":434},{},[435,440,449],{"type":42,"tag":325,"props":436,"children":437},{},[438],{"type":48,"value":439},"APM availability",{"type":42,"tag":325,"props":441,"children":442},{},[443],{"type":42,"tag":77,"props":444,"children":446},{"className":445},[],[447],{"type":48,"value":448},"sli.apm.transactionErrorRate",{"type":42,"tag":325,"props":450,"children":451},{},[452],{"type":48,"value":453},"APM — success rate",{"type":42,"tag":298,"props":455,"children":456},{},[457,462,471],{"type":42,"tag":325,"props":458,"children":459},{},[460],{"type":48,"value":461},"Synthetics availability",{"type":42,"tag":325,"props":463,"children":464},{},[465],{"type":42,"tag":77,"props":466,"children":468},{"className":467},[],[469],{"type":48,"value":470},"sli.synthetics.availability",{"type":42,"tag":325,"props":472,"children":473},{},[474],{"type":48,"value":475},"Synthetics monitors — uptime percentage",{"type":42,"tag":57,"props":477,"children":479},{"id":478},"guidelines",[480],{"type":48,"value":481},"Guidelines",{"type":42,"tag":483,"props":484,"children":485},"ul",{},[486,506,518,523,544,557,562,575],{"type":42,"tag":487,"props":488,"children":489},"li",{},[490,496,498,504],{"type":42,"tag":77,"props":491,"children":493},{"className":492},[],[494],{"type":48,"value":495},"objective.target",{"type":48,"value":497}," is a decimal between 0 and 1 (for example ",{"type":42,"tag":77,"props":499,"children":501},{"className":500},[],[502],{"type":48,"value":503},"0.995",{"type":48,"value":505}," for 99.5%).",{"type":42,"tag":487,"props":507,"children":508},{},[509,511,517],{"type":48,"value":510},"Timeslice metric indicators require ",{"type":42,"tag":77,"props":512,"children":514},{"className":513},[],[515],{"type":48,"value":516},"budgetingMethod: \"timeslices\"",{"type":48,"value":270},{"type":42,"tag":487,"props":519,"children":520},{},[521],{"type":48,"value":522},"Updating an SLO resets the underlying transform — historical data is recomputed.",{"type":42,"tag":487,"props":524,"children":525},{},[526,528,534,536,542],{"type":48,"value":527},"The cluster needs nodes with both ",{"type":42,"tag":77,"props":529,"children":531},{"className":530},[],[532],{"type":48,"value":533},"transform",{"type":48,"value":535}," and ",{"type":42,"tag":77,"props":537,"children":539},{"className":538},[],[540],{"type":48,"value":541},"ingest",{"type":48,"value":543}," roles.",{"type":42,"tag":487,"props":545,"children":546},{},[547,549,555],{"type":48,"value":548},"Use ",{"type":42,"tag":77,"props":550,"children":552},{"className":551},[],[553],{"type":48,"value":554},"POST ...\u002Fslos\u002F{id}\u002F_reset",{"type":48,"value":556}," when an SLO is stuck or after index mapping changes.",{"type":42,"tag":487,"props":558,"children":559},{},[560],{"type":48,"value":561},"Group-by SLOs create one instance per unique value — avoid high-cardinality fields.",{"type":42,"tag":487,"props":563,"children":564},{},[565,567,573],{"type":48,"value":566},"Synthetics SLOs are auto-grouped by monitor and location; do not set ",{"type":42,"tag":77,"props":568,"children":570},{"className":569},[],[571],{"type":48,"value":572},"groupBy",{"type":48,"value":574}," manually.",{"type":42,"tag":487,"props":576,"children":577},{},[578],{"type":48,"value":579},"Burn rate alert rules are not auto-created using the API — set them up separately.",{"type":42,"tag":57,"props":581,"children":583},{"id":582},"additional-references",[584],{"type":48,"value":585},"Additional references",{"type":42,"tag":51,"props":587,"children":588},{},[589],{"type":48,"value":590},"For official documentation, refer to the following resources:",{"type":42,"tag":592,"props":593,"children":595},"h3",{"id":594},"slo-documentation",[596],{"type":48,"value":597},"SLO documentation",{"type":42,"tag":483,"props":599,"children":600},{},[601,615,627],{"type":42,"tag":487,"props":602,"children":603},{},[604,613],{"type":42,"tag":605,"props":606,"children":610},"a",{"href":607,"rel":608},"https:\u002F\u002Fwww.elastic.co\u002Fdocs\u002Fsolutions\u002Fobservability\u002Fincident-management\u002Fservice-level-objectives-slos",[609],"nofollow",[611],{"type":48,"value":612},"Service-level objectives (SLOs)",{"type":48,"value":614},"\n— concepts, SLI types, budgeting methods, and dashboard panels.",{"type":42,"tag":487,"props":616,"children":617},{},[618,625],{"type":42,"tag":605,"props":619,"children":622},{"href":620,"rel":621},"https:\u002F\u002Fwww.elastic.co\u002Fdocs\u002Fsolutions\u002Fobservability\u002Fincident-management\u002Fcreate-an-slo",[609],[623],{"type":48,"value":624},"Create an SLO",{"type":48,"value":626}," — step-by-step\nguide for creating SLOs in the Kibana UI.",{"type":42,"tag":487,"props":628,"children":629},{},[630,637],{"type":42,"tag":605,"props":631,"children":634},{"href":632,"rel":633},"https:\u002F\u002Fwww.elastic.co\u002Fdocs\u002Fsolutions\u002Fobservability\u002Fincident-management\u002Fslo-management",[609],[635],{"type":48,"value":636},"View and manage SLOs",{"type":48,"value":638}," —\nsearching, filtering, and managing existing SLOs.",{"type":42,"tag":592,"props":640,"children":642},{"id":641},"kibana-slo-api",[643],{"type":48,"value":644},"Kibana SLO API",{"type":42,"tag":483,"props":646,"children":647},{},[648,659,694],{"type":42,"tag":487,"props":649,"children":650},{},[651,657],{"type":42,"tag":605,"props":652,"children":655},{"href":653,"rel":654},"https:\u002F\u002Fwww.elastic.co\u002Fdocs\u002Fapi\u002Fdoc\u002Fkibana\u002Foperation\u002Foperation-createsloop",[609],[656],{"type":48,"value":624},{"type":48,"value":658}," — full request body schema\nwith all SLI type payloads.",{"type":42,"tag":487,"props":660,"children":661},{},[662,669,671,678,679,686,687],{"type":42,"tag":605,"props":663,"children":666},{"href":664,"rel":665},"https:\u002F\u002Fwww.elastic.co\u002Fdocs\u002Fapi\u002Fdoc\u002Fkibana\u002Foperation\u002Foperation-getsloop",[609],[667],{"type":48,"value":668},"Get an SLO",{"type":48,"value":670}," |\n",{"type":42,"tag":605,"props":672,"children":675},{"href":673,"rel":674},"https:\u002F\u002Fwww.elastic.co\u002Fdocs\u002Fapi\u002Fdoc\u002Fkibana\u002Foperation\u002Foperation-updatesloop",[609],[676],{"type":48,"value":677},"Update",{"type":48,"value":670},{"type":42,"tag":605,"props":680,"children":683},{"href":681,"rel":682},"https:\u002F\u002Fwww.elastic.co\u002Fdocs\u002Fapi\u002Fdoc\u002Fkibana\u002Foperation\u002Foperation-deletesloop",[609],[684],{"type":48,"value":685},"Delete",{"type":48,"value":670},{"type":42,"tag":605,"props":688,"children":691},{"href":689,"rel":690},"https:\u002F\u002Fwww.elastic.co\u002Fdocs\u002Fapi\u002Fdoc\u002Fkibana\u002Foperation\u002Foperation-resetsloop",[609],[692],{"type":48,"value":693},"Reset",{"type":42,"tag":487,"props":695,"children":696},{},[697,704,705,712,713],{"type":42,"tag":605,"props":698,"children":701},{"href":699,"rel":700},"https:\u002F\u002Fwww.elastic.co\u002Fdocs\u002Fapi\u002Fdoc\u002Fkibana\u002Foperation\u002Foperation-enablesloop",[609],[702],{"type":48,"value":703},"Enable",{"type":48,"value":670},{"type":42,"tag":605,"props":706,"children":709},{"href":707,"rel":708},"https:\u002F\u002Fwww.elastic.co\u002Fdocs\u002Fapi\u002Fdoc\u002Fkibana\u002Foperation\u002Foperation-disablesloop",[609],[710],{"type":48,"value":711},"Disable",{"type":48,"value":670},{"type":42,"tag":605,"props":714,"children":717},{"href":715,"rel":716},"https:\u002F\u002Fwww.elastic.co\u002Fdocs\u002Fapi\u002Fdoc\u002Fkibana\u002Foperation\u002Foperation-getdefinitionsop",[609],[718],{"type":48,"value":719},"Get definitions",{"type":42,"tag":592,"props":721,"children":723},{"id":722},"troubleshooting-and-access",[724],{"type":48,"value":725},"Troubleshooting and access",{"type":42,"tag":483,"props":727,"children":728},{},[729,739,749],{"type":42,"tag":487,"props":730,"children":731},{},[732],{"type":42,"tag":605,"props":733,"children":736},{"href":734,"rel":735},"https:\u002F\u002Fwww.elastic.co\u002Fdocs\u002Ftroubleshoot\u002Fobservability\u002Ftroubleshoot-service-level-objectives-slos",[609],[737],{"type":48,"value":738},"Troubleshoot SLOs",{"type":42,"tag":487,"props":740,"children":741},{},[742],{"type":42,"tag":605,"props":743,"children":746},{"href":744,"rel":745},"https:\u002F\u002Fwww.elastic.co\u002Fdocs\u002Fsolutions\u002Fobservability\u002Fincident-management\u002Fconfigure-service-level-objective-slo-access",[609],[747],{"type":48,"value":748},"Configure SLO access",{"type":42,"tag":487,"props":750,"children":751},{},[752],{"type":42,"tag":605,"props":753,"children":756},{"href":754,"rel":755},"https:\u002F\u002Fwww.elastic.co\u002Fdocs\u002Fsolutions\u002Fobservability\u002Fincident-management\u002Fcreate-an-slo-burn-rate-rule",[609],[757],{"type":48,"value":758},"Create an SLO burn rate rule",{"type":42,"tag":760,"props":761,"children":762},"style",{},[763],{"type":48,"value":764},"html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}",{"items":766,"total":859},[767,784,798,808,823,833,848],{"slug":768,"name":768,"fn":769,"description":770,"org":771,"tags":772,"stars":23,"repoUrl":24,"updatedAt":783},"cloud-access-management","manage Elastic Cloud organization access","Manage Elastic Cloud organization access: invite users, assign roles to Serverless projects, and create or revoke Cloud API keys. Use when granting, modifying, or auditing user access.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[773,776,777,780],{"name":774,"slug":775,"type":15},"Cloud","cloud",{"name":9,"slug":8,"type":15},{"name":778,"slug":779,"type":15},"Operations","operations",{"name":781,"slug":782,"type":15},"Permissions","permissions","2026-07-12T07:46:44.946285",{"slug":785,"name":785,"fn":786,"description":787,"org":788,"tags":789,"stars":23,"repoUrl":24,"updatedAt":797},"cloud-create-project","create Elastic Cloud Serverless projects","Creates Elastic Cloud Serverless projects (Elasticsearch, Observability, or Security) via the REST API, saves credentials to file, and bootstraps a scoped Elasticsearch API key. Use when creating a new serverless project, provisioning a search or observability environment, or spinning up a new Elastic Cloud project.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[790,791,794],{"name":774,"slug":775,"type":15},{"name":792,"slug":793,"type":15},"Deployment","deployment",{"name":795,"slug":796,"type":15},"Elasticsearch","elasticsearch","2026-07-12T07:46:42.353362",{"slug":799,"name":799,"fn":800,"description":801,"org":802,"tags":803,"stars":23,"repoUrl":24,"updatedAt":807},"cloud-manage-project","manage Elastic Cloud Serverless projects","Manages existing Elastic Cloud Serverless projects: list, get, update, delete, reset credentials, resume, and load saved credentials. Connects to existing projects by resolving endpoints and acquiring scoped Elasticsearch API keys. Use when performing day-2 operations on serverless projects, connecting to an existing project, loading or resetting project credentials, or looking up project details.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[804,805,806],{"name":774,"slug":775,"type":15},{"name":795,"slug":796,"type":15},{"name":778,"slug":779,"type":15},"2026-07-12T07:46:41.097412",{"slug":809,"name":809,"fn":810,"description":811,"org":812,"tags":813,"stars":23,"repoUrl":24,"updatedAt":822},"cloud-network-security","manage Elastic Cloud network security","Manage Serverless network security (traffic filters): create, update, and delete IP filters and AWS PrivateLink VPC filters. Use when restricting network access or configuring private connectivity.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[814,815,816,819],{"name":774,"slug":775,"type":15},{"name":795,"slug":796,"type":15},{"name":817,"slug":818,"type":15},"Networking","networking",{"name":820,"slug":821,"type":15},"Security","security","2026-07-12T07:46:43.675992",{"slug":824,"name":824,"fn":825,"description":826,"org":827,"tags":828,"stars":23,"repoUrl":24,"updatedAt":832},"cloud-setup","configure Elastic Cloud authentication","Configures Elastic Cloud authentication and environment defaults. Use when setting up EC_API_KEY, configuring Cloud API access, or when another cloud skill requires credentials.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[829,830,831],{"name":62,"slug":59,"type":15},{"name":774,"slug":775,"type":15},{"name":795,"slug":796,"type":15},"2026-07-12T07:46:39.783105",{"slug":834,"name":834,"fn":835,"description":836,"org":837,"tags":838,"stars":23,"repoUrl":24,"updatedAt":847},"elasticsearch-audit","configure Elasticsearch security audit logs","Enable, configure, and query Elasticsearch security audit logs. Use when the task involves audit logging setup, event filtering, or investigating security incidents like failed logins.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[839,842,843,846],{"name":840,"slug":841,"type":15},"Audit","audit",{"name":795,"slug":796,"type":15},{"name":844,"slug":845,"type":15},"Logs","logs",{"name":820,"slug":821,"type":15},"2026-07-12T07:47:35.092599",{"slug":849,"name":849,"fn":850,"description":851,"org":852,"tags":853,"stars":23,"repoUrl":24,"updatedAt":858},"elasticsearch-authn","configure Elasticsearch authentication realms","Authenticate to Elasticsearch using native, file-based, LDAP\u002FAD, SAML, OIDC, Kerberos, JWT, or certificate realms. Use when connecting with credentials, choosing a realm, or managing API keys. Assumes the target realms are already configured.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[854,855,856,857],{"name":62,"slug":59,"type":15},{"name":9,"slug":8,"type":15},{"name":795,"slug":796,"type":15},{"name":820,"slug":821,"type":15},"2026-07-12T07:47:41.474547",35,{"items":861,"total":983},[862,881,898,911,918,924,930,937,943,950,957,970],{"slug":863,"name":863,"fn":864,"description":865,"org":866,"tags":867,"stars":878,"repoUrl":879,"updatedAt":880},"accessing-benchmark-results","retrieve and analyze Rally benchmark results","Retrieve Rally benchmark results from an external Elasticsearch metrics store. Use to list past races, get a single race's overall (per-task) results, chart a metric's trend across multiple runs, compare two races, or check whether a run converged — e.g. \"show me recent geonames races\", \"what's the service_time trend for nyc_taxis over the last 30 days?\", \"compare these two race-ids\". Applies when datastore.type = elasticsearch is set in ~\u002F.rally\u002Frally.ini.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[868,871,874,875],{"name":869,"slug":870,"type":15},"Analytics","analytics",{"name":872,"slug":873,"type":15},"Data Analysis","data-analysis",{"name":9,"slug":8,"type":15},{"name":876,"slug":877,"type":15},"Performance","performance",2027,"https:\u002F\u002Fgithub.com\u002Felastic\u002Frally","2026-07-12T07:46:38.54144",{"slug":882,"name":882,"fn":883,"description":884,"org":885,"tags":886,"stars":878,"repoUrl":879,"updatedAt":897},"developing-rally","develop and debug Rally source code","Work on Rally's own codebase, not running benchmarks with it. Use when setting up the dev environment, running Rally's tests or linters, navigating its source, debugging Rally's own code, or making changes to Rally itself.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[887,890,891,894],{"name":888,"slug":889,"type":15},"Debugging","debugging",{"name":9,"slug":8,"type":15},{"name":892,"slug":893,"type":15},"Engineering","engineering",{"name":895,"slug":896,"type":15},"Local Development","local-development","2026-07-12T07:46:35.976807",{"slug":899,"name":899,"fn":900,"description":901,"org":902,"tags":903,"stars":878,"repoUrl":879,"updatedAt":910},"running-benchmarks","run Rally benchmarks against Elasticsearch","Run Rally benchmarks (races) against Elasticsearch — an existing\u002Fexternal cluster or a Rally-provisioned distribution — and read the summary report. Use when running a race (any pipeline, track, challenge, target-hosts, or auth) or when interpreting throughput, latency, and service_time results.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[904,905,906,907],{"name":9,"slug":8,"type":15},{"name":795,"slug":796,"type":15},{"name":876,"slug":877,"type":15},{"name":908,"slug":909,"type":15},"Testing","testing","2026-07-12T07:46:37.277964",{"slug":768,"name":768,"fn":769,"description":770,"org":912,"tags":913,"stars":23,"repoUrl":24,"updatedAt":783},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[914,915,916,917],{"name":774,"slug":775,"type":15},{"name":9,"slug":8,"type":15},{"name":778,"slug":779,"type":15},{"name":781,"slug":782,"type":15},{"slug":785,"name":785,"fn":786,"description":787,"org":919,"tags":920,"stars":23,"repoUrl":24,"updatedAt":797},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[921,922,923],{"name":774,"slug":775,"type":15},{"name":792,"slug":793,"type":15},{"name":795,"slug":796,"type":15},{"slug":799,"name":799,"fn":800,"description":801,"org":925,"tags":926,"stars":23,"repoUrl":24,"updatedAt":807},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[927,928,929],{"name":774,"slug":775,"type":15},{"name":795,"slug":796,"type":15},{"name":778,"slug":779,"type":15},{"slug":809,"name":809,"fn":810,"description":811,"org":931,"tags":932,"stars":23,"repoUrl":24,"updatedAt":822},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[933,934,935,936],{"name":774,"slug":775,"type":15},{"name":795,"slug":796,"type":15},{"name":817,"slug":818,"type":15},{"name":820,"slug":821,"type":15},{"slug":824,"name":824,"fn":825,"description":826,"org":938,"tags":939,"stars":23,"repoUrl":24,"updatedAt":832},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[940,941,942],{"name":62,"slug":59,"type":15},{"name":774,"slug":775,"type":15},{"name":795,"slug":796,"type":15},{"slug":834,"name":834,"fn":835,"description":836,"org":944,"tags":945,"stars":23,"repoUrl":24,"updatedAt":847},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[946,947,948,949],{"name":840,"slug":841,"type":15},{"name":795,"slug":796,"type":15},{"name":844,"slug":845,"type":15},{"name":820,"slug":821,"type":15},{"slug":849,"name":849,"fn":850,"description":851,"org":951,"tags":952,"stars":23,"repoUrl":24,"updatedAt":858},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[953,954,955,956],{"name":62,"slug":59,"type":15},{"name":9,"slug":8,"type":15},{"name":795,"slug":796,"type":15},{"name":820,"slug":821,"type":15},{"slug":958,"name":958,"fn":959,"description":960,"org":961,"tags":962,"stars":23,"repoUrl":24,"updatedAt":969},"elasticsearch-authz","manage Elasticsearch RBAC and security roles","Manage Elasticsearch RBAC: native users, roles, role mappings, document- and field-level security. Use when creating users or roles, assigning privileges, or mapping external realms like LDAP\u002FSAML.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[963,964,965,968],{"name":9,"slug":8,"type":15},{"name":795,"slug":796,"type":15},{"name":966,"slug":967,"type":15},"RBAC","rbac",{"name":820,"slug":821,"type":15},"2026-07-12T07:47:36.394177",{"slug":971,"name":971,"fn":972,"description":973,"org":974,"tags":975,"stars":23,"repoUrl":24,"updatedAt":982},"elasticsearch-esql","query Elasticsearch data with ES|QL","Execute ES|QL (Elasticsearch Query Language) queries, use when the user wants to query Elasticsearch data, analyze logs, aggregate metrics, explore data, or create charts and dashboards from ES|QL results.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[976,977,978,979],{"name":869,"slug":870,"type":15},{"name":872,"slug":873,"type":15},{"name":795,"slug":796,"type":15},{"name":980,"slug":981,"type":15},"SQL","sql","2026-07-12T07:47:40.249533",86]