القائمة
Create and manage Kibana Dashboards and Lens visualizations. Use when you need to define dashboards and visualizations declaratively, version control them, or automate their deployment.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Enable, configure, and query Elasticsearch security audit logs. Use when the task involves audit logging setup, event filtering, or investigating security incidents like failed logins.
Authenticate to Elasticsearch using native, file-based, LDAP/AD, SAML, OIDC, Kerberos, JWT, or certificate realms. Use when connecting with credentials, choosing a realm, or managing API keys.
Manage Elasticsearch RBAC: native users, roles, role mappings, document- and field-level security. Use when creating users or roles, assigning privileges, or mapping external realms like LDAP/SAML.
Execute ES|QL (Elasticsearch Query Language) queries, use when the user wants to query Elasticsearch data, analyze logs, aggregate metrics, explore data, or create charts and dashboards from ES|QL results.
Ingest and transform data files (CSV/JSON/Parquet/Arrow IPC) into Elasticsearch with stream processing and custom transforms. Use when loading files or batch importing data.
Diagnose and resolve Elasticsearch security errors: 401/403 failures, TLS problems, expired API keys, role mapping mismatches, and Kibana login issues. Use when the user reports a security error.
| name | kibana-dashboards |
| description | Create and manage Kibana Dashboards and Lens visualizations. Use when you need to define dashboards and visualizations declaratively, version control them, or automate their deployment. |
| metadata | {"author":"elastic","version":"0.1.0","source":"elastic/agent-skills//skills/kibana/kibana-dashboards"} |
Declarative, Git-friendly format for defining dashboards and visualizations. Version Requirement: Kibana 9.4+ (SNAPSHOT).
export KIBANA_URL="https://your-kibana:5601"
export KIBANA_API_KEY="base64encodedapikey"
Test: node scripts/kibana-dashboards.js test
node scripts/kibana-dashboards.js dashboard get <id>
echo '<json>' | node scripts/kibana-dashboards.js dashboard create -
echo '<json>' | node scripts/kibana-dashboards.js dashboard update <id> -
node scripts/kibana-dashboards.js dashboard delete <id>
node scripts/kibana-dashboards.js lens list
node scripts/kibana-dashboards.js lens get <id>
{
"title": "My Dashboard",
"panels": [
{
"type": "lens",
"uid": "metric-panel",
"grid": { "x": 0, "y": 0, "w": 12, "h": 6 },
"config": {
"attributes": {
"title": "",
"type": "metric",
"dataset": { "type": "esql", "query": "FROM logs | STATS total = COUNT(*)" },
"metrics": [{ "type": "primary", "operation": "value", "column": "total" }]
}
}
}
],
"time_range": { "from": "now-24h", "to": "now" }
}
48-column, infinite-row grid. Target 8-12 panels above the fold.
| Width | Columns | Use Case |
|---|---|---|
| Full | 48 | Wide time series, tables |
| Half | 24 | Primary charts |
| Quarter | 12 | KPI metrics |
| Type | Description |
|---|---|
metric | Single metric value display |
xy | Line, area, bar charts |
gauge | Gauge visualizations |
heatmap | Heatmap charts |
datatable | Data tables |
pie, donut, treemap, mosaic, waffle | Partition charts |
{ operation: 'value', column: 'col' }.Use BUCKET(@timestamp, 75, ?_tstart, ?_tend) for auto-scaling time buckets.
config.attributes over config.savedObjectId.node scripts/kibana-dashboards.js test.