菜单
Master index of all Moltler/elastic-script capabilities. Use first when uncertain which skill applies, when the user asks "what can you do", or to find the right skill for a task involving Elasticsearch, observability, security, ML, or integrations.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Manage Elasticsearch Streams for data routing, field extraction, and retention. Use when working with data streams, partitioning data into child streams, extracting fields from logs, configuring data lifecycle, or routing observability data.
Query metrics using PromQL syntax in ES|QL. Use when analyzing Prometheus-style metrics, calculating rates, histograms, quantiles, or when the user mentions PromQL, Prometheus, rate(), sum(), histogram_quantile(), or metric queries.
Manage alerts, notifications, SLOs, and incident response. Use when creating alert rules, viewing active alerts, sending Slack or PagerDuty notifications, managing SLOs, or automating incident response.
Analyze logs, metrics, traces, and APM data. Use when troubleshooting issues, finding errors, analyzing performance, investigating incidents, or checking error rates and latency.
Quick start guide for Elasticsearch capabilities. Use when the user is new, asks "what can you do with Elasticsearch", wants to see available functions, or needs help getting oriented with Moltler skills.
Integrate with external services including AWS, Kubernetes, CI/CD, Terraform, and webhooks. Use when triggering external actions, automating cross-system workflows, or syncing data with external services.
| name | discovering-skills |
| description | Master index of all Moltler/elastic-script capabilities. Use first when uncertain which skill applies, when the user asks "what can you do", or to find the right skill for a task involving Elasticsearch, observability, security, ML, or integrations. |
Quick reference for selecting the right skill.
| Task | Skill |
|---|---|
| Index/Get/Update/Delete documents | managing-documents |
| Search, query, aggregate data | searching-data |
| PromQL metrics (rate, histograms, percentiles) | querying-metrics-promql |
| Data streams, routing, field extraction | managing-streams |
| Cluster health, nodes, tasks | managing-clusters |
| Logs, metrics, traces, APM | analyzing-observability |
| Users, roles, API keys, security events | managing-security |
| ML models, embeddings, LLMs | using-ml-inference |
| ILM, snapshots, pipelines | managing-data-lifecycle |
| Alerts, notifications, SLOs | alerting-and-responding |
| AWS, K8s, CI/CD, webhooks | integrating-services |
# Direct API
curl -X POST "localhost:9200/_escript" \
-H "Content-Type: application/json" \
-d '{"query": "ES_CLUSTER_HEALTH()"}'
# Pre-built skills
RUN SKILL cluster_health_check();
RUN SKILL get_recent_errors(60, 50);
| Variable | Purpose |
|---|---|
ES_URL | Elasticsearch URL |
ES_USERNAME / ES_PASSWORD | Auth |
ES_API_KEY | Alternative auth |
KIBANA_URL | Kibana API access |
OPENAI_API_KEY | LLM functions |
SLACK_TOKEN | Slack integration |
PAGERDUTY_API_KEY | PagerDuty integration |