cluster-onboarding
Guide users from zero to a working Elastic cluster — Cloud or on-prem, connection config, first queries, and next steps.
用 Codex 或 Claude 帮你安装 复制这段 Prompt,粘贴到 Codex、Claude 或其他助手里,让它检查 Skill 页面并帮你完成安装。
菜单
Guide users from zero to a working Elastic cluster — Cloud or on-prem, connection config, first queries, and next steps.
用 Codex 或 Claude 帮你安装 复制这段 Prompt,粘贴到 Codex、Claude 或其他助手里,让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Debug and analyze LLM eval runs — view traces, compare runs, investigate failures, track costs. Use when debugging @kbn/evals failures, comparing eval runs, or analyzing LLM performance.
Start your security session with a personalized briefing — attacks, alerts, cases, rules, threat intel. Use as the first thing when starting security work.
Interactive guide for creating an APM service overview dashboard — discovers service data, presents metrics, and creates a tailored dashboard.
Interactive guide for creating SLOs from discovered APM and metric data — identifies candidates, lets user configure targets, and creates SLOs.
Create, configure, and manage Elasticsearch indices — mappings, settings, templates, data streams, and lifecycle policies.
Interactive workflow for investigating and triaging security alerts — from alert review through enrichment, investigation, and resolution.
| name | cluster-onboarding |
| description | Guide users from zero to a working Elastic cluster — Cloud or on-prem, connection config, first queries, and next steps. |
Help users go from nothing to a fully connected Elastic cluster in under 5 minutes.
Use when the user asks to:
Also activates on keywords: "onboarding", "getting started", "new cluster", "connect to Elastic"
Do NOT use when:
o11y-full-setup)security-full-setup)get_deployment_guide — Cloud vs on-prem setup instructionsget_connection_config — Language-specific connection snippetscloud_api — Elastic Cloud project managementelasticsearch_api — Verify cluster connectivityesql_query — First-query validationget_cluster_context — Cluster orientation after connectionAsk once: "Do you prefer Cloud (managed, no servers) or on-prem (Docker)?"
get_deployment_guide with preference: "cloud"cloud_api with POST /api/v1/serverless/projects/elasticsearchcloud_apiget_connection_config for their preferred languageget_deployment_guide with preference: "on_prem"docker compose up -d from the provided templateget_connection_config with http://localhost:9200Call elasticsearch_api with GET / to confirm the cluster is reachable.
Run esql_query with SHOW INFO to display cluster version and validate everything works.
Call get_cluster_context to understand what's already in the cluster.
Based on the user's use case, suggest:
o11y-full-setup skillsecurity-full-setup skilldiscover_data toolInteractive Dashboard: When using Claude Desktop or other ext-apps hosts,
cluster_overviewrenders an interactive cluster health dashboard with node topology, shard allocation, and real-time metrics. In Cursor/CLI, it returns markdown.
o11y-full-setup — After onboarding, set up monitoringsecurity-full-setup — After onboarding, set up securityagent-builder-skill-builder — Build custom tools on top of the cluster