What you can do with Elastic Stack
Every task in plain language. Pick one, and we can help you get access.
1,929 things you can do
Elastic Stack
The Elastic Stack (formerly known as the ELK Stack) is the collection of open-source products from Elastic — Elasticsearch, Logstash, Kibana, and Beats/Elastic Agent — designed for taking data from any source, in any format, and searching, analyzing, and visualizing it in real time. It is widely used for log management, observability, security analytics (SIEM), and increasingly as a vector databas
Agent Infrastructure & Agentic Commerce
Send an A2A protocol task to an agentCreate an Agent Builder agentUpdate an existing agentDelete an agentReplace an agent's access control entriesStart an empty conversationDelete a conversationSet who can see a conversationAttach data to a conversationReplace an attachment's contentDelete a conversation attachmentRename a conversation attachmentRestore a soft-deleted attachmentLink an attachment to its saved originChat with an agent and wait for the answerChat with an agent and stream eventsConnect an MCP client to Agent Builder toolsUninstall a pluginInstall a plugin from a URLCreate a custom skillUpdate a custom skillDelete a custom skillCreate a custom toolRun a tool directlyUpdate a toolDelete a toolGet an agent's A2A discovery cardList Agent Builder agentsGet an agent's token consumption per conversationGet one agent's full definitionView who can access an agentList agent chat conversationsGet a conversation's full historyList a conversation's attachmentsCheck if conversation attachments are staleList installed Agent Builder pluginsGet an installed pluginList agent skillsGet a skillList agent toolsGet a tool's definitionAnalytics & BI Management
Create a visualizationCreate or replace a visualization by IDDelete a visualizationCreate a new dashboardCreate or replace a dashboard by IDDelete a dashboardSearch visualizationsGet a visualizationSearch Kibana dashboardsGet a dashboardArtificial Intelligence Management
Toggle ML upgrade modeSync ML saved objects in the default spaceChange which spaces ML jobs belong toChange which spaces trained models belong toClear a trained model deployment's inference cacheUpload a trained modelDelete an unreferenced trained modelCreate or reassign a trained model aliasDelete a trained model aliasUpload one part of a model definitionUpload an NLP model's vocabularyDeploy a trained model to ML nodesStop a trained model deploymentScale a trained model deploymentCreate a data frame analytics jobDelete a data frame analytics jobStart a data frame analytics jobStop data frame analytics jobsUpdate a data frame analytics jobStream a chat completion from an inference endpointGet a text completion from an inference endpointCreate an inference endpoint without a task typeRun inference against an endpoint by IDDelete an inference endpoint by IDCreate an inference endpoint for a task typeRun inference for a given task typeDelete an inference endpoint of a task typeSet the inference region policyRemove the inference region policyGenerate dense embeddings for inputCreate an AI21 inference endpointCreate an AlibabaCloud AI Search inference endpointCreate an Amazon Bedrock inference endpointCreate an Amazon SageMaker inference endpointCreate an Anthropic inference endpointCreate an Azure AI Studio inference endpointCreate an Azure OpenAI inference endpointCreate a Cohere inference endpointCreate a Contextual AI inference endpointCreate a custom inference endpointCreate a DeepSeek inference endpointCreate an Elasticsearch-hosted model inference endpointCreate an ELSER inference endpointCreate a Fireworks AI inference endpointCreate a Google AI Studio inference endpointCreate a Google Vertex AI inference endpointCreate a Groq inference endpointCreate a Hugging Face inference endpointCreate a JinaAI inference endpointCreate a Llama inference endpointCreate a Mistral inference endpointCreate an Nvidia inference endpointCreate an OpenAI inference endpointCreate an OpenShift AI inference endpointCreate a VoyageAI inference endpointCreate a watsonx inference endpointGenerate sparse embeddings for textStream a text completion incrementallyGenerate text embeddings for inputUpdate an inference endpoint's settingsUpdate a task-typed inference endpointClose an anomaly detection jobCreate an ML calendarDelete an ML calendarDelete a scheduled event from a calendarAdd an anomaly job to a calendarRemove an anomaly job from a calendarCreate a datafeed for an anomaly jobDelete a datafeedPurge expired ML data for one jobPurge expired ML data across all jobsCreate an ML filter listDelete an ML filterForecast future values for an anomaly jobDelete all forecasts from a jobDelete specific forecasts from a jobCreate an anomaly detection jobDelete an anomaly detection jobDelete a model snapshotFlush buffered data in an anomaly jobAdd scheduled events to a calendarOpen an anomaly detection jobSend data to an anomaly jobReset an anomaly job to start overRevert an anomaly job to a snapshotStart a datafeedStop a datafeedUpdate a datafeed's settingsAdd or remove items in an ML filterUpdate an anomaly job's propertiesUpdate a model snapshot's propertiesUpgrade a model snapshot to the latest versionGet ML memory usage across all nodesGet ML memory usage for one nodeGet machine learning defaults and limitsGet trained model configs by IDList all trained modelsGet usage stats for specific trained modelsGet usage stats for all trained modelsRun a trained model on documentsGet data frame analytics job configs by IDEvaluate data frame analytics resultsExplain an unsaved analytics config via GETExplain an unsaved analytics config via POSTExplain an existing analytics job via GETExplain an existing analytics job via POSTList all data frame analytics jobsGet stats for all data frame analytics jobsGet stats for a data frame analytics jobPreview features for a draft config via GETPreview features for a draft config via POSTPreview features of an existing job via GETPreview features of an existing job via POSTLook up an inference endpoint by IDLook up an inference endpoint by task type and IDGet the inference region policyList all inference endpointsList inference endpoints for one task typeRerank documents against a queryGet one ML calendar's configurationGet one ML calendar via POST body pagingGet configuration for specific datafeedsGet one ML filterGet configuration of specific anomaly jobsGet a specific model snapshotGet a specific model snapshot via POST bodyEstimate an anomaly job's model memoryGet the result bucket at a timestampGet a timestamped bucket via POST bodyList result buckets for an anomaly jobList result buckets via POST bodyList scheduled events in a calendarList all ML calendarsList all ML calendars via POST bodyGet one category result for a jobGet one category result via POST bodyList category results for a jobList category results via POST bodyGet stats for specific datafeedsGet stats for all datafeedsList all datafeed configurationsList all ML filtersList influencers behind a job's anomaliesList influencers via POST bodyGet stats for all anomaly jobsGet stats for a specific anomaly jobList all anomaly detection jobsCheck model snapshot upgrade progressList model snapshots for a jobList model snapshots via POST bodyGet overall buckets across several jobsGet overall buckets via POST bodyList anomaly records for a jobList anomaly records via POST bodyPreview an existing datafeed's dataPreview an existing datafeed via POSTPreview an unsaved datafeed configPreview an unsaved datafeed config via POSTCybersecurity Management
Change Entity Store log extraction settingsDelete an entity recordUpdate one entity recordCreate an entity recordUpdate many entity records at onceInstall the Entity StoreLink entities as the same identityDisable an entity resolution ruleEnable an entity resolution ruleUnlink entities from their resolution groupStart stopped entity enginesStop running entity enginesUninstall the Entity StoreSet asset criticality for a single entityRemove an entity's asset criticality recordBulk set asset criticality for many entitiesDelete the Privilege Monitoring EngineDisable the Privilege Monitoring EngineInitialize the Privilege Monitoring EngineRun a Privilege Monitoring cycle nowAdd a privileged user to monitoringBulk upload monitored users from a CSVUpdate a monitored privileged userStop monitoring a privileged userInstall the privileged access detection packageCreate an entity watchlistUpdate an existing watchlistAdd entities to a watchlist from a CSVManually assign entities to a watchlistManually remove entities from a watchlistDelete all Risk Engine data and resourcesConfigure the risk scoring engineRun the risk scoring engine nowList entities in the Entity StoreShow an entity's resolution groupList entity resolution rulesCheck Entity Store statusGet an entity's asset criticality recordList asset criticality recordsCheck Privilege Monitoring engine healthCheck my permissions for Privilege MonitoringList monitored privileged usersCheck privileged access detection package statusGet a watchlist's detailsList all entity watchlistsGet an entity's risk score historyDisaster Recovery & Resilience
Clean up stale data in a snapshot repositoryClone a snapshot within the same repositoryTake a snapshot (PUT form)Take a snapshot (POST form)Delete snapshotsRegister or update a snapshot repository (PUT)Register or update a snapshot repository (POST)Unregister snapshot repositoriesStress-test a snapshot repository's storageRestore a snapshotGet information about snapshotsGet settings of named snapshot repositoriesList all snapshot repositoriesVerify the integrity of a snapshot repositoryGet shard status of all running snapshotsGet status of running snapshots in a repositoryGet detailed status of specific snapshotsCheck a snapshot repository for misconfigurationIT Infrastructure Management
Add or update an extra certificateDelete an extra certificateCreate a new deploymentResync the search index for all deploymentsUpdate a deployment's configurationDelete a deployment and its resourcesRestore a shut-down deploymentResync the search index for one deploymentShut down an entire deploymentReset an APM resource's secret tokenTurn App Search read-only mode on or offMigrate Elasticsearch and Kibana to enable CCRMigrate an Elasticsearch resource to ILMMigrate an Elasticsearch resource to SLMReset the elastic superuser passwordRestart a deployment's Elasticsearch clusterShut down a deployment's Elasticsearch clusterMove Elasticsearch instances to another allocatorAdd or remove Elasticsearch keystore secretsSet certificate-based remote clustersLink another deployment's snapshot repositoryRemove an attached snapshot repositoryResize Elasticsearch data tiersReplace a deployment's tagsUpgrade a deployment's Elastic Stack versionRestore one shut-down resourceCapture a diagnostic bundleStart every instance of a resourceStop every instance of a resourcePut all instances into maintenance modeTake all instances out of maintenance modeOverride size for all instances of a resourceStart specific instances of a resourceStop specific instances of a resourcePut specific instances into maintenance modeTake specific instances out of maintenance modeOverride size for specific instancesCapture an on-demand heap dumpCapture a thread dump from an instanceOverwrite a resource's internal metadataPatch a resource's internal metadataCancel a resource's pending planProxy a PUT request to a deployment resourceProxy a POST request to a deployment resourceProxy a DELETE request to a deployment resourceReplace a resource's user settingsDelete a stateless resource from a deploymentRestart a stateless resource like KibanaShut down a stateless resourceSet the platform API base URLUpdate an existing Config Store optionCreate a new Config Store optionDelete a Config Store optionReindex regional indicesSet an adminconsole's logging levelsReset an adminconsole's logging to defaultsPatch an adminconsole's logging settingsResynchronize all allocators in the indexDelete an allocatorResynchronize one allocatorMove clusters off an allocatorMove clusters of one type off an allocatorSet an allocator's logging levelsReset an allocator's logging to defaultsPatch an allocator's logging settingsPut an allocator into maintenance modeTake an allocator out of maintenance modeReplace all metadata on an allocatorAdd or update one allocator metadata itemRemove one allocator metadata itemOverwrite an allocator's settingsPatch an allocator's settingsCreate a Blueprinter roleUpdate a Blueprinter roleDelete a Blueprinter roleSet all runner blessings for a roleBless one runner for a roleResynchronize all constructors in the indexResynchronize one constructorSet a constructor's logging levelsReset a constructor's logging to defaultsPatch a constructor's logging settingsPut a constructor into maintenance modeTake a constructor out of maintenance modeDelete a coordinator candidatePromote a candidate to coordinatorDemote a coordinatorCreate a filtered proxy group (deprecated)Update a filtered proxy group (deprecated)Delete a filtered proxy group (deprecated)Overwrite proxy settingsPatch proxy settingsResynchronize all runners in the indexDelete a runnerResynchronize one runnerSet a runner's logging levelsReset a runner's logging to defaultsPatch a runner's logging settingsSet the roles a runner holdsAdd or update the platform licenseDelete the platform licenseGet platform informationList extra trusted certificatesRead one extra certificateList all deploymentsSearch deployments with a queryFind deployments eligible as remote clustersGet a deployment's detailsGet a deployment's APM resource infoGet a deployment's App Search resource infoCheck App Search read-only statusGet a deployment's certificate authorityGet a deployment's Elasticsearch resource infoList remote clusters eligible for one clusterList Elasticsearch keystore entriesList certificate-based remote clustersList attached snapshot repositoriesGet Elasticsearch tier sizes and zonesGet a deployment's Enterprise Search resource infoList heap dumps for a deploymentGet a deployment's Integrations Server infoGet a deployment's Kibana resource infoBuild a request to switch deployment templateGet a deployment's tagsCheck upgrade readiness for a deploymentGet a single plan activity attemptDownload an instance's heap dumpShowing 400 of 1,929. Search above to find the rest.