Kibana

Tool to delete an action in Kibana. Use when you need to remove a specific action by its ID, optionally within a specific space.

Tool to delete an alerting rule in Kibana. Use when you need to remove a specific alerting rule by its ID.

Tool to delete a connector in Kibana. Use when you need to remove an existing connector.

Tool to delete a specific output configuration in Kibana Fleet. Use when you need to remove an existing output by its ID.

Tool to delete a specific Fleet proxy configuration by its ID. Use when you need to remove an existing proxy setup.

Deletes a list. Use when you want to delete a list by its ID.

Tool to delete a saved Osquery query by its ID. Use when you need to remove a specific Osquery saved query.

Tool to delete a saved object in Kibana. Use when you need to remove a specific saved object like a visualization or dashboard.

Tool to find and/or aggregate detection alerts in Kibana. Use this to retrieve a list of alerts, optionally filtering them with a query and performing aggregations.

Tool to fetch the list of available action types (e.g., '.slack', '.email', '.webhook') in Kibana. Use this to discover the 'actionTypeId' needed when creating a new action.

Tool to retrieve a list of alerting rules in Kibana. Use when you need to get a paginated set of rules based on specified conditions.

Tool to retrieve available alert types in Kibana. Use when you need to get a list of all possible alert types and their metadata.

Tool to retrieve a list of cases in Kibana. Use when you need to find or list existing security or operational cases, potentially filtering by various attributes like status, assignee, or severity.

Tool to retrieve a list of all connectors in Kibana. Use this tool when you need to get information about available connectors.

Tool to retrieve a list of data views available in Kibana. Use when you need to get a list of available data views, optionally filtering by a name pattern.

Retrieves a list of detection engine rules based on specified criteria. Use this tool to find detection rules.

Tool to retrieve all items from an endpoint exception list. Use when you need to get a list of endpoint exceptions, for example, to check existing exceptions before adding a new one.

Retrieves the list of engines from the entity store.

Tool to list entity records in the entity store with support for paging, sorting, and filtering. Use when you need to retrieve a list of entities such as users, hosts, or services.

Tool to retrieve the status of the entity store in Kibana. Use this to check if the entity store is operational.

Fetches a list of agent policies in Fleet. Use when you need to retrieve agent policy configurations.

Tool to retrieve the available versions for Fleet agents. Use when you need to get a list of all available Elastic Agent versions.

Tool to check if the Fleet agents are set up. Use when you need to verify the Fleet agent setup status.

Tool to check the permissions for the Fleet API. Use when you need to verify if the current user has the necessary privileges for Fleet operations.

Retrieves the list of data streams in Fleet.

Tool to retrieve details of a specific enrollment API key by its ID. Use when you have the ID of an enrollment API key and need its details.

Tool to fetch a list of enrollment API keys. Use when you need to retrieve existing enrollment tokens for Kibana Fleet.

Tool to fetch the list of categories in the Elastic Package Manager. Use when you need to retrieve available package categories.

Tool to retrieve the list of data streams in the Elastic Package Manager. Use when you need to get a list of available data streams, optionally filtering by type, dataset, or categorization.

Tool to fetch details of a specific package and version in the Elastic Package Manager (EPM). Use when you need to get information about a particular EPM package, such as its title, description, or type.

Tool to retrieve a specific file from a package in the Elastic Package Manager. Use when you need to inspect the contents of a package file.

Tool to fetch the list of available packages in the Elastic Package Manager. Use when you need to find available integrations or their details.

Tool to retrieve the list of installed packages in the Elastic Package Manager. Use this when you need to check which packages are currently installed in Fleet.

Tool to fetch a limited list of packages from the Elastic Package Manager. Use when you need to retrieve a list of available EPM packages with minimal details.

Tool to retrieve statistics for a specific package in the Elastic Package Manager. Use when you need to get EPM package statistics.

Tool to retrieve a list of all package policies (Agent & EPM), providing their IDs and associated details. Use when you need to get an overview of existing package policies.

Tool to fetch details of a specific Fleet server host by its item ID. Use when you need to get information about a particular Fleet Server host.

Tool to retrieve the list of Fleet Server hosts. Use when you need to get information about the available Fleet Server hosts.

Tool to fetch information about indices managed by Kibana's Index Management feature. It queries the underlying Elasticsearch /_cat/indices API to retrieve index details. Use when you need to list or get details about one or more indices in the cluster.

Tool to retrieve statistics for nodes in an Elasticsearch cluster, often visualized in Kibana. Use when you need to monitor node health, performance, or resource usage. This action calls the Elasticsearch Nodes Stats API.

Tool to retrieve a list of reporting jobs in Kibana. Use when you need to see pending or completed reports. This uses an internal API endpoint, which might be subject to change without notice.

Tool to retrieve a list of saved objects in Kibana based on specified criteria. Use when you need to find dashboards, visualizations, index patterns, or other saved entities.

Tool to get the current status of Kibana. Use when you need to check if Kibana is healthy, monitor its state, or get information about the Kibana instance including version, UUID, and metrics.

Tool to create a new alerting rule in Kibana. Use when you need to define a new condition that, when met, triggers an alert and potentially executes predefined actions.

Tool to create a new case in Kibana. Use when you need to open and track issues, incidents, or investigations. You can assign users, set severity levels, add tags, and configure external connectors for integration with ITSM systems.

Tool to create a new connector in Kibana. Use when you need to integrate Kibana with an external service.

Tool to create a new dashboard in Kibana. Use when you need to create a dashboard to visualize data. Dashboards can contain visualizations, saved searches, and other embeddable objects.

Tool to create a new data view (index pattern) in Kibana. Use when you need to define which Elasticsearch indices to query and analyze in Kibana. Data views determine which fields are available in Discover, Visualize, and other Kibana apps.

Tool to create or update a saved object in Kibana. Use when you need to programmatically manage Kibana dashboards, visualizations, index patterns, etc.