Find the cause behind Elasticsearch anomalies.
What it does
Identifies likely incident causes, explains anomaly scores, diagnoses job failures, and manages Elasticsearch anomaly-detection jobs.
When to use it
Use for incident investigations, anomaly-score explanations, stopped datafeeds, memory-limit problems, or anomaly-detection job configuration.
How to use it
Give it an anomaly or job problem; it investigates and returns findings and recommended actions, interpreting supplied evidence without fetching it again.
Uses
Good to know
- cannot be undone: Elasticsearch
What you need · 2
Live Elasticsearch operations require the elastic CLI; if it is missing, explain its necessity rather than using direct HTTP or other workarounds.
Live operations require Elasticsearch 8.x–9.x or Elastic Cloud Serverless with ML anomaly detection.
Access · 1
This skill
Elasticsearch
Starts and stops anomaly analysis
Changes anomaly jobs and datafeeds (irreversible)