security-generate-security-sample-data

Fill Elastic Security with realistic demo activity.

security testing

What it does

Generates sample security events, attack scenarios, and synthetic alerts for Elastic Security demonstrations and testing.

When to use it

Use when demonstrating Elastic Security, populating dashboards, testing detection rules, or preparing a proof of concept.

Ask it to generate, stream, or clean up security sample data; it updates the configured Elastic services and reports results.

This skill

Elasticsearch

Write

Indexes and deletes sample data (irreversible)

Kibana

Write

Creates a Kibana investigation case

sample-data.js --continuous

Execute

An indefinite event stream

Requires Node.js 22 or newer.

The Elasticsearch client package must be available to the scripts.

Requires network access to a configured Elasticsearch service.

Reads an Elasticsearch API key from the environment as one authentication option.