Skill UI

Automates elasticsearch index manager activities inside advanced DevOps workflows, offering best-practice guidance, code/configuration generation, and validation for kubernetes, terraform, ci/cd, monitoring, and IaC needs.

This guide details the deployment and configuration of MISP (Malware Information Sharing Platform) using Docker. It demonstrates how to aggregate, correlate, and distribute threat intelligence from diverse sources like abuse.ch and AlienVault OTX. Learn automated feed synchronization, STIX/TAXII integration, and connecting the platform to SIEM and SOAR tools like Splunk and Elasticsearch for centralized IOC management.

This skill implements User and Entity Behavior Analytics (UEBA) using Elasticsearch/OpenSearch. It goes beyond static rules to build behavioral baselines (e.g., login times, data volume) for users and entities. By calculating anomaly scores and performing peer group analysis, it detects suspicious activities such as data exfiltration, privilege abuse, and unauthorized access, allowing organizations to proactively identify high-risk insider threats.

This skill guides the setup of a robust, centralized logging pipeline using Fluent Bit and Fluentd. It covers collecting logs from diverse sources (syslog, files, applications), routing, filtering, and enriching them before sending them to destinations like Elasticsearch, S3, or Splunk. Ideal for centralizing observability and building secure logging architectures across distributed infrastructure.

A comprehensive toolkit for building robust, structured logging pipelines in Golang. It provides advanced modules for handler composition (slog-multi), throughput control (slog-sampling), attribute transformation (slog-formatter), and integrates with major backend logging sinks (e.g., Sentry, Loki, Datadog, Elasticsearch). Use this when building complex Go applications that require deterministic log routing, sampling, and data sanitization.

A comprehensive guide for migrating search functionality from alternatives like Elasticsearch, Typesense, or Meilisearch to Algolia. It details the necessary steps, including data migration, query translation (e.g., ES to Algolia), and implementing a zero-downtime swap using the Strangler Fig pattern.

A comprehensive technical guide detailing the process of migrating large-scale enterprise search platforms from sources like Elasticsearch or Algolia to Glean. It covers data export, schema transformation, using bulk indexing APIs, creating data sources, and validating search quality for smooth, large-scale deployment.

Deploy and manage the ELK Stack (Elasticsearch, Logstash, Kibana) for centralized log aggregation, analysis, and visualization. Includes Docker Compose setup, index templates, lifecycle management, Logstash pipelines, Filebeat configuration, and Elasticsearch queries.

Guides authorized security testers through identifying and exploiting NoSQL injection vulnerabilities in MongoDB, Redis, and Elasticsearch, including auth bypass, blind injection, data extraction, and automation with nosqlmap.