Generated banner for Elasticsearch Onboarding
Generated logo for Elasticsearch Onboarding

Elasticsearch Onboarding

ElasticOfficialCreated by elastic

  • Skill
  • Workflow
  • Software development
  • Apache-2.0
  • Low risk

From the author

Help developers new to Elasticsearch get from zero to a working search experience. Guide them through understanding their intent, mapping their data, and building a search experience with best practices baked in. Use this when the user shows intent to build search-related functionality, asks about Elasticsearch-related concepts for their use case, or expresses the need for help getting started with Elasticsearch.
— the description by elastic

AutoGineer summary

Written by AutoGineer from the skill’s own files, not by the author

This skill acts as an Elasticsearch solutions architect, guiding developers from initial intent to a production-ready search implementation. It follows a structured playbook to understand user requirements, inspect existing cluster data, and provide best-practice recommendations for mapping and search architecture. The skill emphasizes an educational approach, requiring explicit confirmation before performing any write operations on the cluster.

What it does

  • Guides developers through the end-to-end process of building a search experience.
  • Automatically inspects cluster state, including versions, indices, and mappings.
  • Provides best-practice advice on data modeling and search relevance.
  • Generates tested, production-ready code snippets for Elasticsearch operations.
  • Requires explicit developer approval before executing any cluster-mutating write operations.
  • Translates high-level search goals into specific API calls using the elastic CLI.

When to use it

  • When a developer is new to Elasticsearch and needs help getting started.
  • When a user expresses intent to build search features like e-commerce catalogs or RAG pipelines.
  • When a developer needs guidance on mapping data or optimizing search relevance.
  • When a user asks about specific Elasticsearch concepts like kNN, ELSER, or ES|QL.

Advantages

  • Ensures best practices are applied from the start, reducing the need for future reindexing.
  • Maintains an educational focus by explaining decisions and requiring confirmation for changes.
  • Reduces friction by automatically gathering cluster context before making recommendations.
  • Provides a safe environment for experimentation with clear separation between reads and writes.

Usage examples

“I want to build a search experience for my e-commerce site.”
The agent will initiate the onboarding playbook, ask about the product catalog structure, and begin inspecting the current cluster to propose a mapping strategy.
“How do I build a RAG pipeline with Elasticsearch?”
The agent will guide the user through setting up embeddings, mapping vector fields, and configuring the search pipeline for semantic retrieval.

Install

  1. Download the skill as a ZIP:

    https://autogineer.com/agent-skills/elastic/elasticsearch-onboarding/download
  2. Unzip it into the cross-client skills folder of your project:

    mkdir -p .agents/skills && unzip elasticsearch-onboarding.zip -d .agents/skills

Documentation by elastic

Elastic Developer Guide

You are an Elasticsearch solutions architect working alongside the developer. Your job is to guide developers from "I want search" to a working search experience — understanding their intent, recommending the right approach, and generating tested, production-ready code. Use the conversation playbook in references/elasticsearch-onboarding-playbook.md to structure the conversation. Always ask one question at a time, listen for signals, and adapt your recommendations to their specific use case and data shape.

<!-- begin-partial: preamble -->

Environment Configuration

This skill executes Elasticsearch operations through the elastic CLI. If the elastic CLI is not installed, tell the user what it is needed for. Do not guess credentials, call the HTTP API directly, or attempt other workarounds.

This skill references operations in HTTP-shorthand form (e.g., GET /, GET /_cat/indices, GET /{index}/_mapping, GET /{index}/_settings/index.mode, POST /_query). The Operations table at the end of this document maps each shorthand to the equivalent elastic CLI command — always use the CLI rather than calling the HTTP API directly.

<!-- end-partial: preamble -->

Cluster Access

Cluster interaction splits into reads and writes. Load references/cluster-access/cluster-access.md for the full protocol.

Reads happen automatically. Ground every recommendation in the developer's actual cluster rather than asking them to describe it. Detect the version with GET /, list indices with GET /_cat/indices, read field types with GET /{index}/_mapping, check volume with GET /{index}/_count, and validate relevance by running real queries with POST /{index}/_search or POST /_query.

Writes require confirmation. Before PUT /{index}, POST /_aliases, POST /_bulk, PUT /_ingest/pipeline/{name}, or PUT /_synonyms/{id}, show the developer the exact call you intend to make and wait for approval. Never mutate the cluster silently — this is an educational experience, and the developer needs to see what is being created.

Don't volunteer connection state; do answer connection questions. Two different situations, and the distinction matters:

  • Unprompted — never open on your own connection or credential status. A cluster you cannot reach is not the developer's first problem; understanding what they want to build is. Lead with the use-case question, and mention a failed read only at the moment it actually blocks you, in one sentence attached to the question you were already asking. Onboarding works fine before any cluster exists.

  • When the developer explicitly asks how to connect their IDE, editor, or chat client — that request is the task. Answer it fully and concretely from the appendix in references/cluster-access/cluster-access.md, then ask the use-case question at the end. Deflecting a direct setup question into discovery is a failure, not restraint.

Examples

Example user intents that should trigger this skill:

  • "I want to build a search experience for my e-commerce site"

  • "How do I get started with Elasticsearch?"

  • "What are the best practices for building a search experience?"

  • "Can you help me understand how to model my data for search?"

  • "How do I build a vector database?"

  • "I want to build a RAG pipeline with Elasticsearch"

  • "How do I use EIS for embeddings?"

  • "How do I connect an LLM to Elasticsearch?"

  • "How do I do kNN search in Elasticsearch?"

  • "How do I use ELSER for semantic search?"

  • "How do I set up the Elasticsearch MCP?"

  • "How do I combine keyword and vector results with RRF?"

  • "I want NLP-powered search"

  • "What's the difference between BM25 and vector search?"

  • "Can I use ES|QL to query my data?"

Guidelines

  • Ask one question at a time, then wait.

  • Don't lead with tooling, connection, or credential setup unprompted — lead with what the developer is building. But if they directly ask how to connect, answer that question fully before moving on.

  • Only generate code once the user confirms the approach and the mapping.

  • Use the Synonyms API for synonym management, not a custom-built solution.

  • Always use a versioned index name + alias (e.g. products_v1 + products_current) and explain why.

  • Explain decisions briefly, assume the user does not understand Elasticsearch yet.

  • Always go through the mapping walkthrough — it's the most expensive thing to change later.

  • Ask what programming language the user wants to use, don't assume.

  • Avoid generating code with deprecated APIs. If you must use a deprecated API for some reason, explain why and warn about future compatibility issues.

Operations

HTTP API (shorthand)elastic CLI command
GET /elastic es info
GET /_cat/indiceselastic es cat indices --index '<pattern>'
GET /{index}/_mappingelastic es indices get-mapping --index '<index>'
GET /{index}/_countelastic es count --index '<index>'
POST /{index}/_searchelastic es search --index '<index>' --input-file '<search-body.json>'
POST /_queryelastic es esql query --format tsv --query "<esql>"
PUT /{index}elastic es indices create --index '<index>' --mappings '<json>' --aliases '<json>'
POST /_aliaseselastic es indices update-aliases --actions '<json>'
POST /_bulkelastic es bulk --index '<index>' --input-file '<ndjson-path>'
PUT /_ingest/pipeline/{name}elastic es ingest put-pipeline --id '<name>' --input-file '<json-path>'
PUT /_synonyms/{id}elastic es synonyms put-synonym --id '<id>' --synonyms-set '<json>'

Files

references/search-ui/search-ui.md


name: search-ui description: Guide for building search frontends with Elastic's Search UI library. Use when a developer has a working Elasticsearch backend and needs a search page — results, facets, autocomplete, pagination. Connects to any recipe that produces a search API.

Search UI Frontend Guide

Guide developers through building a search frontend with Elastic's Search UI library (@elastic/search-ui). Use this guide after a backend recipe (keyword-search, vector-hybrid-search, catalog-ecommerce) has produced a working index and API, and the developer asks "now how do I build the search page?"

1. When to Use This Guide

Apply this guide when the developer signals:

  • "How do I build the search page?" — they have an Elasticsearch index/API and need a frontend

  • "I need a search bar with filters" — they want pre-built UI components, not raw HTML

  • "I want faceted search" — sidebar filters with counts, like any e-commerce site

  • "I need autocomplete" — suggestions as the user types

  • "What's the fastest way to get a search UI?" — they want a library, not to build from scratch

Do not use this guide when:

  • The developer is building an AI pipeline where code (not humans) consumes search results — point them to vector-hybrid-search

  • They only need a backend API with no frontend — they're done after the backend recipe

  • They want to use a completely different frontend framework (Vue, Angular, Svelte) without React — Search UI's pre-built components are React-only, though the headless core works with any framework. Explain the tradeoff: with React they get pre-built components out of the box; without React they get state management and query orchestration but must build their own UI components

2. Prerequisites

Before starting this guide, the developer should have:

  1. A working Elasticsearch index with data (from any backend recipe)

  2. Connection details — one of:

    • Cloud ID (Elastic Cloud Hosted)

    • Elasticsearch project endpoint URL (Elastic Cloud Serverless)

    • Host URL (self-managed)

  3. An API key with at least read access to the index

  4. A React project — Next.js is also supported with a dedicated integration pattern.

3. Installation

npm install @elastic/search-ui @elastic/react-search-ui @elastic/react-search-ui-views @elastic/search-ui-elasticsearch-connector

Four packages:

  • @elastic/search-ui — headless core (state, actions, query orchestration)

  • @elastic/react-search-ui — React bindings (SearchProvider, useSearch hook)

  • @elastic/react-search-ui-views — pre-built React components with default styling

  • @elastic/search-ui-elasticsearch-connector — connects to Elasticsearch directly

4. Connector Setup

The connector is how Search UI talks to Elasticsearch. Setup depends on the deployment model.

Development: Direct Connection

For local development and prototyping, connect directly. Never use this in production — it exposes API credentials to the browser.

import ElasticsearchAPIConnector from "@elastic/search-ui-elasticsearch-connector";

const connector = new ElasticsearchAPIConnector({
  // Elastic Cloud Hosted — use cloud.id:
  cloud: { id: "<your-cloud-id>" },
  // Elastic Cloud Serverless or self-managed — use host instead of cloud:
  // host: "https://<your-elasticsearch-endpoint>",
  index: "<your-index-name>",
  apiKey: "<read-only-api-key>",
});

CORS for direct browser connections: If connecting directly from the browser (development only), Elasticsearch needs CORS headers. In Elastic Cloud Hosted, go to deployment settings → Edit user settings and add:

http.cors.allow-origin: "*"
http.cors.enabled: true
http.cors.allow-credentials: true
http.cors.allow-methods: OPTIONS, HEAD, GET, POST, PUT, DELETE
http.cors.allow-headers:
  X-Requested-With, X-Auth-Token, Content-Type, Content-Length, Authorization, Access-Control-Allow-Headers, Accept,
  x-elastic-client-meta

Serverless projects handle CORS automatically. Self-managed clusters need the same settings in elasticsearch.yml.

Production: Proxy Connector

In production, proxy all requests through your backend. This avoids exposing credentials, lets you add caching, logging, and access control.

Frontend (browser):

import { ApiProxyConnector } from "@elastic/search-ui-elasticsearch-connector/api-proxy";

const connector = new ApiProxyConnector({
  basePath: "/api",
});

Backend (Express server):

import express from "express";
import ElasticsearchAPIConnector from "@elastic/search-ui-elasticsearch-connector";

const app = express();
app.use(express.json());

const connector = new ElasticsearchAPIConnector({
  host: "<your-elasticsearch-endpoint>",
  index: "<your-index-name>",
  apiKey: "<your-api-key>",
});

app.post("/api/search", async (req, res) => {
  const { state, queryConfig } = req.body;
  const response = await connector.onSearch(state, queryConfig);
  res.json(response);
});

app.post("/api/autocomplete", async (req, res) => {
  const { state, queryConfig } = req.body;
  const response = await connector.onAutocomplete(state, queryConfig);
  res.json(response);
});

app.listen(3001);

This pattern works identically for Hosted, Serverless, and self-managed — the only difference is how you configure the server-side connector (cloud.id vs host).

For Next.js, use API routes instead of a separate Express server — same connector on the server, same ApiProxyConnector on the client.

5. Configuration

The configuration object tells Search UI which fields to search, which fields to show, and how to build facets. This must match the index mapping created in the backend recipe.

Mapping Config to Your Index

The configuration fields map directly to the Elasticsearch index mapping. Here's how to translate:

Index MappingSearch UI Config
text fields you want searchablesearch_fields with optional weight
Fields to display in resultsresult_fields with raw or snippet
keyword fields for filteringfacets with type: "value"
Numeric fields for range filtersfacets with type: "range" and ranges array
geo_point fieldsfacets with type: "range", center, and unit
completion or search_as_you_type fieldsautocompleteQuery.suggestions
Example: Product Search Config

This matches the index mapping from the catalog-ecommerce recipe:

const config = {
  apiConnector: connector,
  alwaysSearchOnInitialLoad: true,
  searchQuery: {
    search_fields: {
      title: { weight: 3 },
      description: {},
      brand: { weight: 2 },
      tags: {},
    },
    result_fields: {
      title: { snippet: { size: 100, fallback: true } },
      description: { snippet: { size: 200, fallback: true } },
      brand: { raw: {} },
      price: { raw: {} },
      rating: { raw: {} },
      image_url: { raw: {} },
      category: { raw: {} },
    },
    fuzziness: true,
    disjunctiveFacets: ["category", "brand"],
    facets: {
      category: { type: "value", size: 20 },
      brand: { type: "value", size: 20 },
      price: {
        type: "range",
        ranges: [
          { from: 0, to: 25, name: "Under $25" },
          { from: 25, to: 50, name: "$25–$50" },
          { from: 50, to: 100, name: "$50–$100" },
          { from: 100, to: 200, name: "$100–$200" },
          { from: 200, name: "$200+" },
        ],
      },
      rating: {
        type: "range",
        ranges: [
          { from: 4, name: "4+ stars" },
          { from: 3, to: 4, name: "3–4 stars" },
          { from: 0, to: 3, name: "Under 3 stars" },
        ],
      },
    },
  },
  autocompleteQuery: {
    results: {
      resultsPerPage: 5,
      search_fields: {
        "title.autocomplete": { weight: 3 },
      },
      result_fields: {
        title: { snippet: { size: 100, fallback: true } },
        price: { raw: {} },
        image_url: { raw: {} },
      },
    },
    suggestions: {
      types: {
        documents: { fields: ["title_suggest"] },
      },
      size: 4,
    },
  },
};

disjunctiveFacets — list fields here if you want facet counts to stay visible after a selection. Without this, selecting "Electronics" as a category would hide all other category options. With it, the user can see counts for other categories and add more selections.

fuzziness: true — enables typo tolerance. Internally maps to Elasticsearch's fuzziness: "AUTO".

Autocomplete Field Requirements

Autocomplete has two modes that require different field types in the mapping:

ModeWhat It DoesRequired Mapping
resultsShows matching documents as you typesearch_as_you_type field (best) or any text field
suggestionsShows suggested query termscompletion field

If the backend recipe already created completion or search_as_you_type fields, reference them here. If not, the developer will need to update the mapping and reindex.

6. Components

Minimal Working Search Page
import React from "react";
import {
  SearchProvider,
  SearchBox,
  Results,
  PagingInfo,
  ResultsPerPage,
  Paging,
  Facet,
  Sorting,
  ErrorBoundary,
} from "@elastic/react-search-ui";
import { Layout } from "@elastic/react-search-ui-views";
import "@elastic/react-search-ui-views/lib/styles/styles.css";

export default function SearchPage() {
  return (
    <SearchProvider config={config}>
      <div className="App">
        <ErrorBoundary>
          <Layout
            header={
              <SearchBox
                autocompleteResults={{
                  titleField: "title",
                  urlField: "url",
                  sectionTitle: "Results",
                }}
                autocompleteSuggestions={true}
                debounceLength={300}
              />
            }
            sideContent={
              <div>
                <Facet field="category" label="Category" />
                <Facet field="brand" label="Brand" />
                <Facet field="price" label="Price" />
                <Facet field="rating" label="Rating" />
              </div>
            }
            bodyContent={<Results shouldTrackClickThrough />}
            bodyHeader={
              <>
                <PagingInfo />
                <ResultsPerPage options={[10, 20, 50]} />
                <Sorting
                  label="Sort by"
                  sortOptions={[
                    { name: "Relevance", value: [] },
                    { name: "Price: Low to High", value: [{ field: "price", direction: "asc" }] },
                    { name: "Price: High to Low", value: [{ field: "price", direction: "desc" }] },
                    { name: "Rating", value: [{ field: "rating", direction: "desc" }] },
                  ]}
                />
              </>
            }
            bodyFooter={<Paging />}
          />
        </ErrorBoundary>
      </div>
    </SearchProvider>
  );
}
Available Components
ComponentPurposeKey Props
SearchBoxSearch input with autocompleteautocompleteResults, autocompleteSuggestions, searchAsYouType, debounceLength
ResultsRender search result listshouldTrackClickThrough, custom view
ResultSingle result cardtitleField, urlField, custom view
FacetSidebar filterfield, label, filterType ("any", "all", "none")
SortingSort dropdownsortOptions array
PagingPage navigation-
PagingInfo"Showing 1-10 of 250 results"-
ResultsPerPageResults per page selectoroptions array
ErrorBoundaryCatches and displays errors-
LayoutPre-built page layoutheader, sideContent, bodyContent, bodyHeader, bodyFooter
Customizing Result Display

Pass a custom resultView function to <Results> to render product cards, images, or any layout. The function receives the full result object — access fields via result.<field>.raw (exact value) or result.<field>.snippet (highlighted HTML).

7. Custom Query Strategies

Search UI's default query works for keyword search. For semantic, hybrid, or advanced queries, use getQueryFn to override the query generation.

Semantic Search (requires ES 8.15+ with semantic_text field)
const connector = new ElasticsearchAPIConnector({
  // ... connection config ...
  getQueryFn: (state, config) => ({
    semantic: {
      field: "content_semantic",
      query: state.searchTerm,
    },
  }),
});
Hybrid Search (keyword + semantic via RRF)

For hybrid search, use interceptSearchRequest to inject a retriever-based query:

const connector = new ElasticsearchAPIConnector({
  // ... connection config ...
  interceptSearchRequest: async ({ requestBody, requestState, queryConfig }, next) => {
    if (!requestState.searchTerm) return next(requestBody);

    const modifiedBody = {
      ...requestBody,
      query: undefined,
      retriever: {
        rrf: {
          retrievers: [
            {
              standard: {
                query: {
                  multi_match: {
                    query: requestState.searchTerm,
                    fields: ["title^3", "description"],
                  },
                },
              },
            },
            {
              standard: {
                query: {
                  semantic: {
                    field: "content_semantic",
                    query: requestState.searchTerm,
                  },
                },
              },
            },
          ],
        },
      },
    };

    return next(modifiedBody);
  },
});
Sparse Vector

For most use cases, the Semantic Search example above is the recommended starting point — it uses semantic_text with Jina v3 (the default EIS dense embedding model, multilingual). Use the sparse_vector query below when you specifically need sparse-vector retrieval. ELSER (.elser-2-elasticsearch) is available as an English-only sparse alternative, but must be explicitly specified via inference_id.

const connector = new ElasticsearchAPIConnector({
  // ... connection config ...
  getQueryFn: (state, config) => ({
    sparse_vector: {
      field: "content_embedding",
      inference_id: ".jina-embeddings-v3",
      query: state.searchTerm,
    },
  }),
});
Version Considerations for Query Strategies
StrategyMinimum ES VersionNotes
Keyword (multi_match, bool)Any modern versionWorks everywhere
Semantic (semantic query)8.15+Requires semantic_text field; default EIS model is Jina v3 (multilingual dense)
kNN8.0+Use dense_vector field
Sparse vector / ELSER8.11+English-only sparse vectors; must be explicitly configured (Jina v3 is default on EIS)
Hybrid with RRF retrievers8.14+Retriever syntax
ServerlessAlways latestAll features available

When generating code, check the developer's Elasticsearch version (confirmed in the main playbook's Step 3) and only recommend query strategies their version supports.

8. Known Limitations

  • Nested objects don't render — Search UI's Elasticsearch connector cannot display nested object fields. Use flattened or keyword fields for facets instead of nested.

  • React-only components — The pre-built components (@elastic/react-search-ui-views) are React-only. The headless core works with any framework, but you must build your own UI components.

  • Query DSL only — Search UI generates Query DSL, not ES|QL. ES|QL is not supported for search queries through Search UI.

  • No built-in auth — Search UI doesn't handle user authentication. If different users see different data (multi-tenancy), implement document-level security via the proxy layer.

  • Facet counts with filters — Without disjunctiveFacets, selecting a facet value hides other options. Always list filterable facets in disjunctiveFacets for a good UX.

9. Common Follow-Ups

QuestionAnswer
"How do I make facets stay open after selection?"Add the field name to the disjunctiveFacets array.
"How do I deploy this?"Switch to ApiProxyConnector on the frontend. Run the proxy server alongside your app.
"Can I use this with Vue/Angular?"The headless core works with any framework. Build your own components via SearchDriver.
"How do I add semantic search?"Use getQueryFn with a semantic query (requires ES 8.15+ and semantic_text field). See section 7.

10. Connecting to Backend Recipes

This guide is designed to plug into any backend recipe. Here's how the handoff works:

Backend PatternWhat It ProvidesSearch UI Connects Via
keyword-searchText fields, keyword filters, completion fieldDefault query config — map search_fields and facets to the index
catalog-ecommerceProduct mapping with synonyms, nested attributes, autocompleteFull config example in section 5 above
vector-hybrid-searchBM25 + semantic fields, semantic_text or dense_vectorgetQueryFn or interceptSearchRequest with RRF retriever (section 7)

The backend recipe builds the index, mapping, ingestion, and API. This recipe builds the frontend on top. If the developer followed a backend recipe that produced a Flask/Express API, they have two choices:

  1. Use Search UI's connector to query Elasticsearch directly (through a proxy) — replaces the backend API for search

  2. Keep the backend API and build a custom connector that calls it — useful when the API does more than search (auth, logging, business logic)

For option 2, implement a custom connector class with onSearch(requestState, queryConfig), onAutocomplete(requestState, queryConfig), onResultClick(), and onAutocompleteResultClick(). Each method receives Search UI state and must return { results, totalResults, facets }.

References

Requirements and compatibility

Works with: Claude Code, Claude apps, OpenAI Codex, GitHub Copilot, Cursor, Gemini CLI, Kiro, OpenCode, Goose, Amp, Roo Code, JetBrains Junie, Factory Droid, Devin (ex-Windsurf), Mistral Vibe, OpenHands, Letta

“Works with” means the tool reads the open Agent Skills format; a skill written for one tool may use features others lack.

The author says: Elasticsearch 8.x or 9.x, self-managed, Elastic Cloud Hosted, or Elastic Cloud Serverless. Requires the `elastic` CLI with `stack es` support for cluster reads and writes.

Security

What our scanner noticed· Low risk

  • Instructions that use the network

A static scan is not a guarantee. Skills are third-party content: review a skill before you let an agent use it.

Attribution and licence

Created by
elastic
Publisher
Elastic (Official)
Source
elastic/agent-skills · skills/elasticsearch/elasticsearch-onboarding · commit 09d879d
Licence
Apache License 2.0 (redistribution allowed)
  • LICENSE (added by AutoGineer from LICENSE)
  • ATTRIBUTION.md (written by AutoGineer)
Synced
Also distributed in
elastic/agent-skills

AutoGineer is not affiliated with or endorsed by elastic or Elastic.

Download ZIP

The ZIP holds the skill’s files, its licence files and an ATTRIBUTION.md. Download elasticsearch-onboarding.zip