| actions |
The Kibana actions plugin provides a framework to create executable actions. You can: |
| agentBuilder |
Home of the Agent Builder framework. |
| agentBuilderDashboards |
Contains dashboard-related entities for the Agent Builder, including tools, attachment types, and a dashboard skill. |
| agentBuilderPlatform |
Contains the platform-owned agent builder entities |
| agentBuilderWorkflows |
Contains workflow-related entities for the agent builder. |
| agentContextLayer |
The Agent Context Layer plugin provides a centralized service for indexing, crawling, and searching Kibana assets (visualizations, dashboards, connectors, workflows, etc.) via the Semantic Metadata Layer (SML). |
| aiops |
The plugin provides APIs and components for AIOps features, including the “Log rate analysis” UI, maintained by the ML team. |
| alerting |
The Kibana Alerting plugin provides a common place to set up rules. You can: |
| alertingVTwo |
Alerting v2 is an ES|QL-first, append-only alerting plugin. It owns the rule model, rule execution runtime, alert lifecycle tracking, notification policies, alert actions, and the management UI used to work with all of them. |
| anonymization |
Home of the platform-owned anonymization policy service used by inference-related workflows. |
| apm |
This plugin provides access to App Monitoring features provided by Elastic. It allows you to monitor your software services and applications in real-time; visualize detailed performance information on your services, identify and analyze errors, and monitor host-level and APM agent-specific metrics like JVM and Go runtime metrics. |
| apmDataAccess |
WARNING: Missing or empty README. |
| apmSourcesAccess |
Exposes services to access APM sources. |
| automaticImport |
Team owner: Security Integration Experience |
| banners |
Allow to add a header banner that will be displayed on every page of the Kibana application |
| canvas |
"Never look back. The past is done. The future is a blank canvas." ― Suzy Kassem, Rise Up and Salute the Sun |
| cases |
This plugin provides cases management in Kibana |
| cloud |
The cloud plugin exposes Cloud-specific metadata to Kibana. |
| cloudChat |
The plugin was meant to integrate with DriftChat in order to provide live support to our Elastic Cloud users. It was removed, but the plugin was left behind to register no longer used config keys. |
| cloudConnect |
This plugin allows self-managed users to connect their cluster to an Elastic Cloud account, enabling cloud-managed services and features for self-managed deployments. |
| cloudDataMigration |
Static migration page where self-managed users can see text/copy about migrating to Elastic Cloud |
| cloudDefend |
This plugin currently only exists to provide custom fleet policy UX for a set of new BPF LSM features. The first feature being container "drift prevention". |
| cloudExperiments |
[!NOTE] This plugin no-longer exposes any evaluation APIs. Refer to for more information about how to interact with feature flags. |
| cloudFullStory |
Integrates with FullStory in order to provide better product analytics, so we can understand how our users make use of Kibana. This plugin should only run on Elastic Cloud. |
| cloudLinks |
Adds all the links to the Elastic Cloud console. |
| cloudSecurityPosture |
Cloud Posture automates the identification and remediation of risks across cloud infrastructures |
| contentConnectors |
This plugin contains common assets and endpoints for the use of connectors in Kibana. Primarily used by the enterprise_search and serverless_search plugins. |
| crossClusterReplication |
You can run a local cluster and simulate a remote cluster within a single Kibana directory. |
| customBranding |
This is a plugin to configure custom branding. Plugin server-side only. Plugin has three main functions: |
| dataQuality |
Page where users can see the quality of their log data sets. |
| datasetQuality |
In order to make ongoing maintenance of log collection easy we want to introduce the concept of data set quality, where users can easily get an overview on the data sets they have with information such as integration, size, last activity, among others. |
| dataUsage |
Serverless-only plugin for users to view data usage. Available in all 3 solutions. |
| dataVisualizer |
The data_visualizer plugin enables you to explore the fields in your data. |
| discoverEnhanced |
Contains the enhancements to the OSS discover app. |
| ecsDataQualityDashboard |
This plugin implements (server) APIs used to render the content of the Data Quality dashboard. |
| elasticAssistant |
This plugin implements server APIs for the Elastic AI Assistant. Furthermore, it registers the Elastic Assistant in the navigation bar. |
| elasticAssistantSharedState |
This plugin acts as a reactive bridge between the elastic assistant plugin and other plugins. It exposes an RxJS-based interface where: |
| elasticConsole |
Experimental — this feature is under active development and may change without notice. |
| embeddableAlertsTable |
Embeddable wrapper for the alerts table |
| encryptedSavedObjects |
The purpose of this plugin is to provide a way to encrypt/decrypt attributes on the custom Saved Objects that works with security and spaces filtering. |
| enterpriseSearch |
This plugin provides Kibana user interfaces for managing the Enterprise Search solution and its products, App Search and Workplace Search. |
| entityManager |
This plugin provides access to observed entity data, such as information about hosts, pods, containers, services, and more. |
| entityStore |
Central place for Entities management and logs extraction. |
| evals |
The Evals plugin provides an in-Kibana UI for browsing LLM evaluation run results, per-evaluator statistics, and OpenTelemetry traces produced by the @kbn/evals evaluation framework. |
| eventLog |
The event log plugin provides a persistent history of alerting and action activities. |
| exploratoryView |
A shared component for visualizing observability data types via lens embeddable. For further details. |
| features |
The features plugin enhance Kibana with a per-feature privilege system. |
| feedback |
Universal way of giving feedback about Elastic in Kibana. |
| fieldsMetadata |
The @kbn/fields-metadata-plugin is designed to provide a centralized and asynchronous way to consume field metadata across Kibana. This plugin addresses the need for on-demand retrieval of field metadata from static ECS/Metadata definitions and integration manifests, with the flexibility to extend to additional resolution sources in the future. |
| fileUpload |
WARNING: Missing or empty README. |
| fleet |
Fleet provides a web-based UI in Kibana for centrally managing Elastic Agents and their policies. |
| genAiSettings |
This plugin provides a management interface for configuring generative AI settings within Kibana's Stack Management section. |
| globalSearch |
The GlobalSearch plugin provides an easy way to search for various objects, such as applications or dashboards from the Kibana instance, from both server and client-side plugins |
| globalSearchBar |
The GlobalSearchBar plugin provides a search interface for navigating Kibana. (It is the UI to the GlobalSearch plugin.) |
| globalSearchProviders |
The globalSearchProviders plugin provides Kibana default search providers for the GlobalSearch plugin. |
| graph |
This is the main source folder of the Graph plugin. It contains all of the Kibana server and client source code. x-pack/platform/test/functional/apps/graph contains additional functional tests. |
| grokdebugger |
This plugin helps users define Grok patterns, which are particularly useful for ingesting logs. |
| inbox |
The Inbox plugin provides the human-in-the-loop (HITL) control center for agents and tasks that have paused execution and are waiting for a human to approve, reject, or otherwise weigh in. It exposes a list of pending "inbox actions" that other plugins (for example, Security Solution, Evals, and Attack Discovery) can feed into, and a dedicated page where analysts can review and action them. |
| indexLifecycleManagement |
You can test that the Frozen badge, phase filtering, and lifecycle information is surfaced in Index Management by running this series of requests in Console: |
| indexManagement |
This service is exposed from the Index Management setup contract and can be used to add content to the indices list and the index details page. |
| indicesMetadata |
Plugin for managing and retrieving metadata about indices in Kibana. This plugin collects and processes metadata from Elasticsearch indices, data streams, ILM policies, and index templates. |
| inference |
The inference plugin is a central place to handle all interactions with the Elasticsearch Inference API and external LLM APIs. Its goals are: |
| inferenceEndpoint |
A Kibana plugin |
| inferenceWorkflows |
Registers AI workflow steps (ai.prompt, ai.summarize, ai.classify) that use the inference plugin to power LLM-based automation in Kibana Workflows. |
| infra |
This is the home of the infra plugin, which aims to provide a solution for the infrastructure monitoring use-case within Kibana. |
| ingestHub |
Cross-solution onboarding page for adding data sources and integrations. Gated behind the ingestHub.enabled feature flag. |
| ingestPipelines |
The ingest_pipelines plugin provides Kibana support for Elasticsearch's ingest pipelines. |
| intercepts |
Contains business logic and orchestration for displaying the intercept dialog suited to the needs of Kibana, and is made available so that other solution teams might leverage this to register and schedule an intercept of their choosing |
| kubernetesSecurity |
This plugin provides interactive visualizations of your Kubernetes workload and session data. |
| lens |
Lens is a visualization editor allowing to quickly and easily configure compelling visualizations to use on dashboards and canvas workpads. |
| licenseApiGuard |
This plugin is used by ES UI plugins to reject API requests when the plugin is unsupported by the user's license. |
| licenseManagement |
This plugin enables users to activate a trial license, downgrade to Basic, and upload a new license. |
| licensing |
The licensing plugin retrieves license data from Elasticsearch at regular configurable intervals. |
| lists |
README.md for developers working on the backend lists on how to get started using the CURL scripts in the scripts folder. |
| llmTasks |
This plugin contains various LLM tasks. |
| logsDataAccess |
Exposes services to access logs data. |
| logsShared |
Exposes the shared components and APIs to access and visualize logs. |
| logstash |
WARNING: Missing or empty README. |
| maintenanceWindows |
A Kibana plugin providing functionalities to manage maintenance windows. |
| maps |
Visualize geo data from Elasticsearch or 3rd party geo-services. |
| metricsDataAccess |
Exposes utilities to access metrics data. |
| ml |
This plugin provides access to the machine learning features provided by Elastic. |
| monitoring |
This plugin provides the Stack Monitoring kibana application. |
| monitoringCollection |
This plugin allows for other plugins to add data to Kibana stack monitoring documents. |
| notifications |
The Notifications plugin provides a set of services to help Solutions and plugins send notifications to users. |
| observability |
This plugin provides shared components and services for use across observability solutions, as well as the observability landing page UI. |
| observabilityAgentBuilder |
This plugin provides an observability agent, observability tools and attachments for Agent Builder. |
| observabilityAIAssistant |
This document gives an overview of the features of the Observability AI Assistant at the time of writing, and how to use them. At a high level, the Observability AI Assistant offers contextual insights, and a chat functionality that we enrich with function calling, allowing the LLM to hook into the user's data. We also allow the LLM to store things it considers new information as embeddings into Elasticsearch, and query this knowledge base when it decides it needs more information, using ELSER. |
| observabilityAIAssistantApp |
This app registers defaults functions. It exists as a separate plugin to avoid cyclical dependencies. |
| observabilityAiAssistantManagement |
The observabilityAiAssistantManagement plugin manages the Ai Assistant for Observability and Search management section. |
| observabilityLogsExplorer |
This plugin provides an app based on the LogsExplorer component from the logs_explorer plugin, but adds observability-specific affordances. |
| observabilityOnboarding |
This plugin provides an onboarding framework for observability solutions: Logs and APM. |
| observabilityShared |
A plugin that contains components and utilities shared by all Observability plugins. |
| osquery |
This plugin adds extended support to Security Solution Fleet Osquery integration |
| painlessLab |
This plugin helps users learn how to use the Painless scripting language. |
| productDocBase |
This plugin provides APIs to install, update, and uninstall knowledge base artifacts for AI Assistants. It supports two resource types: |
| productIntercept |
This is a standalone plugin that leverages the intercept plugin to display product intercept used to gather information that is turn used to compute CSAT about user's experience of Kibana. |
| profiling |
Universal Profiling provides fleet-wide, whole-system, continuous profiling with zero instrumentation. Get a comprehensive understanding of what lines of code are consuming compute resources throughout your entire fleet by visualizing your data in Kibana using the flamegraph, stacktraces, and top functions views. |
| profilingDataAccess |
WARNING: Missing or empty README. |
| queryActivity |
A Kibana plugin for viewing and managing currently running queries. |
| reindexService |
Reindexing as a service |
| remoteClusters |
This plugin helps users manage their remote clusters, which enable cross-cluster search and cross-cluster replication. |
| reporting |
An awesome Kibana reporting plugin |
| rollup |
Welcome to the Kibana rollup plugin! This plugin provides Kibana support for Elasticsearch's rollup feature. Please refer to the Elasticsearch documentation to understand rollup indices and how to create rollup jobs. |
| ruleRegistry |
The rule registry plugin aims to make it easy for rule type producers to have their rules produce the data that they need to build rich experiences on top of a unified experience, without the risk of mapping conflicts. |
| runtimeFields |
Welcome to the home of the runtime field editor and everything related to runtime fields! |
| sampleDataIngest |
A service for creating and managing sample data sets in Elasticsearch indices. Supports sample types and automated data ingestion. |
| savedObjectsTagging |
Add tagging capability to saved objects |
| screenshotting |
This plugin provides functionality to take screenshots of the Kibana pages. It uses Chromium and Puppeteer underneath to run the browser in headless mode. |
| searchAssistant |
This holds the Search AI Assistant which targets Search users and Serverless Elasticsearch. |
| searchGettingStarted |
WARNING: Missing or empty README. |
| searchHomepage |
The Search Homepage is a shared homepage for elasticsearch users. |
| searchInferenceEndpoints |
The Inference Endpoints is a tool used to manage inference endpoints |
| searchNavigation |
The Search Navigation plugin is used to handle navigation for search solution plugins across both stack and serverless. |
| searchNotebooks |
This plugin contains endpoints and components for rendering search python notebooks in the persistent dev console. |
| searchPlayground |
The Search Playground is a tool for developers to experiment with their own data using LLMs. |
| searchprofiler |
The search profiler consumes the Profile API by sending a search API with profile: true enabled in the request body. The response contains detailed information on how Elasticsearch executed the search request. People use this information to understand why a search request might be slow. |
| searchQueryRules |
A plugin to manage Query Rules in Elasticsearch through Query Rules API |
| searchSynonyms |
A plugin to manage synonyms in Elasticsearch through Synonyms APIs through Kibana. |
| security |
See Configuring security in Kibana. |
| securitySolution |
Welcome to the Kibana Security Solution plugin! This README will go over getting started with development and testing. |
| securitySolutionEss |
The security_solution_ess plugin is an internal plugin for Kibana's Security Solution, designed to encapsulate ESS-specific logic. This plugin is only enabled when the application is built for stateful deployments (ESS or on-prem), keeping the main security_solution plugin clean and agnostic of the offering model. |
| securitySolutionServerless |
The security_solution_serverless plugin is an internal plugin for Kibana's Security Solution, designed to encapsulate serverless-specific logic. This plugin is only enabled when the application is built for serverless project, keeping the main security_solution plugin clean and agnostic of the offering model. |
| serverless |
WARNING: Missing or empty README. |
| serverlessObservability |
This plugin contains configuration and code used to create a Serverless Observability project. It leverages universal configuration and other APIs in the serverless plugin to configure Kibana. |
| serverlessSearch |
This plugin contains configuration and code used to create a Serverless Search project. It leverages universal configuration and other APIs in the serverless plugin to configure Kibana. |
| serverlessVectordb |
The serverlessVectordb plugin is an internal plugin for Kibana's Vectordb Solution. |
| serverlessWorkplaceAI |
The serverlessWorkplaceAI plugin is an internal plugin for Kibana's Workplace AI Solution. |
| sessionView |
Session View is meant to provide a visualization into what is going on in a particular Linux environment where the agent is running. It looks likes a terminal emulator; however, it is a tool for introspecting process activity and understanding user and service behaviour in your Linux servers and infrastructure. It is a time-ordered series of process executions displayed in a tree over time. |
| slo |
A Kibana plugin |
| sloShared |
This plugin provides shared SLO functionality that can be consumed by multiple plugins (e.g., SLO, Fleet). |
| snapshotRestore |
or |
| spaces |
See Configuring Kibana Spaces. |
| stackAlerts |
This plugin provides alertTypes shipped with Kibana for use with the the alerting plugin. When enabled, it will register the alertTypes by the Stack in the alerting plugin, register associated HTTP routes, etc. |
| stackConnectors |
The stack_connectors plugin provides connector types shipped with Kibana, built on top of the framework provided in the actions plugin. |
| streams |
This plugin provides an interface to manage streams |
| streamsApp |
Home of the Streams app plugin, which allows users to manage Streams via the UI. |
| synthetics |
The purpose of this plugin is to provide users of Heartbeat more visibility of what's happening in their infrastructure. |
| taskManager |
The task manager is a generic system for running background tasks. |
| taskManagerDependencies |
This plugin is used as a temporary sidecar plugin to enable the task manager plugin access to the encrypted saved objects client and the security plugin start contract as there is a circular dependency if the task manager were to require the encrypted saved objects plugin directly. |
| telemetryCollectionXpack |
Gathers all usage collection, retrieving them from both: OSS and X-Pack plugins. |
| timelines |
Timelines is a plugin that provides a grid component with accompanying server side apis to help users identify events of interest and perform root cause analysis within Kibana. |
| transform |
This plugin provides access to the transforms features provided by Elasticsearch. It follows Kibana's standard plugin architecture, originally the plugin boilerplate code was taken from the snapshot/restore plugin. |
| translations |
Contains Elastic-supported translations. Owned by the Localizations team. For adding localizations and instrument a ui to support translated content, see https://github.com/elastic/kibana/tree/main/src/platform/packages/shared/kbn-i18n |
| triggersActionsUi |
The Kibana alerts and actions UI plugin provides a user interface for managing alerts and actions. As a developer you can reuse and extend built-in alerts and actions UI functionality: |
| upgradeAssistant |
Upgrade Assistant helps users prepare their Stack for being upgraded to the next version of the Elastic stack. |
| uptime |
The purpose of this plugin is to provide users of Heartbeat more visibility of what's happening in their infrastructure. |
| urlDrilldown |
NOTE: This plugin contains implementation of URL drilldown. |
| usageApi |
This plugin is used to report Usage metrics to our Cloud internal Usage API. |
| ux |
https://docs.elastic.dev/kibana-dev-docs/welcome |
| watcher |
This plugins adopts some conventions in addition to or in place of conventions in Kibana (at the time of the plugin's creation): |
| workplaceAIApp |
Workplace AI application plugin |