List all indices.

Args: cluster: Optional cluster name. Uses the default cluster if omitted.

Returns information (mappings, settings, aliases) about one or more indices.

Args: index: Name of the index cluster: Optional cluster name. Uses the default cluster if omitted.

Create a new index.

Args: index: Name of the index body: Optional index configuration including mappings and settings cluster: Optional cluster name. Uses the default cluster if omitted.

Delete an index.

Args: index: Name of the index cluster: Optional cluster name. Uses the default cluster if omitted.

Search for documents.

Args: index: Name of the index body: Search query cluster: Optional cluster name. Uses the default cluster if omitted.

Creates or updates a document in the index.

Args: index: Name of the index document: Document data id: Optional document ID cluster: Optional cluster name. Uses the default cluster if omitted.

Get a document by ID.

Args: index: Name of the index id: Document ID cluster: Optional cluster name. Uses the default cluster if omitted.

Delete a document by ID.

Args: index: Name of the index id: Document ID cluster: Optional cluster name. Uses the default cluster if omitted.

Deletes documents matching the provided query.

Args: index: Name of the index body: Query to match documents for deletion cluster: Optional cluster name. Uses the default cluster if omitted.

Returns basic information about the health of the cluster.

Args: cluster: Optional cluster name. Uses the default cluster if omitted.

Returns high-level overview of cluster statistics.

Args: cluster: Optional cluster name. Uses the default cluster if omitted.

List all aliases.

Args: cluster: Optional cluster name. Uses the default cluster if omitted.

Get alias information for a specific index.

Args: index: Name of the index cluster: Optional cluster name. Uses the default cluster if omitted.

Create or update an alias for a specific index.

Args: index: Name of the index name: Name of the alias body: Alias configuration cluster: Optional cluster name. Uses the default cluster if omitted.

Delete an alias for a specific index.

Args: index: Name of the index name: Name of the alias cluster: Optional cluster name. Uses the default cluster if omitted.

Create a new data stream.

This creates a new data stream with the specified name. The data stream must have a matching index template before creation.

Args: name: Name of the data stream to create cluster: Optional cluster name. Uses the default cluster if omitted.

Get information about one or more data streams.

Retrieves configuration, mappings, settings, and other information about the specified data streams.

Args: name: Name of the data stream(s) to retrieve. Can be a comma-separated list or wildcard pattern. If not provided, retrieves all data streams. cluster: Optional cluster name. Uses the default cluster if omitted.

Delete one or more data streams.

Permanently deletes the specified data streams and all their backing indices.

Args: name: Name of the data stream(s) to delete. Can be a comma-separated list or wildcard pattern. cluster: Optional cluster name. Uses the default cluster if omitted.

Perform a general HTTP API request. Use this tool for any Elasticsearch/OpenSearch API that does not have a dedicated tool.

Args: method: HTTP method (GET, POST, PUT, DELETE, etc.) path: API endpoint path params: Query parameters body: Request body cluster: Optional cluster name. Uses the default cluster if omitted.

Analyze text to see how it would be tokenized.

Use this tool to understand how Elasticsearch/OpenSearch tokenizes and transforms text using analyzers. This is essential for debugging search queries and understanding why certain documents match or don't match.

Args: text: The text to analyze index: Index name to use its configured analyzer. If not specified, uses cluster-level analysis with built-in analyzers only. analyzer: Name of the analyzer to use (e.g., 'standard', 'korean', 'korean_search'). If index is specified, you can use custom analyzers defined in that index. tokenizer: Tokenizer to use for custom analysis chain. Cannot be used together with 'analyzer'. filter: List of token filters to apply (e.g., ['lowercase', 'stop']). Used with 'tokenizer' for custom analysis chain. char_filter: List of character filters to apply before tokenization. Used with 'tokenizer' for custom analysis chain. explain: If True, returns detailed information about each token including all token attributes and filter transformations. Useful for debugging complex analyzer chains. attributes: List of token attributes to return when explain=True (e.g., ['keyword', 'type']). If not specified, all attributes are returned. cluster: Optional cluster name. Uses the default cluster if omitted.

Returns: Dict containing 'tokens' array. Each token has 'token', 'start_offset', 'end_offset', 'type', and 'position' fields. With explain=True, returns detailed 'detail' object showing each filter's effect.