"Elastic" matching MCP servers:

Small production-oriented MCP server for diagnosing incidents from Elasticsearch logs with unknown schema. It provides tools for log discovery, retrieval, and issue diagnosis.

A read-only MCP server that gives AI assistants natural language access to Elasticsearch/Kibana logs for querying and analysis.

Sigma detection rule writing, validation, and pySigma-based multi-backend conversion (Splunk, Elastic, Wazuh, Kibana) via 3 MCP tools and 3 Claude Code skills, backed by a 61-rule production corpus across 11 MITRE ATT\&CK tactic categories.

Enables any MCP-compatible agent to query, diagnose, map, and operate Elasticsearch or OpenSearch clusters via REST, with read-only defaults and layered safety controls.

Transforms Elasticsearch into an AI-powered observability engine for analyzing logs, APM traces, and system metrics through natural language.

Enables MCP-compatible AI clients to search and retrieve Elasticsearch application logs through a provided search tool.

Connects to Elastic Agent Builder to enable AI-powered application health monitoring using OTEL metrics, traces, and logs from Elastic Serverless Observability.

Read-only MCP server for Elasticsearch log querying. Enables natural language search, filtering, context retrieval, and aggregation of logs.

An MCP server that downloads Elasticsearch logs from Elastic Cloud via the Admin API.

Enables AI coding agents and other MCP hosts to read Elastic Cloud logs across multiple regions using six read-only tools for overviews, deduplicated error patterns, compact searches, context lookup, full log retrieval, and bulk JSONL export.

Read-only MCP server that converts Elasticsearch logs into citable evidence for AI agents, offering deterministic log summarization and search tools.