You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Thirteen MCP inspection tools for alerts, cases, data views, dashboards,
and Fleet policies, bringing the default catalog to twenty tools.
Startup opt-in through mcp serve --allow-query-tools for synchronous
ES|QL and Query DSL tools. Each query uses one HTTP attempt and returns
bounded results under the selected credential's index privileges.
Install elasticctl 0.7.1
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/dannyota/elasticctl/releases/download/v0.7.1/elasticctl-installer.sh | sh
mcp serve in both binaries, with seven read tools for stack diagnostics,
rules, and exception lists under one operator-selected target.
Typed tool schemas, selected result fields, static error messages, input
and output byte limits, four-call admission, deadlines, and cancellation.
The elasticctl-mcp library, all-four-crate package checks, and a crates.io
ownership guard for the normal publishing workflow.
Verified
All seven MCP tools passed on Serverless 9.6.0, Hosted 9.5.2 and
self-managed 9.5.1. MCP Inspector 2.5.0 passed all seven calls on the lab;
exact cleanup and lab teardown passed.
Install elasticctl 0.7.0
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/dannyota/elasticctl/releases/download/v0.7.0/elasticctl-installer.sh | sh
Fleet integration-policy administration: list, get, validate, portable
JSON/YAML export and import, and guarded delete by stable policy id.
Exact package-version checks and fail-closed handling for managed,
environment-bound, cross-space, and secret-backed integration policies.
Verified
Offline tests cover integration-policy normalization, parent and package
dependency preflight, import conflict handling, overwrite and skip behavior,
and delete guards.
Scrubbed 16-exchange integration-policy fixtures pass through the production
decoders on Serverless 9.6.0, Elastic Cloud Hosted 9.5.2, and self-managed
9.5.1. Each run preserved the materialized System input map, updated without
sending the response-only enabled field, and finished with no marker-policy
residue.
Install elasticctl 0.6.1
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/dannyota/elasticctl/releases/download/v0.6.1/elasticctl-installer.sh | sh
Fleet agent-policy administration: list, get, validate, portable JSON/YAML
export and import, and guarded delete over stable policy ids.
A fixed server-default table so sparse agent-policy artifacts round-trip
exactly, and fail-closed refusal of platform-owned, environment-bound,
cross-space, and unclearable state.
Verified
Marker-scoped agent-policy fixtures record create, read, paged list, name
conflict, update, delete, and the update route's merge behavior on
Serverless, Elastic Cloud Hosted, and self-managed deployments.
Install elasticctl 0.6.0
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/dannyota/elasticctl/releases/download/v0.6.0/elasticctl-installer.sh | sh
Content cleanup now retains data views and their backing index when an
earlier dashboard or data-view cleanup step fails, preserving dependencies
for the retry.
Live content checks refresh their marker index through the bodyless route
accepted by every supported deployment flavor.
Verified
The nine-contract conformance matrix passes on Serverless 9.6.0, Elastic
Cloud Hosted 9.5.2, and self-managed 9.5.1. Each target finished with no
marker content residue, its original default data view restored, and its
prebuilt-rule baseline unchanged.
Install elasticctl 0.5.2
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/dannyota/elasticctl/releases/download/v0.5.2/elasticctl-installer.sh | sh
Dashboard administration: list, get, validate, typed JSON/YAML export and
import, and guarded delete using stable dashboard ids.
Opaque Saved Objects dashboard bundle export/import with deep dependencies.
Fixed
Dashboard search now decodes the measured nested row shape and derives the
flat rendering summary without accepting the prior unmeasured flat row.
Traditional fixture recording activates and verifies the headless lab
profile before its marker-scoped alert assignment probe.
Dashboard fixture scrubbing now deterministically normalizes generated panel
tokens in direct responses and opaque Saved Objects bundles while preserving
caller-selected dashboard and data-view ids.
Verified
Scrubbed dashboard fixtures cover create, get, scoped search, replacement,
delete, final not-found, deep export, import success/conflict, and the
accepted loss of $.time_range.mode on Serverless 9.6.0, Elastic Cloud
Hosted 9.5.2, and self-managed 9.5.1. Every recorder leg completed its
marker cleanup audit.
Install elasticctl 0.5.1
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/dannyota/elasticctl/releases/download/v0.5.1/elasticctl-installer.sh | sh
Data-view administration: list, get, validate, export, import, guarded
delete with reference replacement, and guarded default get/set/unset.
Portable JSON and YAML data-view transfer with stable ids and strict route
response decoding.
Fixed
Data-view delete and default changes now refuse unsafe referenced/default
states and restore a pending original default before marker cleanup.
Portable legacy scripted fields are globally rejected before I/O.
Fixture recording removes deployment identity from status responses and
keeps retry diagnostics free of server-provided object ids.
Verified
Scrubbed 21-exchange data-view fixtures now verify strict live response
contracts and cleanup on Serverless 9.6.0, Elastic Cloud Hosted 9.5.2, and
self-managed 9.5.1.
Install elasticctl 0.5.0
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/dannyota/elasticctl/releases/download/v0.5.0/elasticctl-installer.sh | sh
An eighth live conformance contract covers alert transitions, tags,
assignment, and the full case lifecycle. The same contract now passes on
Serverless 9.6.0, Elastic Cloud Hosted 9.5.2, and self-managed 9.5.1.
Fixed
Alert and case mutations now reject empty or inconsistent public plans
before a request. Case status changes also require an exact one-to-one
response for every requested id and target status.
Alert list search escapes wildcard syntax, profile lookup recognizes the
internal route's unavailable response, and alerts get and cases get no
longer derive their exit status from fields inside the returned document.
Case attachment preserves earlier group outcomes after a later failure.
Live cleanup refuses dirty triage targets and can delete a created case by
its exact title and marker tag when its response has no usable id.
Verified
All 24 rows in the three-flavor 0.4.2 matrix passed. The scrubbed findings record the targets and
cleanup result.
Install elasticctl 0.4.2
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/dannyota/elasticctl/releases/download/v0.4.2/elasticctl-installer.sh | sh
