Elastic Integration

Distributed search and analytics engine for documents, logs, and metrics. Connect Elastic to AI agents and downstream tools whenever important data changes. When Explain Index Lifecycle fires, follow with Get All Mappings or Get All Settings so connected systems stay up to date.

Explore Documentation

3-day trialCancel anytimeUp to 10 minutes quick set up

GDPR
Data Encryption
2FA
Local Data Region

Supported triggers and actions for Elastic integration

Triggers can detect changes in Elastic and run actions that can create, search or modify data inside Elastic automatically [3] — exactly how you set them.

Explain Index LifecycleReturns the lifecycle phase, action, and step an index is in, and any lifecycle error.
Get All MappingsRetrieves the field mappings of every index in the cluster.
Get All SettingsRetrieves the settings of every index in the cluster.
Get Catalog HealthReturns a one-line summary of cluster health with node and shard counts.
Get Cluster HealthReturns the health status of the cluster together with node and shard counts.
Get Cluster SettingsReturns the persistent and transient settings configured for the cluster.
Get Cluster StateReturns the internal state of the cluster, including nodes, index metadata, and shard routing.
Get Cluster StatsReturns cluster-wide statistics about indices, documents, storage, and nodes.
Get Component TemplateReturns a component template with its settings, mappings, and aliases.
Get Data StreamReturns a data stream with its backing indices, template, and health.
Get Data Stream LifecycleReturns the retention and downsampling lifecycle of a data stream.
Get Data Stream MappingsReturns the mappings set on a data stream and the effective mappings merged with its template.
Get Data Stream SettingsReturns the settings set on a data stream and the effective settings merged with its template.
Get Data Stream StatsReturns storage size, backing index count, and latest timestamp for every data stream.
Get DocumentReturns a single document by its ID.
Get Document SourceReturns only the stored fields of a single document, without its metadata.
Get Field CapabilitiesRetrieves each field of an index with its type and whether it can be searched and aggregated.
Get Hot ThreadsReturns a plain-text report of the busiest threads on each node, to diagnose high CPU use.
Get ILM PolicyReturns an index lifecycle policy with its phases and the indices that use it.
Get ILM StatusReturns whether index lifecycle management is running, stopping, or stopped.
Get IndexReturns the aliases, mappings, and settings of an index.
Get Index RecoveryReturns the progress of shard recoveries for an index, such as restores and replica copies.
Get Index SegmentsReturns the low-level Lucene segments that make up the shards of an index.
Get Index SettingsReturns the settings of an index.
Get Index StatsReturns document counts, storage size, and indexing and search statistics for an index.
Get Index TemplateReturns an index template with its patterns, priority, and settings.
Get Ingest PipelineReturns an ingest pipeline with its processors.
Get Many DocumentsRetrieves several documents by ID, from one or more indices, in one request.
Get Many Index DocumentsRetrieves several documents of one index by their IDs in one request.
Get MappingReturns the field mappings of an index.
Get NodeReturns the roles, version, and configuration of a node.
Get NodesRetrieves every node in the cluster with its roles, version, and configuration.
Get Node StatsRetrieves resource and usage statistics, such as heap, disk, and indexing counters, for every node.
Get One Data Stream StatsReturns storage size, backing index count, and latest timestamp for a data stream.
Get Pending Cluster TasksRetrieves the cluster-level changes, such as index creation or mapping updates, that are waiting to run.
Get Repository StatusRetrieves the progress of the snapshots that are running in a repository.
Get Search ShardsReturns the indices, shards, and nodes a search against an index would run on.
Get SnapshotReturns the state, indices, and timing of one or more snapshots in a repository.
Get Snapshot RepositoryReturns the type and settings of a snapshot repository.
Get Snapshot StatusRetrieves the progress of every snapshot that is running right now.
Get TaskReturns the progress of a task and, once it has finished, its result.
List AliasesRetrieves every index in the cluster together with its aliases.
List Catalog AliasesRetrieves a compact list of aliases with the index each one points to.
List Catalog IndicesRetrieves a compact list of indices with their health, document count, and size.
List Catalog NodesRetrieves a compact list of nodes with their roles and CPU, memory, and load figures.
List Catalog ShardsRetrieves a compact list of shards with their state, size, and node.
List Catalog SnapshotsRetrieves a compact list of the snapshots in a repository with their status and duration.
List Catalog TemplatesRetrieves a compact list of index templates with their patterns and order.
List Component TemplatesRetrieves every component template with its settings, mappings, and aliases.
List Data StreamsRetrieves every data stream with its backing indices, template, and health.
List ILM PoliciesRetrieves every index lifecycle policy with its phases and the indices that use it.
List Index AliasesRetrieves the aliases that point to an index.
List Index TemplatesRetrieves every index template with its patterns, priority, and settings.
List Ingest PipelinesRetrieves every ingest pipeline with its processors.
List Snapshot RepositoriesRetrieves every registered snapshot repository with its type and settings.
List TasksRetrieves the tasks running on the cluster, such as searches, reindexing, and snapshots.
Search All IndicesSearches the documents of every index in the cluster and returns each matching document.
Search IndexSearches the documents of an index and returns each matching document.
Analyze Index TextSplits text into search tokens the way an index or one of its fields would.
Analyze TextSplits text into search tokens with a built-in analyzer, tokenizer, or filters.
Bulk Index DocumentsIndexes, creates, updates, or deletes many documents in one request.
Cancel TaskCancels a running task, such as a long reindex or a delete by query.
Clean Snapshot RepositoryRemoves leftover files that no snapshot references anymore from a snapshot repository.
Clone IndexCopies an existing index into a new index with the same shards and data.
Close IndexCloses an index so it keeps its data but can no longer be searched or written to.
Count DocumentsCounts the documents across all indices that match a query.
Count Index DocumentsCounts the documents in an index that match a query.
Create Component TemplateCreates a reusable building block of settings and mappings for index templates, or replaces one with the same name.
Create Data StreamCreates a data stream for append-only time series data, using a matching index template.
Create DocumentAdds a new document with the ID you choose and fails if that ID is already taken.
Create ILM PolicyCreates an index lifecycle policy, or replaces the policy that has the same name.
Create IndexCreates a new index with optional settings, field mappings, and aliases.
Create Index AliasAdds an alias to an index, or updates the options of an existing alias.
Create Index TemplateCreates an index template that applies settings and mappings to new matching indices, or replaces one with the same name.
Create Ingest PipelineCreates an ingest pipeline that transforms documents before they are stored, or replaces one with the same ID.
Create SnapshotTakes a backup snapshot of indices, data streams, or the whole cluster into a repository.
Create Snapshot RepositoryRegisters a storage location for snapshots, such as an S3 bucket, or updates an existing repository.
Delete Component TemplateDeletes a component template that no index template uses anymore.
Delete Data StreamDeletes a data stream together with all of its backing indices and documents.
Delete Data Stream LifecycleRemoves the lifecycle from a data stream so its data is no longer expired or downsampled.
Delete DocumentDeletes a single document by its ID.
Delete Documents by QueryDeletes every document in an index that matches a query.
Delete ILM PolicyDeletes an index lifecycle policy that no index uses anymore.
Delete IndexDeletes an index together with all of its documents.
Delete Index AliasRemoves an alias from an index without touching the index data.
Delete Index TemplateDeletes an index template without changing indices that already exist.
Delete Ingest PipelineDeletes an ingest pipeline.
Delete SnapshotDeletes a snapshot from a repository, or cancels it while it is still running.
Delete Snapshot RepositoryUnregisters a snapshot repository while leaving its stored snapshots in place.
Explain AllocationExplains why a shard is unassigned or why it stays on its current node.
Explain DocumentExplains why a single document does or does not match a query and how its score was computed.
Flush All IndicesWrites the in-memory changes of every index to disk and clears their transaction logs.
Flush IndexWrites the in-memory changes of an index to disk and clears its transaction log.
Force Merge IndexMerges the segments of an index to reclaim space and speed up searches on data that no longer changes.
Index DocumentAdds a document to an index and lets Elasticsearch generate its ID.
Index Document by IDAdds a document with the ID you choose, or replaces the document that already has that ID.
Make an API CallPerforms an arbitrary authorized API call.
Move Index Lifecycle StepMoves an index by hand to another phase or step of its lifecycle policy.
Multi SearchRuns several searches in one request and returns one result per search.
Multi Search IndexRuns several searches against one index in one request and returns one result per search.
Open IndexOpens a closed index so it can be searched and written to again.
Refresh All IndicesMakes the recent writes to every index visible to search right away.
Refresh IndexMakes the recent writes to an index visible to search right away.
Reindex DocumentsCopies documents from one index to another, optionally filtered by a query or changed by a script.
Remove Index Lifecycle PolicyDetaches the lifecycle policy from an index so the index is no longer managed.
Reroute ClusterMoves, cancels, or assigns shards by hand, or retries shards that failed to allocate.
Restore SnapshotRestores indices, data streams, or cluster state from a snapshot.
Retry Index LifecycleRetries the lifecycle step that failed for an index.
Simulate Index TemplateShows the settings, mappings, and aliases a template definition would produce, without saving it.
Simulate Ingest PipelineRuns sample documents through a pipeline definition and shows the result, without storing anything.
Start ILMStarts index lifecycle management after it was stopped.
Stop ILMStops index lifecycle management so no policy moves an index to its next step.
Update AliasesAdds and removes several aliases in one step so readers never see a half-switched alias.
Update Cluster SettingsChanges dynamic cluster settings, either permanently or until the next full restart.
Update Data Stream LifecycleSets how long a data stream keeps its data and how older data is downsampled.
Update Data Stream MappingsSets mappings on a data stream that override those of its index template from the next backing index on.
Update Data Stream SettingsSets settings on a data stream that override those of its index template.
Update DocumentUpdates part of a document, or changes it with a script.
Update Documents by QueryUpdates every document in an index that matches a query, optionally with a script.
Update Index SettingsChanges dynamic settings of an index, such as the number of replicas or the refresh interval.
Update MappingAdds new fields to the mapping of an index or changes options of existing fields.
Validate QueryChecks whether a query is valid for an index without running it.
Verify Snapshot RepositoryChecks that every node in the cluster can read from and write to a snapshot repository.

How to integrate Elastic in automation workflow?

3 simple steps to make your Elastic connected with other apps in automation workflows on WEXTL. Up to 10 minutes integration set up.

STEP 1

Select Elastic in workflow

Pick Elastic app in the workflow builder [4] - just one click to select the app.

STEP 2

Connect Elastic

When prompted, authorize access to Elastic in WEXTL once. Elastic credentials are encrypted and never shared with WEXTL. Authorization will be reused in any future API calls [3].

WEXTL wants to integrate with your Elastic account. Approve?

STEP 3

Build a workflow

Build your workflow with Elastic yourself or with WEXTL® AI Builder. Connect Elastic to any available integrations [5], or use HTTP node to go beyond them.

Elastic

How Elastic connects and integrates with WEXTL

Save and approve your credentials once — WEXTL® stores authorization information encrypted and reuses the authentication whenever Elastic app is called in workflows. That allows your database automations to run without your attention, per defined schedule [7]. Explore documentation [6] for a detailed list of fields that Elastic supports.

Full Elastic API documentation

The following table illustrates what fields Elastic integration require during authorization flow inside our workflow builder [4].

Demonstration of Elastic connection step inside WEXTL Workflow Builder [4].

Field	Type	Help
DeploymentRequired	select	Choose Elastic Cloud for a deployment hosted by Elastic, or Self-hosted for a cluster you run yourself.
API Key IDRequired	text	The id of the API key. In Kibana, go to Stack Management > API keys, create a key, and choose the JSON format to see its id.
API Key SecretRequired	password	The api_key value shown once when the key is created. The key needs the cluster and index privileges your workflows use; the connection test reads basic cluster information.

Connect Elastic to popular apps on WEXTL

Enter a name of the other app you want to sync with Elastic below. Click on selected app to explore integration options with Elastic. If the app you search for is not available in WEXTL yet, you can use HTTP node [10] instead to integrate it directly.

Example automation with Elastic integration

Select Explain Index Lifecycle action from Elastic - this will be a starting point in your automation. Whenever event happens in Elastic, workflow will start [7] from Explain Index Lifecycle node.

Search for Create Index, connect it as the next step of integration sequence. You can use filters between Explain Index Lifecycle and Create Index, so only important data pass from Explain Index Lifecycle to the next step. WEXTL gives you full control over the process of Elastic automation. All parts of workflow are visible on the canvas [4].

Elastic on WEXTL has 123 modules for crafting database automations. Explore Elastic documentation for more.

Elastic

Explain Index Lifecycle

Coda

Performs action

Coda

Triggers

Elastic

Create Index

Demonstration of how visual Elastic automation [6] looks in WEXTL.

Frequently asked questions

Common questions about automating Elastic in your workflows.

Elastic has no triggers, but it provides 123 actions including "Explain Index Lifecycle", "Get All Mappings", and "Get All Settings". Pair them with triggers from other apps to automate Elastic tasks.

Integration has 123 actions, including "Explain Index Lifecycle", "Get All Mappings", and "Get All Settings", and more. Refer to our Elastic Documentation for detailed inputs and outputs.

No. Most automations are built visually on the canvas by picking triggers, actions, and mapping fields. You can add custom JavaScript with Functions when advanced logic is needed — but our customers do that in rare cases [4].

Yes. Connections are authenticated per account, credentials are encrypted at rest, and you can enforce approvals and team-level access controls on any automation.

The Elastic integration on WEXTL runs directly on its vendor public API — every field name, authentication method, and rate limit is controlled by Elastic official API and covered in documentation [3]. WEXTL handles the request signing and pagination for you.

Absolutely. Where Elastic provides native webhooks, you can use instant triggers to eliminate polling delay. For custom webhooks, WEXTL offers Custom Webhook node, so you can start automation whenever Elastic or any other service sends event to webhook URL.

WEXTL is an AI-first visual canvas. The platform allows you to describe automation in plain text — and AI will wire nodes for Elastic inside the workflow builder [4]. You can also use built-in workflow nodes (AI Agent, Human in the Loop, Condition, Aggregate Results) in pair with Elastic modules to craft complex integration flows with branches, filtering, and conditional logic. There are absolutely no limits of what you can build.

References

List of sources used to gather information about the Elastic integration.

Elastic integration source code, module specs and credentials implementation.
Internal Elastic integration documentation, structured input and output parameters, scopes, and authentication methods.
Official Elastic vendor API documentation — used to verify field meanings, authentication flows, and anything our own specs don't fully capture.
WEXTL® Visual Workflow Builder, anonymized data from our technical support team.
WEXTL® Apps Library
WEXTL® Elastic App Documentation
WEXTL® Workflow Scheduler
WEXTL® HTTP node documentation

Elastic Integration

Supported triggers and actions for Elastic integration