elastic/integration-skills

input-configurations

>- Input template configuration for Elastic integrations. Covers agent stream templates (agent/stream/*.yml.hbs) for all non-CEL input types: HTTPJSON, AWS S3, CloudWatch, Azure Blob, Azure EventHub, GCS, GCP Pub/Sub, TCP, UDP, HTTP Endpoint, Filestream, Logfile, Journald, Winlog, and WebSocket. For CEL input programs, use the cel-programs skill instead.

First seen May 19, 2026

Installation

$ npx skills add elastic/integration-skills --skill input-configurations

Similar popular skills

Related neighbors and high-traction skills in the same topics — useful to compare before installing.

Also in this package

Other skills from elastic/integration-skills · top by installs.

npx skills add elastic/integration-skills

Browse all from elastic/integration-skills

More details

Agent compatibility

Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.

Claude Code Not declared
Cursor Declared
Codex Not declared
GitHub Copilot Not declared
Windsurf Not declared
Gemini CLI Not declared
Cline Not declared
OpenCode Not declared

Repository health

Stars 15
License LICENSE.txt
Default branch main
Open issues 2
Status Active

Skill metadata

Parsed from SKILL.md frontmatter.

Version1.0
LicenseApache-2.0
Declared agents cursor
More metadata
author
elastic
version
1.0

Package contents

Files included with this skill beyond the listing page.

  • skill md SKILL.md 4,387 B
  • docs SUMMARY.md 381 B

History

  1. First seen on skills.sh
  2. First recorded snapshot · 438 installs

SKILL.md

input-configurations

When to use

Load this skill whenever tasks include:

  • building, modifying, or reviewing agent/stream/*.yml.hbs templates for non-CEL input types
  • configuring request, response, pagination, cursor, or authentication blocks in HTTPJSON templates
  • wiring up cloud storage inputs (AWS S3, GCS, Azure Blob, Azure EventHub)
  • setting up network inputs (TCP, UDP, HTTP Endpoint, WebSocket)
  • configuring file-based inputs (Filestream, Logfile, Journald, Winlog)

When not to use

Do not use this skill as the primary guide for:

  • CEL program development (cel-programs) -- CEL templates have their own structure, state model, and mito workflow
  • ingest pipeline processor design (ingest-pipelines)
  • field mappings and ECS compliance (ecs-field-mappings)

Mandatory first read

Always load references/common-input-patterns.md first. It covers patterns that apply to every input type (tags, processors passthrough, variable conventions, forwarded/publisherpipeline.disablehost coupling). These patterns are prerequisites for all type-specific guides.

Type routing table

Detect the input type from the filename pattern in agent/stream/ or from the data stream manifest input: field, then load the matching guide.

Input type Filename pattern Guide
HTTPJSON httpjson.yml.hbs references/httpjson-guide.md
AWS S3 aws-s3.yml.hbs references/aws-s3-guide.md
CloudWatch aws-cloudwatch.yml.hbs references/aws-cloudwatch-guide.md
Azure Blob Storage azure-blob-storage.yml.hbs references/azure-blob-storage-guide.md
Azure Event Hub azure-eventhub.yml.hbs references/azure-eventhub-guide.md
GCS gcs.yml.hbs references/gcs-guide.md
GCP Pub/Sub gcp-pubsub.yml.hbs references/gcp-pubsub-guide.md
TCP tcp.yml.hbs references/tcp-udp-guide.md
UDP udp.yml.hbs references/tcp-udp-guide.md
HTTP Endpoint http_endpoint.yml.hbs references/http-endpoint-guide.md
Filestream filestream.yml.hbs references/filestream-logfile-guide.md
Logfile log.yml.hbs references/filestream-logfile-guide.md
Journald journald.yml.hbs references/journald-guide.md
Winlog winlog.yml.hbs references/winlog-guide.md
WebSocket websocket.yml.hbs references/websocket-guide.md

Load only the guide for the detected input type, not all guides.

Handoff

  • For CEL programs (cel.yml.hbs), hand off to the cel-programs skill.
  • For pipeline issues discovered while reviewing input templates, hand off to the ingest-pipelines skill.
  • For field mapping issues found in template variable wiring, hand off to the ecs-field-mappings skill.

References

  • references/common-input-patterns.md -- tags, processors passthrough, variable conventions, review flags (applies to ALL input types)
  • references/httpjson-guide.md -- HTTPJSON template syntax, structure, validation rules, pagination patterns, authentication, cursor persistence
  • references/aws-s3-guide.md -- S3 bucket/SQS notification collection
  • references/aws-cloudwatch-guide.md -- CloudWatch log group collection
  • references/azure-blob-storage-guide.md -- Azure Blob Storage collection
  • references/azure-eventhub-guide.md -- Azure Event Hub collection
  • references/gcs-guide.md -- Google Cloud Storage collection
  • references/gcp-pubsub-guide.md -- GCP Pub/Sub collection
  • references/tcp-udp-guide.md -- TCP and UDP (syslog-style) listeners
  • references/http-endpoint-guide.md -- HTTP Endpoint (webhook receiver)
  • references/filestream-logfile-guide.md -- Filestream and legacy Logfile inputs
  • references/journald-guide.md -- Journald collection
  • references/winlog-guide.md -- Windows Event Log collection
  • references/websocket-guide.md -- WebSocket streaming (may embed CEL)