Data Source

Elasticsearch

Full-text and vector search across Elasticsearch indices

Elasticsearch is a distributed search and analytics engine widely used for log data, document search, and vector similarity search. CipherSense Agents connects via your cluster URL and API key (or basic credentials) and lets your workflows run searches and aggregations against any index.

Official documentation

Setup

Self-hosted — gather your host and credentials

For a self-hosted cluster you'll need the host (e.g. localhost or your server IP), port (default 9200), and either a username/password or an API key pair. Ensure the CipherSense Agents server IP is whitelisted in your cluster's network settings.

Elastic Cloud — find your Cloud ID

In the Elastic Cloud console: open your deployment > click 'Copy Cloud ID'. Leave the Host field blank when using a Cloud ID — the Cloud ID already encodes the endpoint. You can authenticate with username/password or with an API Key pair.

Elastic Cloud Console

Create an API Key (recommended)

In Kibana: Stack Management > API Keys > Create API Key. Restrict it to the specific indices your workflow needs. You'll receive an API Key ID and an API Key value — store both securely.

Add the integration in CipherSense Agents

Go to Project > Integrations > Add Integration > Elasticsearch. Fill in the relevant fields for your setup (self-hosted or Elastic Cloud) and click Save & Test.

Connection Fields

Fields required when adding this integration in your Project › Integrations.

Field	Required	Description
Host	Optional	Hostname or IP of your self-hosted Elasticsearch node. Leave blank if using Elastic Cloud ID.
Port	Optional	Elasticsearch HTTP port. Default is 9200. Not used when connecting via Cloud ID.
Elastic Cloud ID	Optional	Cloud ID from your Elastic Cloud deployment. Use instead of Host/Port for Elastic Cloud.
Username	Optional	Basic auth username. Use with Password for username/password authentication.
Password	Optional	Basic auth password for the username above.
API Key ID	Optional	API Key ID from Kibana. Use with API Key for key-based authentication.
API Key	Optional	API Key value from Kibana. Pair with API Key ID.
Default Index	Optional	Optional default index name used when no index is specified in a workflow node.

Common Use Cases

Full-text document search for RAG workflowsLog analytics and anomaly detection agentsVector similarity search for recommendation enginesQuery application search indices for Q&A agents

Ready to connect Elasticsearch?

Add this integration from your project dashboard and wire it into a workflow.

Open Dashboard ← Back to Integrations