What is Automatic Import in Elasticsearch and what does it do?
Automatic Import is a feature in Elastic that automates the creation of custom data integrations. You provide a name, description, and sample data or an index, and Elastic handles ECS field mapping, data stream configuration, and Fleet installation automatically. In Elastic 9.4, it was extended to support multiple data streams and increased log sampling from 100 to 1,000 for more expanded mappings.

Does Automatic Import support multiple data streams?
Yes. Elastic 9.4 added support for multiple data streams in a single Automatic Import integration. You can add, review, and modify data streams after the initial integration is installed, and every change automatically increments the integration version number.

What is Integration Skills for Elasticsearch?
Integration Skills is an open repository of agentic workflows for building and maintaining Elastic integrations. It is LLM-agnostic and works with any AI-powered coding environment, including Cursor, Claude Code, and Codex. It includes skills for researching vendor APIs, scaffolding integration packages, configuring CEL programs, building ingest pipelines, and mapping fields to ECS.

Do I need to write code to build a custom Elasticsearch integration?
No. Automatic Import in Elastic provides a no-code path: Describe your integration and upload sample logs or point to an index, and the tool produces a complete ECS-mapped integration installed directly to Fleet. Code-free custom integrations are supported as of Elastic 9.0 with significant improvements in 9.4.

How do I build a custom Elasticsearch integration as a developer?
Developers can use Integration Skills — a public GitHub repository of agentic workflows designed for full lifecycle integration development. Clone the repository, attach it to your preferred AI coding environment, and run /research-integration to gather vendor API documentation and field schemas, and then /create-integration to scaffold the full integration package.

What AI tools does Integration Skills support?
Integration Skills is LLM-agnostic by design. It works with Cursor, Claude Code, OpenAI Codex, and any other AI-powered coding environment. The workflows are not tied to a specific model or provider, so you can use whichever tool your team already uses.

How does Elastic's approach to custom integrations differ from other platforms?
Elastic ships both a polished no-code, in-product integration builder (Automatic Import) and an open, developer-grade agentic toolkit (Integration Skills) in the same release. Most observability and security platforms offer one or the other. Elastic 9.4 delivers both — targeting security analysts and senior developers simultaneously.

Context engineering

Vector database

Search powered applications

Logs

Threat protection

Workflows

Elasticsearch

Kibana (Discover, Dashboards)

Elastic Agent Builder

AutoOps

Piped query language

Jina AI search models

Elastic Cloud Serverless

Elastic Cloud Hosted

Self-managed Elasticsearch

Ecommerce search

Customer support search

Search-driven apps

Log analytics

Infrastructure monitoring

Digital experience monitoring

App performance monitoring

AIOps

LLM observability

Next-gen SIEM

Workflows for security

XDR and endpoint security

AI for security

10x your data's value

Cloud providers

Elastic AI Ecosystem

Search AI Partner Program

AV-Comparatives

Forrester Wave™ XDR

Gartner Magic Quadrant Leader

IDC MarketScape Leader

Search

Security

Observability

Get started

Demo gallery

Downloads

Integrations

Docs

Elasticsearch Labs

Elastic Security Labs

Elastic Observability Labs

Blog

Community

Events

Webinars

Discuss

Training

Support

Consulting

Author

Articles by Hanna Tamoudi

Senior Software Engineer

Elastic’s no-code and full-code approaches to custom integrations

Sign up for Elastic Cloud free trial