Loading

Elastic Agent Builder built-in agents reference

This page lists the built-in agents available in Elastic Agent Builder. Built-in agents are pre-configured by Elastic with specific instructions and tools to handle common use cases.

You cannot modify or delete built-in agents. To customize one, you can clone it and create a custom agent.

The availability of specific agents depends on your solution view or serverless project type.

Note

Elastic Observability and Elastic Security users must opt-in to use Elastic Agent Builder. To learn more, refer to Compare Agent Builder and AI Assistant > Switch between chat experiences.

The Elastic AI Agent is the default general-purpose agent for Elasticsearch. It is designed to help with a wide range of tasks, from writing ES|QL queries to exploring your data indices.

Assigned tools:

A specialized agent for logs, metrics, and traces. It is designed to assist with infrastructure monitoring and application performance troubleshooting.

Assigned tools:

A specialized agent for security alert analysis tasks, including alert investigation and security documentation. It helps analysts triage alerts and understand complex security events.

Assigned tools: