Kibana integration

Quick start

Call Kibana from your generated app's worker code via the OverSkill composio client. The toolkit slug below maps to Kibana's public Composio identifier — your app references it by name and OverSkill handles the OAuth round-trip.

// In your generated app's worker handler:
const composio = composioClient(env);

const result = await composio.execute(
  "KIBANA_ACTION_NAME",
  { /* action parameters — see Actions section below */ }
);

return new Response(JSON.stringify(result), {
  headers: { "Content-Type": "application/json" }
});

Replace ACTION_NAME with one of the slugs listed in the Actions section below. The composio client handles auth + rate limits automatically — no API key is exposed to user code.

Setup

End-users supply their own Kibana API key. OverSkill provides a pre-built connection form via the integration card — your app can call the composio client immediately once the user has connected.

Available actions

47 actions exposed via the Kibana integration. Each maps to a callable slug — pass it to composio.execute(...) in your worker code.

• KIBANA_DELETE_ALERTING_RULES
• KIBANA_DELETE_CONNECTORS
• KIBANA_DELETE_FLEET_OUTPUT
• KIBANA_DELETE_FLEET_PROXY
• KIBANA_DELETE_LIST
• KIBANA_DELETE_OSQUERY_SAVED_QUERIES
• KIBANA_DELETE_SAVED_OBJECTS
• KIBANA_FIND_ALERTS
• KIBANA_GET_ACTION_TYPES
• KIBANA_GET_ALERTING_RULES
• KIBANA_GET_ALERT_TYPES
• KIBANA_GET_CASES