Security Workflows with Elasticsearch Integration
Observability and analytics tools compile comprehensive logs, metrics, and alerts. With Blink, you can make the most of these insights with automated workflows.
Run Elasticsearch Queries with Blink Workflows
Blink supports 11 out-of-the-box actions for Elasticsearch so you can run automated workflows to query or aggregate analytics seamlessly.
Elasticsearch is a distributed search and analytics engine used for log analytics, full-text search, security intelligence, business analytics, and operational intelligence use cases.

For structured, repeatable tasks that need to run the same way every time, Blink offers deterministic workflows built on the same Elasticsearch actions. No reasoning required, just reliable execution on a defined path. In the Blink library, we have compiled 8,000 automations that customers can download and run instantly. These automations include workflows for cloud security, compliance, identity & access management, network security, SOC & incident response, and threat hunting.


