Command-line tools
Self-Managed
Elasticsearch includes a set of command-line tools in its bin subdirectory (for example, /usr/share/elasticsearch/bin). These tools support tasks such as generating TLS/SSL certificates, configuring security settings and user credentials, enrolling or reconfiguring nodes, managing corrupted shards, and other node-level administrative operations that are only possible, or simpler to perform, outside the REST API.
The tools are intended for use in self-managed environments and are included with all Elasticsearch software packages and Docker images, but are not accessible in fully managed Elastic Cloud deployments such as Elastic Cloud Hosted or Elastic Cloud Serverless. Similarly, they are not designed for use in Elastic Cloud Enterprise or Elastic Cloud on Kubernetes.
The following tools are available:
- elasticsearch-certgen
- elasticsearch-certutil
- elasticsearch-create-enrollment-token
- elasticsearch-croneval
- elasticsearch-keystore
- elasticsearch-node
- elasticsearch-reconfigure-node
- elasticsearch-reset-password
- elasticsearch-saml-metadata
- elasticsearch-setup-passwords
- elasticsearch-shard
- elasticsearch-syskeygen
- elasticsearch-users