Elastic × Tines
Integrating Tines and Elastic enhances security operations by automating threat detection and response workflows, leveraging Elastic’s powerful search and analytics capabilities within Tines’ intuitive automation platform.
Pre-built templates
With Tines, you can easily take any action that has a defined API. We’ve already pre-built some of the most popular ones for you, so you can build quickly.
Build your own connections
With Tines, you can easily take any action that has a defined API using an HTTP request. To build even more quickly, copy a cURL command and paste it into the storyboard.
cURL request
curl -v \
-X GET \
--location \
"https://api.nasa.gov/neo/rest/v1/neo/browse?api_key=DEMO_KEY" \
-H 'Content-Type: application/json'Paste in your Tines story
Full workflow examples
Explore pre-built workflows for Elastic. Use them for inspiration or as a starting point to build your custom automation solution.



Triage Elastic Security alerts and block malicious IPsTools: Elastic, Google, GreyNoise
Search Elastic data sets and display resultsTools: Elastic
Identify false positive alerts from Elastic using a database in NotionTools: Elastic, Notion
Isolate a host protected by Elastic EndpointTools: ElasticConnect quickly
It takes minutes, not months, to connect to tools in Tines.
Explore more resources
Check out our blogs that mention Elastic, browse our learning paths, and more.