> For the complete documentation index, see [llms.txt](https://0xzoro.gitbook.io/0xzoro/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://0xzoro.gitbook.io/0xzoro/soc-operations/detection-engineering/05-elastic-api-metrics.md).

# 05 elastic api metrics

> **Course:** TCM Security — Detection Engineering\
> **Notes standard:** see [Detection Engineering Note-Taking Skill](broken://pages/28f9a000c99d2b8a9ccb58770e3faedf4f7a7384)\
> **Scope:** Elastic API (keys, pushing/updating rules); GitHub Actions (validation, upload, Elastic sync); and metrics (TOML → CSV/MD/JSON, status badges).

*No sections yet — content is appended here as the course progresses.*