Command-line tools [commands]

{{es}} includes a set of command-line tools in its bin subdirectory (for example, /usr/share/elasticsearch/bin). These tools support tasks such as generating TLS/SSL certificates, configuring security settings and user credentials, enrolling or reconfiguring nodes, managing corrupted shards, and other node-level administrative operations that are only possible, or simpler to perform, outside the REST API.

:::{important} The tools are intended for use in self-managed environments and are included with all {{es}} software packages and Docker images, but are not accessible in fully managed {{ecloud}} deployments such as {{ech}} or {{serverless-full}}. Similarly, they are not designed for use in {{ece}} or {{eck}}. :::

The following tools are available:

• elasticsearch-certgen
• elasticsearch-certutil
• elasticsearch-create-enrollment-token
• elasticsearch-croneval
• elasticsearch-keystore
• elasticsearch-node
• elasticsearch-reconfigure-node
• elasticsearch-reset-password
• elasticsearch-saml-metadata
• elasticsearch-setup-passwords
• elasticsearch-shard
• elasticsearch-syskeygen
• elasticsearch-users