Elasticsearch — Index each run as a doc — full-text search across run history.

What it does

[Elasticsearch](https://www.elastic.co/elasticsearch/) (and the API-compatible [OpenSearch](https://opensearch.org)) is the de-facto search engine for full-text, faceted, and aggregation queries over high-volume document streams. This sink POSTs one JSON document per peepshow run to `/<index>/_doc`, letting the server assign the id and auto-create the index. Once indexed, run transcripts, titles, and container tags become queryable via Kibana / OpenSearch Dashboards or any Elastic SDK.

When to reach for it

• Search run history by transcript text — find every video where the agent heard the word "crash"
• Build a Kibana / OpenSearch Dashboards view over peepshow runs for ops or stakeholders
• Pipe runs into an existing ELK stack already aggregating product logs

Install

npm i -g peepshow

Use it

ELASTICSEARCH_URL="http://localhost:9200" \
peepshow ./demo.mp4 --sink elasticsearch

Make it automatic

Register the sink once — every run fires it afterward. Scope by --when so it only runs for matching videos.

peepshow sinks add elasticsearch
peepshow sinks add elasticsearch --when extension=mp4,mov
peepshow sinks add elasticsearch --when path=/Volumes/Work/

Configuration

• ELASTICSEARCH_URL Base URL of the Elasticsearch / OpenSearch cluster, e.g. `https://es.example.com:9200`. required
• ELASTICSEARCH_INDEX Index name. Default `peepshow-runs`. Auto-created on first write.
• ELASTICSEARCH_API_KEY Encoded API key (sent as `Authorization: ApiKey <k>`). Preferred over Basic auth.
• ELASTICSEARCH_USERNAME Basic auth user. Mutually exclusive with `ELASTICSEARCH_API_KEY`.
• ELASTICSEARCH_PASSWORD Basic auth password. Required when username is set.
• PEEPSHOW_FRAME_BASE_URL When set, the first frame URL is written to the `thumbnail_url` field.

# Add to ~/.zshrc, ~/.bashrc, or a project .env the agent can load
export ELASTICSEARCH_URL="..."

peepshow sinks add elasticsearch
peepshow sinks add elasticsearch --when extension=mp4,mov

Write your own

A sink is any executable that reads the --emit json payload on stdin. Shell, Node, Python, Go — the spec's in docs/PLUGINS.md. Register persistent ones with peepshow sinks add-cmd 'your-command'.