We have data in different databases. One is a relational database, and another is NoSQL. They are different services. They host document-like data. We used Elastic to convert the data structurally. We used Elastic as a multi-service search engine. It is a good solution. It is too powerful.

External reviews
External reviews are not included in the AWS star rating for the product.
A highly scalable and powerful tool that provides excellent indexing features
How has it helped my organization?
What is most valuable?
I would advise anyone to use the product. It is good. Data indexing of historical data is the most beneficial feature of the product.
What needs improvement?
The solution must provide AI integrations. I could direct my data flow to my AI tools if I use Elastic for IoT data.
For how long have I used the solution?
I have been using the solution since 2007.
What do I think about the stability of the solution?
I rate the stability an eight out of ten.
What do I think about the scalability of the solution?
The solution provides powerful scalability. I rate the scalability a ten out of ten. Our clients are medium-sized businesses.
How are customer service and support?
I do not need technical support because the product works well.
How was the initial setup?
The initial setup was very easy. I rate the ease of setup an eight out of ten. The setup can be done within minutes.
What's my experience with pricing, setup cost, and licensing?
I use the community version. The premium license is expensive. I rate the tool’s pricing an eight out of ten.
What other advice do I have?
With the power of Kibana, we can easily and dynamically analyze and summarize our log data. The internet has information about all the technical solutions. I bought some courses from Udemy for Elastic Search. I also got some documents from Elastic Search. The documentation for Java is very good. It was sufficient to learn as a developer.
I could integrate my products to Elastic Search easily. I use the default index for my solution, and it works very well. Elastic’s indexing policies are very good. I do not need any indexed operations for my solution. Overall, I rate the tool a nine out of ten.
Which deployment model are you using for this solution?
Scalable platform with an easy initial setup process
What is our primary use case?
We use the product for log analytics and metrics features.
What is most valuable?
We can easily collect all the data and view historical trends using the product. We can view the applications and identify the issues effectively.
What needs improvement?
They could improve some of the platform's infrastructure management capabilities. There should be better visualization and insights about the cost of the SaaS services, which are not effective. Additionally, there needs to be more native integrations to merge the data.
For how long have I used the solution?
We have been using Elastic Search for about a year.
What do I think about the stability of the solution?
I rate the stability a ten out of ten.
What do I think about the scalability of the solution?
It is a highly scalable application. We have 15 users in our management team. I rate the scalability an eight out of ten.
Which solution did I use previously and why did I switch?
I have experience working with Splunk in the past.
How was the initial setup?
The initial setup for the SaaS platform is quite easy. We took assistance from an engineer for the onboarding. Thus, it was straightforward for us. However, there could be a better integration with AWS.
I rate the process a seven out of ten.
What's my experience with pricing, setup cost, and licensing?
I rate Elastic Search's pricing an eight out of ten.
What other advice do I have?
By integrating Deepgram insights with the product, we've gained visibility into logging, service behavior, and cost optimization.
I rate Elastic Search a nine out of ten.
Arbitrary Pricing
I have used Elastic a lot in the past and I really like it. This product was exactly what I was expecting and it worked well. What I didn't like was the $520 bill I got.
I was in disbelief. I messaged them that there must have been an error and I was told it was not. I contacted both Amazon and Elastic. Amazon says that if Elastic gives me a refund, it will be removed from my bill. Elastic says that they cannot remove the charge because it was "self inflicted."
I do not know what I did to incur this large of a bill. You can really spend a lot of money on this extension in only a few clicks and without being aware that you are doing so.
I started a free trial, then I used the service for a few days, making <25 requests to Elastic in entirety. Overall, I think that the content of the billing pages and the UX of the Elastic Suite is aimed to mislead its users which I find to be unfortunate.
For instance, their billing page (https://www.elastic.co/pricing) says that Enterprise Search can be as low as $175 per month. I do not see how that could possibly be the case because I only had a test index with 4-5 documents in it and made <25 requests to the index in total and racked up a $520 bill.
I am almost certain there is a legal case to be had here if I cared enough and had the time to pursue one.
Good tool for observability for storing and analyzing data
What is our primary use case?
What is most valuable?
What needs improvement?
For how long have I used the solution?
What do I think about the stability of the solution?
What do I think about the scalability of the solution?
How are customer service and support?
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
How was the initial setup?
What about the implementation team?
What's my experience with pricing, setup cost, and licensing?
What other advice do I have?
Which deployment model are you using for this solution?
An open-source solution for log management but improvement is needed in Kibana dashboard and authentication
What is our primary use case?
We use the product for log management.
What is most valuable?
The products comes with REST APIs.
What needs improvement?
Elastic Search needs to improve authentication. It also needs to work on the Kibana visualization dashboard.
For how long have I used the solution?
I have been using the product for six years.
What do I think about the stability of the solution?
I rate the product's stability a nine out of ten.
What do I think about the scalability of the solution?
I rate Elastic Search's scalability a ten out of ten.
How are customer service and support?
The technical team needs to improve their response time.
How would you rate customer service and support?
Positive
How was the initial setup?
The tool's deployment is easy. It took us one day to deploy a seven-node Elastic Search cluster.
What's my experience with pricing, setup cost, and licensing?
Elastic Search is open-source, but you need to pay for support, which is expensive.
What other advice do I have?
The solution suits medium to large companies better. I rate it a nine out of ten.
Which deployment model are you using for this solution?
Played a crucial role in enhancing our cybersecurity efforts
How has it helped my organization?
Elastic Search significantly improved our blog management at the organization. It played a crucial role in enhancing our cybersecurity efforts by allowing me to identify the geographical origins of web traffic. This feature was instrumental in identifying and mitigating potential threats from various actors. The ability to pinpoint the source of the traffic helped in quickly addressing security concerns and filtering out potential threats.
What is most valuable?
The most valuable features are its user-friendly interface and seamless navigation. The abundance of tutorials and helpful mocktails significantly contributed to the ease of managing the system. The user interface stood out for its accessibility, making it straightforward to perform tasks and queries. The availability of resources, such as tutorials and mocktails, not only facilitated my learning process but also enhanced the overall usability of Elastic Search. Additionally, the ability to seamlessly integrate Elastic agents into our system not only enhanced our overall efficiency but also facilitated smooth integration with the cloud. The versatility of adding Elastic agents and leveraging the source components provided a comprehensive solution for managing and optimizing our system.
What needs improvement?
Elastic Search could benefit from a more user-friendly onboarding process for beginners. Creating a module or series specifically designed for those new to Elastic Search would be valuable, starting with the basics and gradually introducing the integration of Elastic Search with emerging technologies like AI. Additionally, it would be helpful to see improvements in mailing integration and potentially offer a more accessible pricing tier for individuals or students who are just starting to explore security and monitoring aspects. A tier tailored for the average user, focusing on simplicity and affordability, could attract a broader audience and encourage long-term use.
What do I think about the stability of the solution?
I would rate the stability of Elastic Search at a solid nine out of ten. Throughout my usage, I didn't encounter any failures, errors, or unexpected shutdowns. It was a reliable experience, and the fact that it didn't stop working unexpectedly was a relief.
What do I think about the scalability of the solution?
It is quite scalable.
Which solution did I use previously and why did I switch?
I used a different solution before switching to Elastic Search because Elastic Search offered a wider range of features. The other solution focused on monitoring app usage, Elastic Search stood out with its extensive modules, cloud deployment options, and flexible monitoring capabilities. Despite Splunk being a bigger name, I found Elastic Search to be more versatile and enjoyed using it.
How was the initial setup?
Initially, deploying Elastic Search was a bit challenging for me as it was my first time using the Elastic Stack. Setting it up to monitor traffic on multiple VMs, including an enterprise-level VM, posed some configuration hiccups, especially when connecting to the cloud. I had to rely on online resources and Google searches to troubleshoot and figure things out. While I eventually got through it, the process felt overwhelming with lots of information to digest at once. As for maintenance, during the short period I used it for a lab, there wasn't much to handle beyond shutting it down and reinstalling it at the end. I can't speak to long-term maintenance since my usage was relatively brief.
What was our ROI?
Elastic Search has provided a valuable return on investment by enhancing effectiveness and aiding in learning about security features. It has saved me an estimated couple of hundred dollars in both time and money.
What's my experience with pricing, setup cost, and licensing?
Elastic Search is a bit pricey, especially for individuals or small learners interested in cybersecurity. It could be more affordable for personal use, making it accessible to a broader audience learning about network security and traffic monitoring.
What other advice do I have?
My advice to anyone who is evaluating Elastic Search is to explore the user-friendly website and navigate to the documentation or resources section. Start with a basic overview of the components, and how they work together, and try simple tasks like searching or detecting. The key is to begin with something straightforward. Utilize the documentation to understand how to get started and explore the various integrations Elastic Search offers. Overall, I would rate it as an eight out of ten.
Which deployment model are you using for this solution?
Good for text-based search and dashboard creation, an active community, and strong support from contributors
What is our primary use case?
For me, the primary use case of Elasticsearch is log analysis, as it is a text-based search tool. To explain how it works, let's consider its role at the backend. Elasticsearch operates on keywords used to fetch data. This is in contrast to some databases, where operations might be based on a key order or a primary key, allowing for various maintenance and analysis tasks.
Many people use Elasticsearch to store their application logs in JSON format. These logs are indexed, facilitating efficient search and analysis. Additionally, Elasticsearch integrates well with tools like Grafana and Kibana, enabling users to create diverse dashboards for data visualization.
There's also the text-based search scenario. For instance, if a user wants to search for something using a specific keyword, Elasticsearch excels in this area by creating multiple indices.
Elasticsearch is a versatile tool that can store and retrieve information effectively, making it suitable for various applications across different industries.
What is most valuable?
Elasticsearch is a quick search engine tool. A good use case is saving metadata of your systems for data cataloging. Various systems, like those opened in metadata and similar applications, use Elasticsearch to store their text data. However, the major use case for many is to store application logs and build different dashboards on top of it.
What needs improvement?
The use of Elasticsearch is very specific. It is not helpful for storing your OLTP data. Elasticsearch's specific use is when you need to provide text-based search functionality. That's when Elasticsearch becomes relevant.
For instance, for log analysis or searching values, Elasticsearch performs very well. However, there are challenges with performance management and scalability, particularly how developers manage these aspects.
For example, Kubernetes is a popular choice as it offers the needed features to run your application and allows performance optimization in response to increased system load, and managing itself. If you plan to deploy Elasticsearch with limited or predefined resources, it may not be the ideal setup.
Therefore, it's better to create ultimate commerce capabilities for it. This is the challenge people are facing in the market and the solution for it. So, this answer combines two aspects: the challenge and its solution.
For how long have I used the solution?
I have been using Elasticsearch for almost a year now. I'm comfortable working with it and understand its functionalities.
What do I think about the scalability of the solution?
In our organization, it's not so much about the number of people as it is about the number of products utilizing it. Currently, we use Elasticsearch in more than 12 products.
It's become essential for any component that requires text-based functionality. Besides that, it's also used for logging to analyze application performance, peak times, etc. Elasticsearch is a basic component of the architecture for each of these products.
How are customer service and support?
Most of our deployments are not exposed to the Internet or public networks; they're restricted to closed networks. We don’t frequently upgrade from previous versions unless a specific use case arises.
In such cases, we usually turn to the developer community for support.
Another scenario is when running the application in a careful mode, where the main requirement is to change the image name in the configuration. Then, we check for any changes or incompatibilities with previous versions. Upgrades can sometimes introduce issues if they’re not compatible with existing configuration files, but it's generally not too problematic to handle.
How was the initial setup?
Deploying in Kubernetes is not complex. There are many resources in the market, like DevOps guys and guides, which make the process straightforward. The deployment can be done in a matter of minutes. You basically run a configuration file to set up your application, define replicas, and so on. It shouldn't take much time; even with an expert, it's a matter of a few hours.
However, the key lies in following best practices and configuring your files properly. If you follow the best practices, you'll likely face fewer issues. But if not, problems are inevitable.
It’s crucial to analyze these practices, considering factors like bandwidth, data volume, user interaction, and how it's read by different applications. These considerations help in managing resources and scalability, including scaling up and down your Elasticsearch container. These points are vital for running Elasticsearch efficiently, especially for text-based search applications.
You can deploy it as required. Elasticsearch is versatile; you can run it on Kubernetes, in the cloud, or on-premises. There is no limitation in terms of deployment options.
What's my experience with pricing, setup cost, and licensing?
The cost varies based on factors like usage volume, network load, data storage size, and service utilization. If your usage isn't too extensive, the cost will be lower.
However, if you're dealing with high volumes, you'll need to reconsider the cost-effectiveness. If there are no challenges or bottlenecks in buying a service from a cloud service provider, that might be a viable option.
But if you're concerned about price or issues like exposing your data to the public cloud, then deploying on-premises and conducting stress testing becomes important. It’s a part of the learning and development process, not just a deployment for production.
You need to pass through testing processes in the development environment and then move to staging and production. This involves various tests to understand user access patterns, data push, and performance assessment. Deploying on your own requires considering all these factors. On the other hand, if you use a cloud service, many of these concerns aren't your responsibility.
What other advice do I have?
If you're interested in using Elasticsearch as a search tool and for cloud data integration, comparing it with alternatives like Amazon Cloud Search or Azure Search is valid. Many cloud service providers that offer text-search services are utilizing Elasticsearch. They've implemented best practices and resolved a myriad of issues experienced by companies using Azure, AWS, or GCP.
These providers have integrated Elasticsearch into their cloud offerings effectively. Choosing their services might be preferable due to lower operational costs on your side.
In case of any disaster or issue, their development and DevOps teams are available to support you. However, if you face limitations, like client requirements prohibiting data storage in public or private clouds, then deploying Elasticsearch on-premises would be your alternative.
I would definitely rate it an eight out of ten, which is very good. The reason is the active community continuously working on it, and the support from contributors and the support team is notable. Because Elasticsearch is very specific in its use cases.
It excels in text-based search and creating dashboards for application logs. It provides results and functionality that are hard to find in alternative tools. So, if you have a use case that fits, Elasticsearch is a great service without any direct alternatives.
A powerful and scalable search and analytics engine ensuring easy deployment, schema-less document storage, extensive documentation, and strong community support
What is our primary use case?
We use it for locating and retrieving documents, particularly in scenarios where the data lacks a predefined structure. These documents may encompass various types of information, such as logs or other records.
What is most valuable?
It is highly valuable because of its simplicity in maintenance, where most tasks are handled for you, and it offers a plethora of built-in features.
What needs improvement?
Currently, their focus seems to be on expanding integrations and introducing more external tools, somewhat diverging from enhancing the core product. While integrating with tools like agents for ingesting data from sources like firewalls is valuable, I believe prioritizing improvements to the core product would be more beneficial. For instance, the development of a multi-step query engine could significantly enhance user experience. The ability to execute queries, receive results, and then perform subsequent queries based on those results is a fundamental feature that, while achievable through code, seems to be lacking as a built-in capability. While they possess a robust infrastructure, the current upgrade process isn't seamless and can result in downtime. As a customer, this can be frustrating, especially when there are methods like replicating to a new instance, performing the upgrade, and then transitioning back, which could potentially minimize downtime. This is crucial in a cloud service where ensuring availability is paramount, considering the significant investment in such services.
For how long have I used the solution?
I have been working with it for two years.
What do I think about the stability of the solution?
It offers good stability capabilities.
What do I think about the scalability of the solution?
It is a scalable tool, but it's not impressive. The challenge arises when scaling out becomes prohibitively expensive. Instead of offering end-users the flexibility to specify the number of instances, there's a tendency to provide preconfigured packages. This approach may not be ideal, particularly for those seeking smaller scale-ups.
How are customer service and support?
Their documentation is commendable as it provides a clear understanding of their offerings. Also, the accessibility to their support further enhances user-friendliness, making it a straightforward and user-friendly experience. While it may be slow, their competence in what they do is evident. I would rate it eight out of ten.
How would you rate customer service and support?
Positive
How was the initial setup?
The initial setup was straightforward.
What about the implementation team?
Setting up the system initially is quite straightforward, but when it comes to upgrades, the process becomes more challenging. It was an in-house deployment. The primary focus is on designing the solution, considering factors like the importance of replication, cluster size, speed, and disk space. I appreciate their approach of guiding you through these considerations, making it easier to grasp the bigger picture. This initial design phase is a complex but crucial step. Once that's sorted, the subsequent steps are relatively straightforward—just a few clicks to establish the baseline. If you're working on a standard deployment, it's a hassle-free process.
What's my experience with pricing, setup cost, and licensing?
The pricing structure depends on the scalability steps. It begins as quite affordable and maintains affordability for a while. However, there's a turning point where it transitions from being reasonably priced to becoming notably expensive.
Which other solutions did I evaluate?
We've explored a few alternatives, but I believe Elasticsearch, particularly with Elastic and Elastic Cloud, stands out as the current industry standard. Opting for a widely used platform is advantageous due to the larger community it attracts. A substantial user base means more people to consult, numerous information sources, and a wealth of case studies. While there are smaller, medium, and even large alternatives, having around eighty percent of the community share provides a significant pool of expertise and resources to tap into.
What other advice do I have?
The main reason we opted for it is because the installation is straightforward, and maintenance is made easy as they handle that aspect for you. The extensive knowledge base offers substantial assistance, making it less reliant on individual expertise. I believe it's a solid product, especially for beginners. While it's not free, it's well-suited for more complex tasks. Keep in mind that for intricate functionalities, you might need to develop and create tools beyond what Elastic Cloud offers. If you're considering a cloud-based solution for schema-less documents, Elasticsearch is a solid choice. On the other hand, if you have the resources to handle on-premises installation, I would recommend it for companies with the capability to manage the deployment themselves. Overall, I would rate it eight out of ten.
Which deployment model are you using for this solution?
Easy to use but room for improvement in stability
What is our primary use case?
We save credentials, new account information, logs from Palantir Panorama, Firefox logs, traffic logs, GlobalProtect logs from our servers, and Active Directory new users. We're still improving this, but not very fast.
What is most valuable?
I appreciate that Elastic Enterprise Search is easy to use and that we have people on our team who are able to manage it effectively.
What needs improvement?
We are keeping an eye on other products like QRadar and Splunk in case they offer features that would benefit our company.
We currently use the free version of Elastic Search for some of our logs. However, if we were to use it more extensively, we would need to consider the pricing of the paid plans.
Another area of improvement is stability.
For how long have I used the solution?
I have been using this solution for five years now.
What do I think about the stability of the solution?
I would rate the stability a seven out of ten. We faced a few issues.
What do I think about the scalability of the solution?
I would rate the scalability a seven out of ten.
How are customer service and support?
We don't use the support because we use the free version.
What about the implementation team?
We were able to handle the deployment ourselves. We have one administrator and three users for this solution. So, there are four people in total.
What's my experience with pricing, setup cost, and licensing?
I use the free version. We use the free version for some logs, but not extensive use.
What other advice do I have?
Overall, I would rate the solution a seven out of ten. The free version is not very useful.
Which deployment model are you using for this solution?
Template Doesn't work
The Template provided by them isn't working at all. The "S3 error: Access Denied" is denying CopyZipsTemplate from creation. I have been trying to deal with it for hours but there is no solution for this issue.