Elastic cloud managed service features
Elastic cloud gives you the flexibility to run where you want. Deploy our managed service on Google cloud, Microsoft Azure, or Amazon Web Services, and we'll handle the maintenance and upkeep for you.
Standard
Gold
Platinum
Enterprise
Platform Services
Managed Elasticsearch and Kibana
Deployment autoscaling
Same day version availability
Instant access to security patches
Single-click deployment upgrades
In-place configuration change
Deployment templates
Hot-warm-cold architecture, with automated index curation
Hot-warm-cold architecture, with automated index curation and searchable snapshots
Frozen data tier with automated index curation and searchable snapshots
Automated snapshots (configurable, default every 30 minutes)
REST API for deployment management
REST API support in ecctl cLI, Golang SDK, and generated SDKs
Providers: AWS, Azure, Google cloud
FedRAMP authorized at Moderate Impact level on AWS Govcloud (US)2
High availability across zones
console signup with Google Account
console signup with Microsoft Account
Multi-factor authentication
Multi-user management
Role-based access control
Elastic cloud SAML single sign-on (SSO)
AWS Marketplace billing integration
Microsoft Azure Marketplace billing integration
Google cloud Marketplace billing integration
AWS PrivateLink integration
Azure Private Link integration
Google cloud Private Service connect integration
Encryption at rest with AWS KMS keys
Encryption at rest with Azure Key Vault keys
Encryption at rest with GcP KMS keys
IP filtering
SOc 2 and cSA Star 2 compliance
HIPAA BAA ready
ISO 27001/27017/27018
Elastic Stack operations & management
Storage types
Inverted index (for search)
Evaluating calculated fields at index time
Runtime fields
Lookup runtime fields
Document store (for unstructured)
columnar store (for analytics)
Doc-values only fields
BKD trees (for numeric, dates, geo)
Flattened field type
Histogram field type
Match only text field type
Shape field type
Vector field type
Version field type
Wildcard field type
Data management
Searchable snapshots
Snapshot/restore APIs
Snapshot as simple archives
Snapshot lifecycle management
Snapshot-based peer recoveries
Data rollups
Downsampling
Data streams
Data tiers
Data transforms
Time series indices
Synthetic _source for time series indices
Index lifecycle management
Data stream lifecycle (Preview)
Stack management
Data import tutorials
Ingest Node Pipeline Builder UI
Grok Debugger
Upgrade Assistant
centralized Logstash pipeline management
Scalability & resiliency
clustering and high availability
cluster rebalancing
Advanced cluster rebalancing11
cross-region cross-cluster replication
Same-region cross-cluster replication
cross-environment cross-cluster replication
cross-region cross-cluster search
Same-region cross-cluster search
cross-environment cross-cluster search
Dedicated master nodes
Dedicated coordinating nodes
Elastic Stack security
Secure settings
Data encryption at rest
Encrypted node-to-node communications
Role-based access control
Anonymous access control (public sharing)
Native authentication
Kibana Spaces
Kibana feature controls
Kibana subfeature privileges8
Prelogin access agreement
API Keys management
Elasticsearch Token Service
Single sign-on (SAML, OpenID connect, Kerberos, JWT)
Attribute-based access control
Field- and document-level security
Advanced security for remote clusters
custom authentication and authorization realms
Stack monitoring
Full-stack monitoring (including Beats and Logstash)
Multi-stack monitoring
configurable retention policy
Kibana alerting and actions4
Automatic stack issue alerts
Alerting
Noise reduction capabilities (e.g: Scheduled Snooze, Muting, Deduping, etc.)
Maintenance Windows
Tracking containment rule type (geofencing)
Anomaly detection rule types by Machine Learning
Operational rule type for transforms
Search threshold rule types for Discover
case Management
case user assignment
Elastic connectors (e.g: Server Log and Index)
connectors (Actions) (e.g. email, webhook, Jira, MS Teams, OpsGenie, PagerDuty, Slack, IBM Resilient, ServiceNow®, Tines, Torq)
Watcher
clients
REST APIs
Language clients
Query DSL
console
JDBc client
ODBc client
Tableau connector
Localized UI
English
chinese (Simplified)
French
Japanese
custom plugins
custom plugins
Search & Analysis
Full-text search
Relevance scoring
Highlighting
Type ahead
corrections
Suggestions
Percolations
Async search
Results pinning
Query profiler
Dynamically updateable synonyms
Similarity functions for vector fields
Vector search
Semantic search
Reciprocal Rank Fusion (RRF)
Synonym management
Query Rules
Learning to Rank
Retrievers (tech preview)13
Analytics
Aggregations
Boxplot aggregation
cumulative cardinality aggregation
Geoline aggregation
Geoshape aggregations
Geohexgrid aggregations
Geogrid query
Moving percentiles aggregation
Multi terms aggregation
Normalize aggregation
Range aggregation over histogram fields
Random sampler aggregation
Rate aggregation
Significant terms aggregation p-value score
String stats aggregation
Top metrics aggregation
T-test aggregation
Graph exploration
Vector tiles API
Query languages
Elasticsearch SQL APIs
Event Query Language (EQL)
ES|QL (Elasticsearch Query Language)
cross-cluster ES|QL - Tech Preview
Machine Learning
Data exploration for machine learning
Data Visualizer
File upload wizard
Data drift
Anomaly detection
Single metric and multi-metric
Population/entity analysis
Log message categorization
Rare analysis
Root cause indication
Forecasting on time series
Data frame analysis
Outlier detection
Regression
classification
Feature importance
Inference and model management
Inference
Language identification
Third party model management
Kibana space model separation
Elastic Learned Sparse Encoder (ELSER) for AI Search
Inference API (tech preview)
Inference API - Elastic managed (ELSER and third party) (tech preview)
Inference API - completion integrations (tech preview): Amazon Bedrock, Azure AI Studio, Azure OpenAI, cohere, Google AI Studio, OpenAI
Inference API - embedding integrations (tech preview): Amazon Bedrock, Azure AI Studio, Azure OpenAI, cohere, Google AI Studio, Google Vertex AI, Hugging Face, Mistral, OpenAI
Inference API - rerank integrations (tech preview): cohere, Google Vertex AI
Playground (tech preview)
AIOps
Explain log rate spikes
Log Pattern Analysis
change Point Detection
Elastic Search
Search server
Search management UI
Search stack monitoring
Dashboards for web and search analytics
Embedded Dev console (tech preview)
content Management
content management UI
Ingestion pipeline management
Inference processor management
Extraction Service (Beta)
Machine Learning / AI
Third party model management
Prepared models (Elastic Learned Sparse EncodeR, and third party)
Inference API (tech preview)
Inference API - Elastic managed (ELSER and third party) (tech preview)
Inference API - completion integrations (tech preview): Amazon Bedrock, Azure AI Studio, Azure OpenAI, cohere, Google AI Studio, OpenAI
Inference API - embedding integrations (tech preview): Amazon Bedrock, Azure AI Studio, Azure OpenAI, cohere, Google AI Studio, Google Vertex AI, Hugging Face, Mistral, OpenAI
Inference API - rerank integrations (tech preview): cohere, Google Vertex AI
Playground (tech preview)
Query and relevance
Search Applications
Elasticsearch query DSL
ES|QL (Elasticsearch Query Language)
Language-specific relevance
Vector search
Semantic search
Similarity functions for vector fields
Reciprocal Rank Fusion (RRF)
Synonym management
Query Rules
Behavioral analytics
Learning to Rank
Retrievers (tech preview)13
Native Integrations
Web crawler for Elasticsearch
Azure Blob Storage connector
Box connector
confluence cloud & Server connector
confluence Data center connector
Dropbox connector
GitHub & GitHub Enterprise Server connector
Gmail connector
Google cloud Storage connector
Google Drive connector
Jira cloud & Server connector
Jira Data center connector
MongoDB connector
Microsoft SQL connector
MySQL connector
Network Drive connector
Notion connector
OneDrive connector
Oracle connector
Outlook connector
PostgreSQL connector
S3 connector
Salesforce connector
ServiceNow connector
Sharepoint Online connector
Slack connector
Teams connector
Zoom connector
client Integrations
Elastic open web crawler
connector Framework
connector API
Azure Blob Storage connector client
Box connector client
confluence cloud & Server connector client
confluence Data center connector client
Dropbox connector client
GitHub & GitHub Enterprise Server connector client
Gmail connector client
Google cloud Storage connector client
Google Drive connector client
GraphQL connector client
Jira cloud & Server connector client
Jira Data center connector client
MongoDB connector client
Microsoft SQL connector client
MySQL connector client
Network Drive connector client
Notion connector client
OneDrive connector client
OpenText Documentum connector client
Oracle connector client
Outlook connector client
PostgreSQL connector client
Redis connector client
S3 connector client
Salesforce connector client
ServiceNow connector client
SharePoint Online connector client
Sharepoint Server connector client
Slack connector client
Teams connector client
Zoom connector client
clients
Language clients
Search UI (open source)
Web and search analytics client (Beta)
Security
Encrypted communications
Role-based access control
Single sign-on (SAML, OpenID connect, Kerberos, JWT)
Encryption at rest support
Data Ingest & Transformation
Ingest products & features
Filebeat, Metricbeat, Winlogbeat, Packetbeat10, Heartbeat, Auditbeat, real browser-based synthetic monitoring agent (Beta)
Functionbeat
Logstash
ES-Hadoop
File import wizard
Auto Import (Tech Preview)
Fleet
Fleet Server
Fleet app
Fleet integrations
Elastic Agent
Selective agent binary updates
Scheduled agent binary upgrades
Selective agent policy reassignment
Selective agent unenrollment
Per Policy output assignment
Data sources - For a full list of integrations available, check out our Integrations page.
Abuse.ch
Audit system data
cisco Firepower
check Point Firewall
cloudflare
crowdStrike Falcon
Fortinet Fortigate
File Integrity Monitoring
Google Workspace
Microsoft 365 Defender & Defender for Endpoint
Microsoft (Office) 365
Network Packet capture
NetFlow and IPFIX
Okta
Palo Alto Networks cortex XDR
Palo Alto Networks Firewalls
SentinelOne
Tenable
Zscaler
Data transformation
Index time enrichment
Processors
Analyzers
Tokenizers
Filters
Filter on ANN - vector Search
Grok
Field transformation
External lookup enrichment
circle ingest processor
Match and geo-match enrich processor9
Redact ingest processor
Elastic common Schema
Elastic common Schema
Data Exploration & Visualization
Visualizations
Time series
Geo
Metrics
Tables
Tag cloud
custom (Vega)
Lens
Data exploration
ES|QL (Elasticsearch Query Language)
Dashboards
Drilldown between dashboards
Drilldown to URL
Discover
Field statistics (Beta)
console
Kibana query autocomplete
Kibana runtime fields editor
Run search sessions in background
Graph analytics
Data views
canvas
canvas
canvas shareables
Share & collaborate
Embeddable dashboards
Anonymous access control (public sharing)
cSV exports
PDF and PNG reports
Saved queries
content management
Kibana Spaces
custom banners
Object export UI & APIs
Tags
Navigational search
Elastic Observability
Observability overview
User Experience overview
curated ad hoc data exploration
Service Level Objectives (SLOs)
Kibana alerting and actions4
Universal Profiling
Elastic AI Assistant
Elastic APM3
Elastic APM
APM server
Jaeger intake
OpenTelemetry intake for traces and metrics6
APM app
Distributed tracing
Service maps
correlations
APM language support
Java
.NET
Go
Ruby
RUM (JavaScript)
PHP
Python
Node
Stack integrations
Elastic Logs and Metrics
Kibana alerting and actions4
Machine learning
Elastic Logs
Log shipper (Filebeat)
Dashboards for common data sources
Logs app
Integrations
Elastic Uptime and APM
Kibana alerting and actions4
Log categorization
Machine learning
Elastic Metrics
Metric shipper (Metricbeat)
Dashboards for common data sources
Metrics app
Integrations
Elastic Logs, APM, Synthetic Monitoring Private Locations
Kibana alerting and actions4
Machine learning
Elastic Synthetic Monitoring
Synthetic Monitoring UI
Project Monitors
Managed Test Execution Service12
Private Testing Locations
Point and click Script Recorder
Elastic Universal Profiling
Universal Profiling
cPU Profiling
cO2 footprint Insight
compute cost Insight
Profiling language support
Java (or any JVM language)
Go
Ruby
PHP
Python
Node/V8
Rust
c/c++
Perl
Elastic Security
Elastic common Schema
Extended detection & response (XDR)
Security information and event management (SIEM)
Host security analysis
Network security analysis
User security analysis
Timeline event explorer
case management
Detection engine (e.g., correlation, indicator match, threshold)
Prebuilt detection rules
Detection alerts suppression
Detection alert external actions
Machine learning anomaly detection
Prebuilt anomaly detection jobs
Malware prevention
Admin-defined endpoint blocklist
Ransomware prevention
Malicious behavior protection
Memory threat protection
Self-healing
Host Isolation
Interactive response console
Tamper Protection
Elastic AI Assistant
Threat intelligence management
Threat Intelligence Platform (TIP)
customizable on-endpoint protection notifications
cloud and Kubernetes Security Posture Management (K/cSPM)
Workload session auditing
Integrations
Elastic Agent
Elastic APM
Elastic Maps
Osquery Manager
Network Packet capture10
Threat intelligence feeds and platforms
Machine learning
Kibana Alerts and Actions4
Atlassian Jira
Swimlane SOAR
IBM Resilient
ServiceNow ITOM, ITSM, SecOps
Generative AI connector for Open AI, Azure Open AI, AWS Bedrock
Elastic Maps
Elastic Maps Service5
Base layer maps
Maps app
Shapefile and GeoJSON upload
Multiple layers
Native vector tile support
Layer-based filtering
client-side styling
Individual points and shapes
Tracking alerts
containment alerts
Embed maps in dashboard
Embed maps in canvas
Geo-threshold alerts
Display up to 24 zoom levels
custom raster and vector tile service support
Kibana Alerts: tracking containment (geofencing)
Elastic App Search
Elastic App Search
Index once, sort all you want
customizable relevance model
Language-specific relevance
Synonym management
Analytics API
clickthrough API
Adaptive Relevance: curations (Beta)
Precision tuning (Beta)
Web crawler
Web crawler HTTP proxy authentication
Web crawler HTTP authentication
Web crawler PDF Extraction
Index lifecycle management
Passthrough Elasticsearch queries
Elasticsearch-based App Search engines
Operations
One-click monitoring
Analytics
Searches
clicks
Insights
clients
Python
Ruby
Security & collaboration
Multi-user collaboration
Signed search keys
Engine scoping
Role-based access control
Engine-scoped API keys
Single sign-on (SAML, OpenID connect, Kerberos, JWT)
Meta engines
Audit logging
Elastic Workplace Search
Unified organizational search experience
Workplace Search server
Unified search interface
Out-of-the-box search applications
customizable look and feel
Natural language query filtering
Search history
Typo-tolerant relevance model
Synonym management
customizable filtering and faceting
content source prioritization
Search analytics
Search API
Operations
One-click full stack monitoring
clients
Python
Ruby
content sources
First-party cloud source synchronization
First-party on-premises source synchronization
Global sync scheduling configuration
Source-level scheduling configuration
custom source support via API and connector packages
custom source support via API
Full-text content indexing for files, documents, and records
Document-level permission support
Object synchronization selection
Path-based content synchronization
File extension-based content synchronization
Private sources
content source indexing rules and scheduling
User management & security
Organizational groups
Single sign-on (SAML, OpenID connect, Kerberos, JWT)
Role-based access control
Encrypted communications
Encryption at rest support
Audit logging
Support
Support level
Limited
Base
Enhanced
Premium
Support coverage
Business hours
24/7/365
24/7/365
Target initial response time
Urgent: 4 business hours
High: 1 business day
Normal: 2 business days
High: 1 business day
Normal: 2 business days
Urgent: 1 hour
High: 4 hours
Normal: 1 business day
High: 4 hours
Normal: 1 business day
Urgent: 30 minutes
High: 4 hours
Normal: 1 business day
High: 4 hours
Normal: 1 business day
Unlimited # of incidents
Support contacts7
2
6
8
8
Ticket-based support
SLA-based support
Standard
Gold
Platinum
Enterprise
Platform Services
Managed Elasticsearch and Kibana
Deployment autoscaling
Same day version availability
Instant access to security patches
Single-click deployment upgrades
In-place configuration change
Deployment templates
Hot-warm-cold architecture, with automated index curation
Hot-warm-cold architecture, with automated index curation and searchable snapshots
Frozen data tier with automated index curation and searchable snapshots
Automated snapshots (configurable, default every 30 minutes)
REST API for deployment management
REST API support in ecctl cLI, Golang SDK, and generated SDKs
Providers: AWS, Azure, Google cloud
FedRAMP authorized at Moderate Impact level on AWS Govcloud (US)2
High availability across zones
console signup with Google Account
console signup with Microsoft Account
Multi-factor authentication
Multi-user management
Role-based access control
Elastic cloud SAML single sign-on (SSO)
AWS Marketplace billing integration
Microsoft Azure Marketplace billing integration
Google cloud Marketplace billing integration
AWS PrivateLink integration
Azure Private Link integration
Google cloud Private Service connect integration
Encryption at rest with AWS KMS keys
Encryption at rest with Azure Key Vault keys
Encryption at rest with GcP KMS keys
IP filtering
SOc 2 and cSA Star 2 compliance
HIPAA BAA ready
ISO 27001/27017/27018
Elastic Stack operations & management
Storage types
Inverted index (for search)
Evaluating calculated fields at index time
Runtime fields
Lookup runtime fields
Document store (for unstructured)
columnar store (for analytics)
Doc-values only fields
BKD trees (for numeric, dates, geo)
Flattened field type
Histogram field type
Match only text field type
Shape field type
Vector field type
Version field type
Wildcard field type
Data management
Searchable snapshots
Snapshot/restore APIs
Snapshot as simple archives
Snapshot lifecycle management
Snapshot-based peer recoveries
Data rollups
Downsampling
Data streams
Data tiers
Data transforms
Time series indices
Synthetic _source for time series indices
Index lifecycle management
Data stream lifecycle (Preview)
Stack management
Data import tutorials
Ingest Node Pipeline Builder UI
Grok Debugger
Upgrade Assistant
centralized Logstash pipeline management
Scalability & resiliency
clustering and high availability
cluster rebalancing
Advanced cluster rebalancing11
cross-region cross-cluster replication
Same-region cross-cluster replication
cross-environment cross-cluster replication
cross-region cross-cluster search
Same-region cross-cluster search
cross-environment cross-cluster search
Dedicated master nodes
Dedicated coordinating nodes
Elastic Stack security
Secure settings
Data encryption at rest
Encrypted node-to-node communications
Role-based access control
Anonymous access control (public sharing)
Native authentication
Kibana Spaces
Kibana feature controls
Kibana subfeature privileges8
Prelogin access agreement
API Keys management
Elasticsearch Token Service
Single sign-on (SAML, OpenID connect, Kerberos, JWT)
Attribute-based access control
Field- and document-level security
Advanced security for remote clusters
custom authentication and authorization realms
Stack monitoring
Full-stack monitoring (including Beats and Logstash)
Multi-stack monitoring
configurable retention policy
Kibana alerting and actions4
Automatic stack issue alerts
Alerting
Noise reduction capabilities (e.g: Scheduled Snooze, Muting, Deduping, etc.)
Maintenance Windows
Tracking containment rule type (geofencing)
Anomaly detection rule types by Machine Learning
Operational rule type for transforms
Search threshold rule types for Discover
case Management
case user assignment
Elastic connectors (e.g: Server Log and Index)
connectors (Actions) (e.g. email, webhook, Jira, MS Teams, OpsGenie, PagerDuty, Slack, IBM Resilient, ServiceNow®, Tines, Torq)
Watcher
clients
REST APIs
Language clients
Query DSL
console
JDBc client
ODBc client
Tableau connector
Localized UI
English
chinese (Simplified)
French
Japanese
custom plugins
custom plugins
Search & Analysis
Full-text search
Relevance scoring
Highlighting
Type ahead
corrections
Suggestions
Percolations
Async search
Results pinning
Query profiler
Dynamically updateable synonyms
Similarity functions for vector fields
Vector search
Semantic search
Reciprocal Rank Fusion (RRF)
Synonym management
Query Rules
Learning to Rank
Retrievers (tech preview)13
Analytics
Aggregations
Boxplot aggregation
cumulative cardinality aggregation
Geoline aggregation
Geoshape aggregations
Geohexgrid aggregations
Geogrid query
Moving percentiles aggregation
Multi terms aggregation
Normalize aggregation
Range aggregation over histogram fields
Random sampler aggregation
Rate aggregation
Significant terms aggregation p-value score
String stats aggregation
Top metrics aggregation
T-test aggregation
Graph exploration
Vector tiles API
Query languages
Elasticsearch SQL APIs
Event Query Language (EQL)
ES|QL (Elasticsearch Query Language)
cross-cluster ES|QL - Tech Preview
Machine Learning
Data exploration for machine learning
Data Visualizer
File upload wizard
Data drift
Anomaly detection
Single metric and multi-metric
Population/entity analysis
Log message categorization
Rare analysis
Root cause indication
Forecasting on time series
Data frame analysis
Outlier detection
Regression
classification
Feature importance
Inference and model management
Inference
Language identification
Third party model management
Kibana space model separation
Elastic Learned Sparse Encoder (ELSER) for AI Search
Inference API (tech preview)
Inference API - Elastic managed (ELSER and third party) (tech preview)
Inference API - completion integrations (tech preview): Amazon Bedrock, Azure AI Studio, Azure OpenAI, cohere, Google AI Studio, OpenAI
Inference API - embedding integrations (tech preview): Amazon Bedrock, Azure AI Studio, Azure OpenAI, cohere, Google AI Studio, Google Vertex AI, Hugging Face, Mistral, OpenAI
Inference API - rerank integrations (tech preview): cohere, Google Vertex AI
Playground (tech preview)
AIOps
Explain log rate spikes
Log Pattern Analysis
change Point Detection
Elastic Search
Search server
Search management UI
Search stack monitoring
Dashboards for web and search analytics
Embedded Dev console (tech preview)
content Management
content management UI
Ingestion pipeline management
Inference processor management
Extraction Service (Beta)
Machine Learning / AI
Third party model management
Prepared models (Elastic Learned Sparse EncodeR, and third party)
Inference API (tech preview)
Inference API - Elastic managed (ELSER and third party) (tech preview)
Inference API - completion integrations (tech preview): Amazon Bedrock, Azure AI Studio, Azure OpenAI, cohere, Google AI Studio, OpenAI
Inference API - embedding integrations (tech preview): Amazon Bedrock, Azure AI Studio, Azure OpenAI, cohere, Google AI Studio, Google Vertex AI, Hugging Face, Mistral, OpenAI
Inference API - rerank integrations (tech preview): cohere, Google Vertex AI
Playground (tech preview)
Query and relevance
Search Applications
Elasticsearch query DSL
ES|QL (Elasticsearch Query Language)
Language-specific relevance
Vector search
Semantic search
Similarity functions for vector fields
Reciprocal Rank Fusion (RRF)
Synonym management
Query Rules
Behavioral analytics
Learning to Rank
Retrievers (tech preview)13
Native Integrations
Web crawler for Elasticsearch
Azure Blob Storage connector
Box connector
confluence cloud & Server connector
confluence Data center connector
Dropbox connector
GitHub & GitHub Enterprise Server connector
Gmail connector
Google cloud Storage connector
Google Drive connector
Jira cloud & Server connector
Jira Data center connector
MongoDB connector
Microsoft SQL connector
MySQL connector
Network Drive connector
Notion connector
OneDrive connector
Oracle connector
Outlook connector
PostgreSQL connector
S3 connector
Salesforce connector
ServiceNow connector
Sharepoint Online connector
Slack connector
Teams connector
Zoom connector
client Integrations
Elastic open web crawler
connector Framework
connector API
Azure Blob Storage connector client
Box connector client
confluence cloud & Server connector client
confluence Data center connector client
Dropbox connector client
GitHub & GitHub Enterprise Server connector client
Gmail connector client
Google cloud Storage connector client
Google Drive connector client
GraphQL connector client
Jira cloud & Server connector client
Jira Data center connector client
MongoDB connector client
Microsoft SQL connector client
MySQL connector client
Network Drive connector client
Notion connector client
OneDrive connector client
OpenText Documentum connector client
Oracle connector client
Outlook connector client
PostgreSQL connector client
Redis connector client
S3 connector client
Salesforce connector client
ServiceNow connector client
SharePoint Online connector client
Sharepoint Server connector client
Slack connector client
Teams connector client
Zoom connector client
clients
Language clients
Search UI (open source)
Web and search analytics client (Beta)
Security
Encrypted communications
Role-based access control
Single sign-on (SAML, OpenID connect, Kerberos, JWT)
Encryption at rest support
Data Ingest & Transformation
Ingest products & features
Filebeat, Metricbeat, Winlogbeat, Packetbeat10, Heartbeat, Auditbeat, real browser-based synthetic monitoring agent (Beta)
Functionbeat
Logstash
ES-Hadoop
File import wizard
Auto Import (Tech Preview)
Fleet
Fleet Server
Fleet app
Fleet integrations
Elastic Agent
Selective agent binary updates
Scheduled agent binary upgrades
Selective agent policy reassignment
Selective agent unenrollment
Per Policy output assignment
Data sources - For a full list of integrations available, check out our Integrations page.
Abuse.ch
Audit system data
cisco Firepower
check Point Firewall
cloudflare
crowdStrike Falcon
Fortinet Fortigate
File Integrity Monitoring
Google Workspace
Microsoft 365 Defender & Defender for Endpoint
Microsoft (Office) 365
Network Packet capture
NetFlow and IPFIX
Okta
Palo Alto Networks cortex XDR
Palo Alto Networks Firewalls
SentinelOne
Tenable
Zscaler
Data transformation
Index time enrichment
Processors
Analyzers
Tokenizers
Filters
Filter on ANN - vector Search
Grok
Field transformation
External lookup enrichment
circle ingest processor
Match and geo-match enrich processor9
Redact ingest processor
Elastic common Schema
Elastic common Schema
Data Exploration & Visualization
Visualizations
Time series
Geo
Metrics
Tables
Tag cloud
custom (Vega)
Lens
Data exploration
ES|QL (Elasticsearch Query Language)
Dashboards
Drilldown between dashboards
Drilldown to URL
Discover
Field statistics (Beta)
console
Kibana query autocomplete
Kibana runtime fields editor
Run search sessions in background
Graph analytics
Data views
canvas
canvas
canvas shareables
Share & collaborate
Embeddable dashboards
Anonymous access control (public sharing)
cSV exports
PDF and PNG reports
Saved queries
content management
Kibana Spaces
custom banners
Object export UI & APIs
Tags
Navigational search
Elastic Observability
Observability overview
User Experience overview
curated ad hoc data exploration
Service Level Objectives (SLOs)
Kibana alerting and actions4
Universal Profiling
Elastic AI Assistant
Elastic APM3
Elastic APM
APM server
Jaeger intake
OpenTelemetry intake for traces and metrics6
APM app
Distributed tracing
Service maps
correlations
APM language support
Java
.NET
Go
Ruby
RUM (JavaScript)
PHP
Python
Node
Stack integrations
Elastic Logs and Metrics
Kibana alerting and actions4
Machine learning
Elastic Logs
Log shipper (Filebeat)
Dashboards for common data sources
Logs app
Integrations
Elastic Uptime and APM
Kibana alerting and actions4
Log categorization
Machine learning
Elastic Metrics
Metric shipper (Metricbeat)
Dashboards for common data sources
Metrics app
Integrations
Elastic Logs, APM, Synthetic Monitoring Private Locations
Kibana alerting and actions4
Machine learning
Elastic Synthetic Monitoring
Synthetic Monitoring UI
Project Monitors
Managed Test Execution Service12
Private Testing Locations
Point and click Script Recorder
Elastic Universal Profiling
Universal Profiling
cPU Profiling
cO2 footprint Insight
compute cost Insight
Profiling language support
Java (or any JVM language)
Go
Ruby
PHP
Python
Node/V8
Rust
c/c++
Perl
Elastic Security
Elastic common Schema
Extended detection & response (XDR)
Security information and event management (SIEM)
Host security analysis
Network security analysis
User security analysis
Timeline event explorer
case management
Detection engine (e.g., correlation, indicator match, threshold)
Prebuilt detection rules
Detection alerts suppression
Detection alert external actions
Machine learning anomaly detection
Prebuilt anomaly detection jobs
Malware prevention
Admin-defined endpoint blocklist
Ransomware prevention
Malicious behavior protection
Memory threat protection
Self-healing
Host Isolation
Interactive response console
Tamper Protection
Elastic AI Assistant
Threat intelligence management
Threat Intelligence Platform (TIP)
customizable on-endpoint protection notifications
cloud and Kubernetes Security Posture Management (K/cSPM)
Workload session auditing
Integrations
Elastic Agent
Elastic APM
Elastic Maps
Osquery Manager
Network Packet capture10
Threat intelligence feeds and platforms
Machine learning
Kibana Alerts and Actions4
Atlassian Jira
Swimlane SOAR
IBM Resilient
ServiceNow ITOM, ITSM, SecOps
Generative AI connector for Open AI, Azure Open AI, AWS Bedrock
Elastic Maps
Elastic Maps Service5
Base layer maps
Maps app
Shapefile and GeoJSON upload
Multiple layers
Native vector tile support
Layer-based filtering
client-side styling
Individual points and shapes
Tracking alerts
containment alerts
Embed maps in dashboard
Embed maps in canvas
Geo-threshold alerts
Display up to 24 zoom levels
custom raster and vector tile service support
Kibana Alerts: tracking containment (geofencing)
Elastic App Search
Elastic App Search
Index once, sort all you want
customizable relevance model
Language-specific relevance
Synonym management
Analytics API
clickthrough API
Adaptive Relevance: curations (Beta)
Precision tuning (Beta)
Web crawler
Web crawler HTTP proxy authentication
Web crawler HTTP authentication
Web crawler PDF Extraction
Index lifecycle management
Passthrough Elasticsearch queries
Elasticsearch-based App Search engines
Operations
One-click monitoring
Analytics
Searches
clicks
Insights
clients
Python
Ruby
Security & collaboration
Multi-user collaboration
Signed search keys
Engine scoping
Role-based access control
Engine-scoped API keys
Single sign-on (SAML, OpenID connect, Kerberos, JWT)
Meta engines
Audit logging
Elastic Workplace Search
Unified organizational search experience
Workplace Search server
Unified search interface
Out-of-the-box search applications
customizable look and feel
Natural language query filtering
Search history
Typo-tolerant relevance model
Synonym management
customizable filtering and faceting
content source prioritization
Search analytics
Search API
Operations
One-click full stack monitoring
clients
Python
Ruby
content sources
First-party cloud source synchronization
First-party on-premises source synchronization
Global sync scheduling configuration
Source-level scheduling configuration
custom source support via API and connector packages
custom source support via API
Full-text content indexing for files, documents, and records
Document-level permission support
Object synchronization selection
Path-based content synchronization
File extension-based content synchronization
Private sources
content source indexing rules and scheduling
User management & security
Organizational groups
Single sign-on (SAML, OpenID connect, Kerberos, JWT)
Role-based access control
Encrypted communications
Encryption at rest support
Audit logging
Support
Support level
Support coverage
Target initial response time
Unlimited # of incidents
Support contacts7
Ticket-based support
SLA-based support
Limited
Base
Enhanced
Premium
Business hours
24/7/365
24/7/365
Urgent: 4 business hours
High: 1 business day
Normal: 2 business days
High: 1 business day
Normal: 2 business days
Urgent: 1 hour
High: 4 hours
Normal: 1 business day
High: 4 hours
Normal: 1 business day
Urgent: 30 minutes
High: 4 hours
Normal: 1 business day
High: 4 hours
Normal: 1 business day
2
6
8
8
2 Elastic cloud subscriptions on AWS Govcloud (US) are only available annually at this time (not monthly).
3 Elastic APM is not supported on Elastic cloud Standard when purchased through the AWS Marketplace.
4 Refer to the Alerting section (Kibana Alerts and Kibana Actions items) for further details. Alerting rules based on anomaly detection or SLOs are only available on Platinum and Enterprise tiers.
5 Elastic Maps Service - Terms of Service
6 There are two options for OpenTelemetry intake: native support of the OpenTelemetry protocol directly into APM Server (experimental), and the Elastic exporter on the OpenTelemetry collector, which is the recommended approach. If you choose the latter, note that Elastic cloud does not host the Elastic exporter on the OpenTelemetry collector exporter, refer to documentation to set one up adjacent to your applications.
7 Elastic certified Professionals can be added as additional Support contacts on paid subscriptions at no additional charge.
8 Access to administering Kibana subfeature privileges start at the Gold tier and are available on a per-feature basis matching the feature’s subscriptions tier.
9 Elastic GeoIP Database Service Agreement
10 Re-distributing the Windows release of Packetbeat and the Network Packet capture agent integration for Windows hosts requires an additional license to npcap, a Windows packet sniffing library, that may be obtained from nmap.org.
11 Advanced cluster rebalancing is based on observed data stream write loads described in cluster-level shard allocation.
12 Access to the synthetic monitoring managed testing infrastructure is limited to Elastic cloud users only or users consuming Elastic cloud through a cSP marketplace. Test runs executed on the managed testing infrastructure incur an additional cost.
13 Some retriever features are only available on higher license tiers.
The list above reflects the features available in the latest version of the Elastic Stack. Any features or functions of services or products referenced on this page or other pages, or in any presentations, press releases or public statements, which are not currently available or not currently available as a GA release, may not be delivered on time or at all. The development, release, and timing of any features or functionality described for our products remains at our sole discretion. customers who purchase our products and services should make the purchase decisions based upon services and product features and functions that are currently available.
