Amazon Elasticsearch Service lets you search, analyze, and visualize your data in real-time. This service manages the capacity, scaling, patching, and administration of your Elasticsearch clusters for you, while still giving you direct access to the Elasticsearch APIs and allowing you to focus on building innovative applications.
Easy to deploy and manage
Fully managed: You can deploy a production-ready Elasticsearch cluster in minutes. We do the operational heavy lifting, so you don’t spend your time on operational tasks such as hardware provisioning, software installing and patching, failure recovery, backups, and monitoring.
Easy setup and configuration: You can setup and configure your Amazon Elasticsearch domain easily with a few clicks in the console or via a single API call through the AWS Command Line Interface (CLI) or the AWS SDK. While creating a new domain you can specify the number of instances, instance types, and storage options. You can also modify or delete existing domains at any time.
Flexible storage: You can choose between local on-instance storage or Amazon EBS volumes to store your Elasticsearch indices. You can specify the size of the Amazon EBS volume to be allocated to the domain and the volume type - Magnetic, General Purpose, or Provisioned IOPS. You can also modify the storage options after domain creation as needed.
Direct access to Elasticsearch API: Get direct access to the Elasticsearch APIs to load, query, analyze data, and manage indices.
Data durability: You can build data durability for your Amazon Elasticsearch domain through automated and manual snapshots. You can use snapshots to recover your domain or to create a new domain with preloaded data. By default, the Amazon Elasticsearch Service will automatically create daily snapshots of each domain and retain them for 14 days. You can also use the Elasticsearch snapshot APIs to create additional manual snapshots. The automated snapshots are stored free of charge in Amazon S3, while the manual snapshots will incur standard Amazon S3 usage charges.
Plugin support: Amazon Elasticsearch Service comes prepackaged with plugins available from the Elasticsearch community including, Kuromoji, ICU, Phonetic Analysis, Smart Chinese Analysis plugin, Stempel Polish Analysis plugin, Ingest Processor Attachment plugin, Ingest User Agent Processor plugin and Mapper Murmur3 Plugin. Plug-ins are automatically deployed and managed for you.
Monitoring and metrics: Amazon Elasticsearch Service exposes domain performance metrics including number of instances, domain health, searchable documents, Amazon EBS metrics (if applicable), CPU, memory, and disk utilization for data and master nodes through Amazon CloudWatch. You can use these metrics to monitor the health of your domain and take any necessary actions.
Integrated with open-source tools and AWS Services
Easy data ingestion: You can easily ingest structured and unstructured data into your Amazon Elasticsearch domain with Logstash, an open-source data pipeline that helps you process logs and other event data. You can set up your Amazon Elasticsearch domain as the backend store for all logs coming through your Logstash implementation. You can also ingest data into your Amazon Elasticsearch domain using Amazon Kinesis Firehose, AWS IoT, or Amazon CloudWatch Logs. For more information, see the Amazon Elasticsearch Service data ingestion page.
Built-in Kibana support: You can get faster and better insights into your data using Kibana, an open-source analytics and visualization platform. Kibana is automatically deployed with your Amazon Elasticsearch Service domain.
You can easily add or remove instances and modify Amazon EBS volumes to accommodate data growth without any downtime. With a few lines of code, you can monitor the state of your domain through Amazon CloudWatch metrics and call the Amazon Elasticsearch Service API to scale your domain up or down based on thresholds you had set.
You can securely connect your applications to your managed Elasticsearch environment, from your VPC or via the public Internet. You can configure network access using VPC security groups or IP-based access policies. You can authenticate users to the service through enterprise identity providers such as Microsoft Active Directory using SAML 2.0 via Amazon Cognito and restrict access to specified authenticated users using AWS Identity and Access Management (IAM). IAM policies can be set up to provide fine-grained access control to the management API for operations like creating and scaling domains and the data plane API for operations like uploading documents and executing queries. The node-to-node encryption capability provides an additional layer of security by implementing TLS for all communications between instances in the Elasticsearch domain. AWS Key Management Service (KMS) lets you encrypt data in Amazon Elasticsearch Service at-rest, including primary and replica indices, log files, memory swap files, and automated snapshots. In addition, you can monitor and audit your domain with AWS CloudTrail. The AWS API call history produced by AWS CloudTrail enables security analysis, resource change tracking, and compliance auditing.
You can configure your Amazon Elasticsearch domains for high availability by enabling the Zone Awareness option either at the time of domain creation or by modifying a live domain. When Zone Awareness is enabled, Amazon Elasticsearch Service will distribute the instances supporting the domain across two different availability zones. Then, if you enable replicas in Elasticsearch, the shards are automatically distributed in such a way as to deliver cross-zone replication.
With Amazon Elasticsearch Service, you pay only for what you use. There is no upfront fee or usage requirement. If you choose Reserved Instances for a one- or three- year term, you can run Amazon Elasticsearch Service at significantly discounted prices. Because Amazon Elasticsearch is a fully managed service, you don’t need a team of Elasticsearch experts to provision, monitor, and manage the infrastructure, resulting in lower total cost of operations.