Elasticsearch is an open source search and analysis engine distributed for all data types, including textual, numeric, geo-spatial, structured, and unstructured. Elasticsearch was founded on Apache Lucene and was first released by Elasticsearch NV in 2010. Elasticsearch, known for its distributed speed and scalability, is the main component of Elastic Stack, a series of open source tools for enrichment, storage, analysis, and visualization. Elastic Stack, commonly called ELK Stack(after Elasticsearch, Logstash, and Kibana), contains a carrier tool known as Beats to send data to Elasticsearch.
What is Elasticsearch used for?
Elasticsearch has the ability to index speed and scalability and many types of content:
- Search for apps
- Web site search
- Enterprise search
- Loging and log analysis
- Infrastructure metrics and container tracking
- Monitoring application performance
- Spatial data analysis and visualization
- Security analysis
- Business analytics
How does Elasticsearch work?
Raw data comes to Elasticsearch from a variety of sources, including logs, system metrics, and web applications. Data transfer parses this raw data before indexing it in Elasticsearch. After indexing in Elasticsearch, users can run complex queries against their data and receive complex summaries of the data. Users from Kibana can create powerful visualizations of their data, and share dashboards and manage Elastic Stack.
What is Kibana used for?
Kibana is a data visualization and management tool that provides real-time histograms, line charts, pie charts, and maps for Elasticsearch. Kibana also includes advanced applications such as Canvas, which allows users to create custom dynamic Infographics based on their data, and Advanced applications such as Elastic Maps to visualize geographic location data.
What is Logstash used for?
It is used to collect, process, and send Logstash data from ElastStack core products to Elasticsearch. Logstash is an open source, server-side data processing line that lets you retrieve data from multiple sources at the same time and enrich and convert it before indexing to Elasticsearch.
Why Use Elasticsearch ?
Elasticsearch is perfect for full-text search because it is built on Lucene. Elasticsearch is also a real-time search platform, which makes a document searchable from the moment it is indexed, and the latency is very short — typically a second.
Elasticsearch comes with a wide variety of features. In addition to its speed, scalability, and flexibility, Elasticsearch has a range of powerful built-in features that make data such as data collection and index cycle management more efficient.
Elastic Stack makes it easy to visualize and report data reception. With Beats and Logstash integration, it makes it easy to process data before indexing to Elasticsearch, and Kibana enables user interfaces for quick access to application performance monitoring (APM), logs, and infrastructure metric data, as well as real-time display of Elasticsearch data.
Which programming languages does Elasticsearch support?
- .NET (C#)
Click here to learn more