Elasticsearch is a distributed search and analytics engine built on Apache Lucene, offering a JSON REST API for full-text search, structured queries, aggregations, and vector similarity search. It forms the core of the Elastic Stack, alongside Logstash for data ingestion and Kibana for visualization.
Originally released in February 2010 by Shay Banon as a successor to his earlier Compass search server, Elasticsearch became the foundation of Elastic N.V., a company founded in 2012 that went public on the NYSE under the ticker ESTC in 2018.
Key Features
Core capabilities include horizontally scalable, sharded indices, near real-time full-text search with relevance scoring, powerful aggregation queries for analytics, geospatial search, and dense vector fields for semantic and AI-driven search.
The broader Elastic Stack adds Kibana for dashboards and visualization, Logstash and Beats for data ingestion, and dedicated solution layers for observability (logs, metrics, APM) and security (SIEM, endpoint protection).
Pricing
Elasticsearch is free and open source to self-host, currently offered under a choice of the Elastic License, the Server Side Public License, or, since August 2024, the AGPL, after a widely discussed 2021 relicensing away from Apache 2.0 that prompted AWS to create the competing OpenSearch fork.
Elastic monetizes primarily through Elastic Cloud, its managed hosting service, with resource-based tiers historically named Standard, Gold, Platinum, and Enterprise, plus newer serverless, consumption-based pricing options billed per gigabyte ingested and stored.
Key Features
Distributed Full-Text Search — Sharded, replicated indices built on Apache Lucene deliver near real-time full-text search with configurable relevance scoring across large datasets.
Powerful Aggregations — A rich aggregation framework supports analytics queries like metrics, histograms, and bucketing directly within the search engine.
Vector Search for AI — Dense vector fields and approximate nearest-neighbor search enable semantic search and retrieval-augmented generation use cases.
ELK Stack Integration — Native integration with Logstash and Beats for data ingestion and Kibana for visualization and dashboarding.
Elastic Observability — Purpose-built solution for centralized log aggregation, metrics monitoring, and application performance monitoring.
Elastic Security (SIEM) — Security information and event management capabilities built on top of the same search and analytics engine.
Elastic Cloud — Fully managed hosting service, originally built from the 2015 acquisition of Found, offering resource-based and serverless pricing tiers.
Flexible Licensing — Choice of the Elastic License, Server Side Public License, or, since 2024, the AGPL open-source license for self-managed deployments.
Pros & Cons
Pros
Highly scalable, distributed architecture handles massive datasets and high query volumes across industries.
Broad ecosystem of client libraries, plugins, and integrations, backed by a large and active community.
Combined search, observability, and security solutions reduce the need for separate specialized tools.
Return to AGPL licensing in 2024 restored a recognized open-source option after the 2021 SSPL/Elastic License controversy.
Cons
Operating and tuning a production Elasticsearch cluster requires significant expertise in shard management, memory sizing, and node scaling.
Elastic Cloud production costs can scale into the tens of thousands of dollars per month for large or security-focused deployments.
The 2021 relicensing away from Apache 2.0 caused lasting distrust among parts of the open-source community and drove the creation of the competing OpenSearch fork.
Advanced features like machine learning and certain security capabilities remain behind paid subscription tiers rather than the free license.
Pricing
Self-Managed (Free) $0 n/a
Elastic Cloud Standard From ~$95/month monthly
Elastic Cloud Gold From ~$114/month monthly
Elastic Cloud Platinum From ~$131/month monthly
Elastic Cloud Enterprise From ~$184/month monthly
Frequently Asked Questions
Is Elasticsearch free to use?
Yes, Elasticsearch can be self-hosted for free under a choice of licenses, including the AGPL open-source license reintroduced in August 2024; Elastic monetizes primarily through paid Elastic Cloud hosting and premium feature tiers.
What is the difference between Elasticsearch and the ELK stack?
Elasticsearch is the search and analytics engine itself, while the ELK stack refers to Elasticsearch combined with Logstash for data ingestion and Kibana for visualization, often extended with Beats for lightweight data shipping.
Why did Elasticsearch change its license in 2021?
Elastic moved Elasticsearch and Kibana from Apache 2.0 to a dual Server Side Public License and Elastic License in January 2021, citing concerns that cloud providers like AWS were offering the software as a service without adequate collaboration or revenue sharing.
Did Elasticsearch become open source again?
Yes, in August 2024 Elastic added the AGPL as a third licensing option starting with version 8.16.0, making Elasticsearch and Kibana available under a recognized open-source license again alongside the existing source-available options.
What is the main open-source alternative to Elasticsearch?
OpenSearch, an Apache 2.0-licensed fork created by AWS and now governed under the Linux Foundation, is the most direct open-source alternative that emerged in response to Elastic's 2021 relicensing.
Who created Elasticsearch?
Shay Banon created Elasticsearch, releasing the first version in February 2010 as a distributed successor to his earlier Compass search server; he later co-founded Elastic N.V. in 2012 with Uri Boness, Simon Willnauer, and Steven Schuurman.