Skip to content

OpenSearch

SIEM & Observability

Official Website →

OpenSearch is a community-driven, open-source search and analytics suite derived from Elasticsearch and Kibana, maintained by AWS and a growing community of contributors.

Core Components

  • OpenSearch - Distributed search and analytics engine
  • OpenSearch Dashboards - Visualization and user interface
  • Data Prepper - Server-side data collector for trace and log data

Key Features

  • Full-Text Search - Powerful search capabilities with relevance scoring
  • Log Analytics - Centralized logging and analysis at scale
  • Trace Analytics - Distributed tracing for microservices
  • Security Analytics - SIEM capabilities with detection rules
  • Anomaly Detection - Machine learning-based anomaly detection

Use Cases

  • Cost-effective alternative to commercial SIEM solutions
  • Log aggregation and observability
  • Security monitoring and compliance
  • Application search functionality
  • Business intelligence and analytics