Elastic Stack 5.5.0 Released

Editor's Note (August 3, 2021): This post uses deprecated features. Please reference the map custom regions with reverse geocoding documentation for current instructions.

5.5 is here!

In 5.4 we announced the addition of machine learning features to X-Pack. This beta release was an opportunity to gain valuable input from users, at scale, to tweak the implementation of the product. We are super excited that, as of 5.5, machine learning is GA! If you arent, yet, familiar with it a great place to start is by installing X-Pack and reading Introducing Machine Learning for the Elastic Stack.

Machine learning is not yet enabled on Elastic Cloud. Stay tuned for updates! All other features are available today.

The hits keep on coming. With this release we are adding the Elastic Stack Monitoring Service for our customers. Put simply, we (Elastic) will manage a dedicated monitoring cluster -- run in Elastic Cloud -- to host your monitoring data. If you partner with our support team already, you can probably imagine how providing immediate access to your monitoring data will streamline the conversations when you open a support ticket for cluster issues.


For more detailed information, and many other features, peruse the Elasticsearch detail post.

  • Its windows. Its Elasticsearch. Its the Windows MSI Installer for Elasticsearch with both GUI and silent installation support.
  • If you are an X-Pack security user, it is important to upgrade to 5.5.0 to address a leak of sensitive configuration information.
  • Need to sort in a language-specific word order? You are going to <3 the icu_collation_keyword field type.


Visualize all the features, and Discover more information in the detail post.

  • The ability to view surrounding documents (the Context View) was incredibly popular. We took it a step further by adding a filter bar.
  • Filters are powerful. Adding filter editors (drop-downs, text-boxes) will change the way you interact with Discover
  • The Elastic Maps Service now supports region maps!

As part of the GA of machine learning, X-Pack monitoring now includes data from your machine learning jobs! Assigned nodes, number of processed documents, and a jobs state over time are all presented. We will continue to add more features in upcoming releases.


For more information, grok the detail post.

  • Using the Elasticsearch Output? Wish you had a dead letter queue? You are going to love 5.5
  • Regex got you down? Rely on Grok heavily in your ingest pipeline? Say Heya to the Grok Debugger in Kibana!


  • In order to have forward compatibility with Elasticsearch 6.0, which removes types, the Beats now hard-code the _type to doc. This is a breaking compatibility change, but the types werent used in our sample dashboards, so we expect the impact to be small.
  • The CPU times are scaled by the number of cores, for consistency among modules.


Weve Reduced the features to a few bullets, but the full Map is in the detail post.

  • Where colons (:) or pipes (|) are you preference, 5.5 supports both delimiters when extracting date formats
  • TTL and Timestamp are being removed in ES 6.0. Warnings will be logged beginning with this release
  • Both Hadoop 1.x and Elasticsearch on YARN are being deprecated in this release. Check the post for all the details.

Get It Now!