Elastic Blog - Elasticsearch, Kibana, and ELK Stack

Is your SIEM actually ready? A new way to find out

Smriti — Mon, 04 May 2026 00:00:00 GMT

SIEM Readiness is a new capability in Elastic Security, available in technical preview as of 9.4, that provides a centralized, continuously updated, and actionable view of your SIEM's operational health.

Rethinking public sector AI: 5 shifts driving mission outcomes

Oksana Abramovych — Fri, 01 May 2026 00:00:00 GMT

Everyone had a theory on AI in the public sector. Now, see what’s actually working. Join IDC and Elastic to discuss the realities of AI adoption, data sovereignty, and building systems that deliver real impact.

How IT leaders can measure the ROI of agentic AI initiatives

Devin Rhoades — Mon, 04 May 2026 00:00:00 GMT

Gartner® estimates that over 70% of agentic AI use cases will fail to deliver the expected value. Traditional ROI models don't apply. See how we’re successfully measuring agentic AI ROI at Elastic.

Elastic extends production-ready AI capabilities for all!

Elastic Security Team — Wed, 09 Apr 2025 06:00:00 GMT

Elastic Security has a lot of generative AI capabilities, but two of them are now generally available for all Elastic users! Learn about Automatic Import and Attack Discovery.

Herding Llama 3.1 with Elastic and LM Studio

Charles Davison,Julian Khalifa — Thu, 12 Sep 2024 00:00:00 GMT

Learn how to set up Elastic AI Assistant with a locally hosted Meta Llama 3.1 model with LM Studio.

Elastic wins 2025 Best Use of AI for Assisted Support

Julie Baxter-Rudd,Chris Blaisure — Wed, 24 Sep 2025 00:00:00 GMT

This award recognizes the innovation from Elastic’s technology team, our ability to embed AI within customer and agent workflows, and our product as a whole. Learn more about how we embed AI within customer and support experiences.

Elastic’s new Custom Threat Intelligence integration

Chema Martinez — Tue, 19 Nov 2024 05:00:00 GMT

The Custom Threat Intelligence integration allows security teams to bring in threat data from multiple sources converting it into ECS. By ingesting threat intelligence, users can enhance security visibility within Elastic's Search AI Platform.

JVM essentials for Elasticsearch: Metrics, memory, and monitoring

Nitish Pandey — Wed, 27 Aug 2025 00:00:00 GMT

Learn JVM basics, including how to examine memory usage patterns and troubleshoot JVM issues, such as Exit code 127 and Exit code 137, by understanding JVM’s memory management and object reaping via garbage collection.

Guide to the OWASP Top 10 for LLMs: Vulnerability mitigation with Elastic

Rich Cabrera — Tue, 09 Sep 2025 00:00:00 GMT

Mitigating the risks identified in the OWASP Top 10 for LLM Applications requires a unified platform approach. Elastic’s Search AI Platform provides this holistic solution by combining full lifecycle observability with powerful security analytics.

Elastic 8.15: Better semantic search, new OTel distribution, SIEM data import

Brian Bergholm — Thu, 08 Aug 2024 17:00:04 GMT

Elastic 8.15 includes enhancements in semantic search, new OTel collector distribution, AI-driven SIEM data onboarding, LLM integrations, additions to cross-cluster search (CCS), and more functionality within the Elasticsearch Query Language (ES|QL).

ElasticGPT: Empowering our workforce with generative AI

Jay Shah — Wed, 04 Dec 2024 05:00:00 GMT

ElasticGPT is a generative AI assistant designed to help Elastic employees quickly find information and answers from company data. Teams can use ElasticGPT via a self-service experience to summarize, categorize, and analyze information and data.

How to choose a vector database

The Elastic Platform team — Mon, 15 Jul 2024 00:00:00 GMT

Explore the different types of vector databases available and discover the key factors to consider when choosing the right one.

Elastic named a Leader in IDC MarketScape: Worldwide SIEM for Enterprise 2024

Mark Settle — Wed, 18 Sep 2024 00:00:00 GMT

Elastic Security is named a Leader in the IDC MarketScape for worldwide SIEM enterprise 2024 vendor assessment.

Elasticsearch runs up to 40% faster on Google Axion Processors (C4A)

Yuvraj Gupta — Thu, 10 Apr 2025 00:00:00 GMT

Elastic collaborated with Google Cloud to provide higher indexing throughput on Google Axion Processors (C4A). Powered by C4A processors, Elastic Cloud Serverless delivers Elastic users up to 40% higher indexing throughput.

Know your tools: The full range of Elastic Security’s detection engineering capabilities

Kseniia Ignatovych — Tue, 12 Nov 2024 05:00:00 GMT

This blog provides a comprehensive overview of the detection capabilities available in Elastic Security. Learn about the latest features and get useful tips and tricks for your detection practice!

Crafting a hybrid geospatial RAG application with Elastic and Amazon Bedrock

Udayasimha Theepireddy (Uday),Srinivas Pendyala, AWS,Ayan Ray, AWS — Tue, 26 Nov 2024 05:00:00 GMT

This blog explores how to build a powerful retrieval augmented generation (RAG) system that incorporates geospatial data using Elasticsearch, Amazon Bedrock, and LangChain.

How to make a chatbot: Dos and don'ts for developers in an AI-driven world

The Elastic Platform team — Tue, 05 Mar 2024 18:22:25 GMT

Learn how to develop a chatbot effectively with this guide, covering do’s and don'ts for chatbot developers and other useful tips.

Government cybersecurity: Consolidating tools and costs with AI & ML

Chris Townsend — Wed, 02 Apr 2025 00:00:00 GMT

For government, healthcare, and education orgs looking to reduce costs and boost efficiency, Informa TechTarget's Enterprise Strategy Group report shows the value of Elastic Security, including how AI and ML can reduce security risk and lower TCO.

Elastic launches Express Migration program for Splunk customers

Santosh Krishnan — Wed, 07 Aug 2024 00:00:00 GMT

The Elastic Express Migration program eases your transition from Splunk to Elastic Security, accelerating adoption and reducing total cost of ownership.

Elastic Security is a top performer in the latest AV-Comparatives Business Test

Caitlin Betz — Tue, 17 Dec 2024 05:00:00 GMT

Elastic Security excels in the AV-Comparatives Business Security Test — praised for seamless integration and advanced capabilities. With 99.8% malware detection, it shows the power of AI-driven security analytics in defending against today’s threats.

Elastic Stack 8.19.15 released

Nina Lee — Thu, 30 Apr 2026 00:00:00 GMT

Version 8.19.15 of the Elastic Stack was released today. We recommend you upgrade to this latest version. We recommend 8.19.15 over the previous versions 8.19.14

Fixed a regression where APM’s HTTP/2 connections could fail with strict clients due to framing errors.

For details of the issues that have been fixed and a full list of changes for each product in this version, please refer to the release notes

Elastic Stack 9.3.4 released

Nina Lee — Thu, 30 Apr 2026 00:00:00 GMT

Version 9.3.4 of the Elastic Stack was released today. We recommend you upgrade to this latest version. We recommend 9.3.4 over the previous versions 9.3.3

Fixed a regression where APM’s HTTP/2 connections could fail with strict clients due to framing errors.

For details of the issues that have been fixed and a full list of changes for each product in this version, please refer to the release notes.

Built on patterns: How Susan Chang’s econometrics roots drive machine learning for security and her minimalist workspace

Elastic Culture — Thu, 30 Apr 2026 00:00:00 GMT

How econometrics and machine learning come together to secure modern systems

Whole-of-state cyber defense: How AI-driven security helps US states protect what matters most

Bobby Suber — Wed, 29 Apr 2026 00:00:00 GMT

State and local governments in the United States face growing cyber threats but uneven security resources across agencies. A whole-of-state security model enables shared visibility, coordination, and resilience without sacrificing data sovereignty.

Elastic 8.16: BBQ, LLM observability, protect your cloud assets

Brian Bergholm,Mark Doncov — Tue, 12 Nov 2024 05:00:00 GMT

Elastic 8.16 includes many high-impact capabilities, including Elastic being the first vector database with BBQ (Better Binary Quantization), LLM observability for Amazon Bedrock, extended cloud security provider integrations, and more.

SOC analyst vs. security analyst: What’s the difference?

Elastic Security Team — Thu, 03 Jul 2025 00:00:00 GMT

Learn what SOC and security analysts do, including key responsibilities, skills, career paths, and how they help strengthen an organization's cybersecurity posture.

The hype is over: Generative AI is driving the evolution of search within enterprises

Jessica Taylor — Tue, 17 Jun 2025 00:00:00 GMT

Accenture and Elastic are helping businesses move beyond AI hype. Learn how this partnership delivers real-world results with enterprise-wide generative AI solutions.

3 ways to maximize the ROI on your generative AI strategy

Matthew Minetola — Mon, 14 Oct 2024 07:00:00 GMT

Generative AI has already delivered efficiency gains and promises impressive use cases, but IT leaders need it to deliver sustainable value. Discover three ways Elastic’s CIO integrates GenAI strategy into our overall business strategy to drive ROI.

Choosing an LLM: The 2024 getting started guide to open source LLMs

The Elastic Platform team — Mon, 05 Feb 2024 05:00:00 GMT

Discover the top open source large language models (LLMs) in our 2024 guide. Learn how LLMs are revolutionizing natural language processing and compare which LLMs are best for you.

Airtel is strengthening security operations with Elastic’s AI-driven analytics

Puneet Duggal,Arvind Bhat,Neeraj Gupta,Anuj Jaiswal,Prashant Kumar — Fri, 27 Jun 2025 00:00:00 GMT

Learn how Airtel is enhancing proactive threat hunting and incident response with Elastic Security’s AI-driven features, like AI Assistant, Attack Discovery, and onboarding of custom data with Automatic Import.

AI and ML for mission systems: How AWS, Anthropic, and Elastic can drive resilience for national security

Marianna Jonsdottir,Matt Isett — Mon, 16 Jun 2025 00:00:00 GMT

The strategic collaboration between Anthropic, Amazon, and Elastic provides advanced AI capabilities for enhanced observability, anomaly detection, and root cause analysis for US intelligence community missions.

LLMs, LEGO, and LED lights: How an Elastic engineer stays energized and leads with curiosity

Elastic Culture — Thu, 05 Mar 2026 08:00:00 GMT

Sean Handley, senior engineering manager on the Search team, spends his days working with his team on machine learning and large language models (LLMs), shaping the future of search as we know it. Learn how Sean gets ready to build.

State of Observability in Financial Services 2026: From implementation to business impact

Leah McEwen — Tue, 28 Apr 2026 00:00:00 GMT

Explore the 2026 state of observability financial services report. Discover trends in GenAI adoption, OTel, cost optimization, and compliance.

Understanding data mesh in public sector: Pillars, architecture, and examples

The Elastic Platform team — Wed, 12 Mar 2025 00:00:00 GMT

Discover how Elastic enables data mesh in the public sector with key pillars, architecture, and real-world examples for better data access and governance.

Elastic wins fifth Google Cloud Partner of the Year award

Brian Bergholm — Tue, 21 Apr 2026 00:00:00 GMT

For the fifth time, Elastic has been recognized for its achievements in the Google Cloud ecosystem, helping joint customers deploy generative AI solutions in search, security, and observability.

Khalil Corbin on how the arts helped shape him — and led to his communications career

Elastic Culture — Tue, 06 Feb 2024 08:00:00 GMT

Before joining Elastic, Khalil Corbin worked in the public sector, doing non-profit work with kids on probation — and writing for music blogs on the side. At Elastic, he found an opportunity to write — and grow his career.

Darryl Peek on working for the public sector at Elastic

Elastic Culture — Fri, 26 Apr 2024 00:00:00 GMT

Darryl’s family has a long history of military service and Darryl himself has always supported the public sector — his career has taken him to various private and public enterprises within a public sector team.

Google Axion instances now available on Elastic Cloud Hosted

Yuvraj Gupta — Thu, 23 Apr 2026 00:00:00 GMT

Elastic Cloud now supports Google Axion-powered Arm hardware profiles. CPU-optimized Arm profile on Google Cloud now delivers up to 25% better price-performance.

Securing air-gapped environments with Elastic on Google Distributed Cloud

Jason Pappalexis — Wed, 22 Apr 2026 00:00:00 GMT

Elastic Security is now a native, embedded security layer for GDC air-gapped environments — bringing its agentic SecOps platform to government, defense, finance, and telecom teams running workloads disconnected from the public internet.

Introducing cross-project search in Elastic Cloud Serverless

Najwa Harif,Hubert Grzesiek — Mon, 20 Apr 2026 00:00:00 GMT

Discover cross-project search (CPS) for Elastic Cloud Serverless. Search across all your workloads from a single pane of glass, and instantly query distributed projects as one without moving your underlying data.