A free, full day of Elastic sessions and experts for the public sector community.

  • Explore tools for securely managing your deployment at scale and on any infrastructure.
  • Learn how to put new features like machine learning and Elasticsearch SQL to work on your data.
  • Get in-person answers from US-based security and geo experts at the Ask Me Anything booth.
  • Up your cybersecurity game with machine learning and alerting tools for better threat hunting, detection, and remediation.
  • See how peers are leveraging the Elastic Stack to solve public sector problems.
  • Get an insider’s look at features and releases coming down the pipeline.

Please note: priority tickets for this event will be reserved for public sector employees and contractors. On-demand training credit valued at $400 will be issued to attendees on-site, so you can complete the Elastic Stack course that fits your skill level and interests without getting out of your PJs. Browse trainings


  • 7:45 a.m. – Close
    Ask Me Anything + Demos

    Get answers to your burning questions about everything from architecture to zen discovery at the Ask Me Anything booth. Test out interactive demos to get hands on with new features like machine learning.

  • 7:45 a.m. – 8:30 a.m.
    Registration + Sponsor Showcase

    Grab your badge, network, and see what our sponsors are up to. We promise to have excellent coffee and tea on hand to get you amped for the day.

  • 8:30 a.m. – 8:45 a.m.
    Opening Keynote

    Get the update on where the Elastic Stack is headed, from logging to metrics to the APM solution that's brewing.

  • 8:45 a.m. – 9:25 a.m.
    Elasticsearch Deep Dive

    Cross-cluster search, ingest node, rollover API, shrink API, field collapsing, unified highlighter . . . there's lots to love in Elasticsearch these days. Get up to speed on 5.x and see how 6.x will address pain points around scale, upgrading, recovery, and sparse data and disk usage.

  • 9:25 a.m. – 10:05 a.m.
    Machine Learning Deep Dive

    GA'ed in 5.5, machine learning can uncover insights from your data automatically. This session walks you through using the Elastic Stack to ingest, enrich, visualize, analyze, and alert on NGINX logs to detect and eventually predict anomalies in your data.

  • 10:05 a.m. – 10:25 a.m.
  • 10:25 a.m. – 10:55 a.m.
    Cyber Hunting at Perched with the Elastic Stack & X-Pack

    Perched is using Elastic's X-Pack to analyze intrusions as they progress through a campaign and exploring methods to push them back through the kill-chain.

    Andrew Pease, Chief Intelligence Officer, Perched

  • 10:55 a.m. – 11:25 a.m.
    Ingest and the Elastic Stack

    Walk through all things ingest for Logstash 5.x, from dead letter and persistent queues to the Grok Debugger and new monitoring APIs. Then get caught up on new lightweight data shipper additions like Heartbeat and Metricbeat, as well as new modules that simplify the getting started process.

  • 11:25 a.m. – 12:25 p.m.
    Lunch + Demos, AMA, Sponsor Showcase

    Break bread (and talk shop) with Elastic engineers and fellow public sector users. There's plenty of time to stop by the AMA booth for more Q&As, visit demo stations to see the Elastic Stack in action, or spend time with our sponsors.

  • 12:25 p.m. – 12:55 p.m.
    Tackling Cyber with RockNSM

    Cyber is a human versus human problem. RockNSM covers your data gaps and delivers information to your humans so they can find the adversary.

    CPT Derek Ditch, Missouri Army National Guard

  • 12:55 p.m. – 1:40 p.m.
    Managing Elasticsearch Clusters with Elastic Cloud Enterprise

    Learn how to easily deploy and manage secure Elasticsearch clusters at scale and on the infrastructure of your choice using Elastic Cloud Enterprise.

  • 1:40 p.m. – 2:00 p.m.
  • 2:00 p.m. – 2:30 p.m.
    Elastic at NARA for Search

    The National Archives and Records Administration is building the next generation of electronic records archives. See how they're planning to use Elasticsearch to power discovery for millions of archived records from federal agencies, judicial proceedings, congressional work, and presidential administrations.

    Kevin McCarthy, System Architect, National Archives & Records Administration

  • 2:30 p.m. – 3:00 p.m.
    Kibana Deep Dive

    End the day with a grand tour of new visualizations and exciting updates in Kibana, including time series visual builder, heatmaps, Timelion, tag clouds, Watcher UI, and cluster alerts. Plus, a look at what's to come in 6.x.


Dave Erickson

Director of Solution Architecture, Elastic

Andrew Pease

Chief Intelligence Officer, Perched

CPT Derek Ditch

Missouri Army National Guard


Space is limited, so register now to save your spot. Please note that first priority for tickets will go to public sector users and partners. Elastic reserves the right to cancel registration for those who do not qualify for participation in this event.


Ronald Reagan Building

1300 Pennsylvania Ave NW

Washington, DC 20004

Ready for more?

In-person and on-demand training courses give you hands-on, guided practice with Elastic experts on the topics you need at the skill level that’s right for you.


We’re here to help. Give us a shout at events@elastic.co.