Enterprise Search is built on top of Elasticsearch to deliver a rich, pre-tuned search experience. Enterprise Search includes:
- App Search - provide your applications with a rich, out-out-the-box search capability.
- Workplace Search - unify all the content platforms across your organization into a personalized search experience.
To set up Enterprise Search:
While you can enable Enterprise Search using the General purpose (previously known as Elastic Stack), Observability, or Security deployment templates, these configurations are not precisely tuned for the Enterprise Search use case. For production workloads, use the Enterprise Search deployment template for maximum performance and stability.
- First, create a new deployment with the Enterprise Search solution. This is available starting in Elastic Stack version 7.7.
- When the deployment has spun up, make a note of the user account and password, and store it in a safe place. You can use this account and password to connect to Enterprise Search through its dedicated UI.
- Launch Enterprise Search directly from the main deployment page, or select Enterprise Search under the Deployments menu to find more options. From the Enterprise Search pane you can force a restart, terminate, or delete the Enterprise Search instance.
When the Enterprise Search window opens, enter the
elasticuser and password for this deployment to login, and then select to use either App Search or Workplace Search.
You can configure Enterprise Search to use a SAML identity provider for cross-domain, single sign-on authentication. To learn how, check Secure your clusters with SAML.
- Follow the UI instructions in the selected product to complete your setup.
Now that your Enterprise Search instance is set up, learn more about it by following the Enterprise Search Reference Getting Started documentation.
If Enterprise Search is left at the default size, and has no engines or sources configured for an extended period, it will be automatically disabled. This occurs whether autoscaling is enabled or not.
Reactivate the service by editing the Enterprise Search settings for your deployment under Cloud > Deployments > your-deployment > Edit.
Upgrade App Search to Enterprise Searchedit
Beginning with Elastic Stack version 7.7, App Search and Workplace Search are bundled together. The two components are available as a single Elastic Enterprise Search deployment.
The process of migrating data does not require read downtime, but like a typical product upgrade it does require write downtime. To ensure data integrity during the upgrade process App Search is set to read-only mode.
We have built a nice assistant to help you migrate your App Search deployment to Enterprise Search, to enjoy all the new features it provides.
To upgrade your App Search deployment to Enterprise Search:
- Log in to the Elasticsearch Service Console.
- Select the App Search deployment you want to upgrade to Enterprise Search.
- Select Upgrade and then in the dialog that opens choose Start migration. An assistant opens to help you safely migrate to Enterprise Search.
Follow the steps in the assistant:
- Set read-only mode. This prevents data from being written to the App Search instance while it is being migrated.
- Take a snapshot of your current App Search data. This can take several minutes. The assistant indicates when the snapshot has completed.
Create a deployment from the snapshot. A new Enterprise Search deployment is created with all of the settings and data from the previous App Search deployment.
Once the new Enterprise Search deployment has spun up, validate that the App Search data is available. Do any performance, functional, or other tests that you might need. Once you are ready, move to the next step.
- Migrate your application. Configure the credentials and URL for the new deployment in all of your applications.
- Finally, you can decommission the App Search deployment since you have successfully migrated to Enterprise Search with all of your data preserved.
App Search and Enterprise Search support a read-only mode, which allows a product operator to disable all writes from the application to the underlying Elasticsearch instance while keeping the application running and handling search requests. This mode could be used to perform maintenance on a deployment, create a consistent snapshot of the deployment’s data, or to perform an product upgrade without downtime.
For more information, check read-only mode in the App Search documentation.
Intro to Kibana
ELK for Logs & Metrics