Restrictions and known problems

When using Elasticsearch Service, there are some limitations you should be aware of:

Occasionally, we also publish information about Known problems with our Elasticsearch Service or the Elastic Stack.

To learn more about the features that are supported by Elasticsearch Service, see Elastic Cloud Subscriptions.

Elastic Stack

  • The index lifecycle management (ILM) feature that is part of the Elastic Stack 6.6 is not currently supported.
  • Cross cluster search across Elasticsearch clusters is not supported.
  • Dedicated ingest nodes are not supported.

Monitoring

  • To avoid compatibility issues between versions, the cluster sending monitoring metrics and the monitoring cluster receiving them should be at the same Elasticsearch version. If using the same version is not feasible, check for breaking changes in the X-Pack Release Notes or the Marvel Release Notes to make sure that your versions are compatible.
  • Monitoring across regions is not supported. If you need to move your existing monitoring to the same region, you can do a reindex or create a new cluster and select the snapshot from the old cluster.
  • Monitoring data that gets sent to a dedicated monitoring Elasticsearch cluster is not cleaned up automatically and might require some additional steps to remove excess data periodically.

Security

  • IP filtering with the X-Pack or Shield security features is currently not available.
  • LDAP and Active Directory security realms are not supported.
  • Audit logging is disabled.
  • Client certificates, such as PKI certificates, are not supported.

Transport client

The transport client is not considered thread safe in a cloud environment. We recommend that you use the Java REST client instead. This restriction relates to the fact that your deployments hosted on Elasticsearch Service are behind proxies, which prevent the transport client from communicating directly with Elasticsearch clusters.

Elasticsearch and Kibana plugins

  • Kibana plugins are not supported.
  • Some Elasticsearch plugins do not apply to Elasticsearch Service. For example, you won’t ever need to change discovery, as Elasticsearch Service handles how nodes discover one another.
  • In Elasticsearch 5.0 and later, site plugins are no longer supported. This change does not affect the site plugins Elasticsearch Service might provide out of the box, such as Kopf or Head, since these site plugins are serviced by our proxies and not Elasticsearch itself.
  • In Elasticsearch 5.0 and later, site plugins such as Kopf and Paramedic are no longer provided. We recommend that you use our cluster performance metrics, X-Pack monitoring features and Kibana’s (6.3+) Index Management UI if you want more detailed information or perform index management actions.

Alerting (formerly Watcher)

  • You cannot change the default throttle period, but you can specify a throttle period per watch.
  • You cannot use your own SMTP server. All emails are sent through our servers and the recipient must be whitelisted.

APM with AWS Marketplace subscriptions

Known problems

There is a known issue affecting 5.6.10 to 6.3.0 upgrades. A fix is available in a later version of the Elastic Stack or you can open a support ticket to receive help.