Elastic on Elastic - Configuring the Security app to use Cross Cluster SearchThe Elastic Infosec Detections and Analytics team is responsible for building, tuning, and maintaining the security detections used to protect all Elastic systems. Within Elastic we call ourselves Customer Zero and we strive to always use the newest versions of our products. In the previous blog posts we gave an overview of our architecture and what data we send to our clusters. In this blog post we will provide i
While developing Elasticsearch, we occasionally come across an important problem with no simple or established approach to solving it. It’s natural to ask “hmm, is there an academic paper that addresses this?” Other times, academic work is a source of inspiration. We’ll encounter a paper proposing a new algorithm or data structure and think “this would be so useful!” Here are just a few examples of how Elasticsearch and Apache Lucene incorporate academic work:HyperLogLog++ for cardinality aggreg