Cloud API logs are a significant blind spot for many organizations and often factor into large-scale, publicly announced data breaches. They pose several challenges to security teams:
Cloud API transactions do not leave network or host-based evidence. For this reason, they cannot be monitored, searched, or analyzed using conventional security tools and products like network security devices or endpoint-based security agents. This tends to create significant blind spots in cloud threat detectio
The theme of this year’s International Women’s Day is #ChooseToChallenge. It is a necessary call for individuals to commit themselves to forging a more inclusive world.At Elastic, we challenge ourselves year round to think both more broadly and deeply about inclusivity. The research is clear: when everyone is from the same background, goes to the same schools, shares the same lived experiences, you can quickly slip into group think. More diversity means more view points, more ideas, and ultimate
On March 2, 2021, Microsoft released a security update describing several 0-day exploits targeting on-premises Microsoft Exchange servers. Four published remote code execution vulnerabilities relate to this activity, for which Microsoft released a patch. The vulnerabilities include CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, and CVE-2021-27065. In addition to verifying the information published by other members of the security community, Elastic Security identi
Today, I’m happy to share more about our partnership and commitment to our users that they will have the best possible experience of both Elasticsearch and Grafana, across the full breadth of Elasticsearch functionality, with dedicated engineering from both Grafana Labs and Elastic. Through joint development of the official Grafana Elasticsearch plugin users can combine the benefits of Grafana’s visualization platform with the full capabilities of Elasticsearch. This integration is available to
Your logs, metrics, security, and trace data are all invaluable to you. They are mission critical for your observability and security needs. As your IT infrastructure grows and keeps generating more and more data, your data volumes and data storage needs go up accordingly. It can quickly become cost-prohibitive to indefinitely store all of it on your hottest machines. With index lifecycle management and data tiers in Elasticsearch and the associated cost-effective hardware profiles in Elastic Cl
Cache is king for speedy data retrieval. So if you’re interested in how Elasticsearch leverages various caches to ensure you are retrieving data as fast as possible, buckle up for the next 15 minutes and read through this post. This blog will shed some light on various caching features of Elasticsearch that help you to retrieve data faster after initial data accesses. Elasticsearch is a heavy user of various caches, but in this post we'll only be focusing on:
Page cache (sometimes called the f
For the 7.10 release of Elastic Workplace Search, we highlighted some of the new analytics logging capabilities and took you through a short walkthrough of some sample analysis scenarios. With the 7.11 release we introduced analytics fields, which open up new possibilities for exploring query and click data with helpful dashboards and visualizations. We’ve structured the analytics event log output to allow as much flexibility as possible. We have our own ideas as to what types of analysis we wou
We are excited to bring you a number of updates for using Elastic Cloud (Elasticsearch managed service) in the AWS Marketplace. New self-service subscription optionsYou can now purchase Standard, Gold, Platinum, and Enterprise monthly subscriptions directly within the AWS Marketplace. With just a few clicks, you’ll get access to enhanced support options backed by service-level agreements and capabilities exclusive to the Elastic Stack, including Elastic APM, Elastic Workplace Search, and the res
Security information and event management (SIEM) systems are centralized logging platforms that enable security teams to analyze event data in real time for early detection of targeted cyber attacks and data breaches. A SIEM is used as a tool to collect, store, investigate, and report on log data for threat detection, incident response, forensics, and regulatory compliance. SIEM has continuously evolved since its early days of adoption. SIEM software today needs to support big data and provide c
We're excited to announce that autoscaling is now available on Elastic Cloud. In our initial release, autoscaling monitors the storage utilization of your Elasticsearch data nodes and the available memory capacity for your machine learning jobs. As your data grows, whether you’re expanding to new use cases or simply storing data for longer, autoscaling automatically adjusts resource capacity to ensure you can store your data, and that your machine learning jobs can execute — so you don’t have to