is Security free in Elastic search Stack Features?
we are building an opensource application which needs elasticsearch security feature. i am trying to find if the security feature is free for elastic search. elastic search website says Xpack is open now. Not sure if it is really opensource.
Could someone please share your experience?
This blog post explained some of the reasons why Elastic "opened" their XPack code. "Open" here simply means that they merged their private XPack repositories into the open ones. One of the reasons that the blog post above doesn't mention is that this move was mostly motivated to facilitate tedious engineering tasks of having to keep all their product versions in synch. Anyway, the XPack code is now out in the open and visible for anyone to see, but it's not free as in "free beer".
As shown on the Elastic subscriptions page (see the red rectangle in the image below), XPack Security is only available starting with a Gold license.
Another alternative is to use their Elastic Cloud which provides Security out of the box and allows you to pay a lower amount on a monthly basis.
If the price burden is too heavy for you, you might want to check out SearchGuard which is an alternative Security plugin for ES, which provides a free Community tier for basic security features.
UPDATE (March 11th, 2019):
Since today, Amazon has released a fully open-sourced version of Elasticsearch with a Security (and Alerting) plugin. More info at: https://opendistro.github.io/for-elasticsearch/
UPDATE (May 20th, 2019):
Since version 6.8.0 and 7.1.0, some features of XPack Security are now included into the BASIC license, and are thus free.
UPDATE (Sep 4th, 2019):
Elastic has filed a lawsuit against SearchGuard for IP infringements: https://www.elastic.co/blog/dear-search-guard-users
Details of the lawsuit: https://www.pacermonitor.com/public/case/29887799/Elasticsearch,_Inc_et_al_v_Floragunn_GmBH
This impacts both SearchGuard users AND OpenDistro users since the latter repackage the SearchGuard plugin.
- problem with adding new node to elasticsearch cluster
- AWS SSO/AWS Opensearch SAML integration
- Logstash field is never shown after aggregation
- Elastic Search total index size
- Elastic Search Give an error No alive nodes found in your cluster
- The remote server returned an error: (413) Request Entity Too Large. Elasticsearch and JSON
- unassigned_shards how to solve it
- Elasticsearch: Match range in list of start and end dates
- How to test threat intel filebeat module rule in ELK
- Using Shingles and Stop words with Elasticsearch and Lucene 4.4
- how to do custom grouping of aggregations?
- How can I handle large keyword fields in OpenSearch?
- ElasticSearch-dsl intervals query
- How to configure Elastic.Serilog.Sinks librari with appsettings.json?
- Elasticsearch Curl Command with Sudo Permission Works, But Without Sudo or Using Simple Curl Command Returns Empty Response
- How to check if a homebrew service is switched on or not
- How can I know which nodes in a cluster are actual master nodes?
- Curl 77 Error setting certificate file: http_ca.crt
- Elasticsearch Get only those date histograms whose bucket size is greater than given number
- How to put a size on a date_histogram aggregation
- How to copy some ElasticSearch data to a new index
- IDE for elasticsearch
- Elasticsearch showing received plaintext http traffic on an https channel in console
- How to make facet search by multiple nested fields in Elasticsearch Java API Client?
- Elasticsearch English stemming not working correctly
- How to take the current week's data (from the beginning of the week) from elasticsearch query irrespective of present week?
- Why does Elasticsearch use 9 GB of memory, with default settings?
- Fetch data from a middle of a big stack using searchAfter(jump to a specific page,)
- Elasticsearch lightweight monitors unable to use params
- elasticsearch 2 node cluster: proper setup?