From 2be7611ba0e73195a83a463e2461027125fe2623 Mon Sep 17 00:00:00 2001 From: lcawl Date: Wed, 17 Sep 2025 16:50:34 -0700 Subject: [PATCH 01/11] Reset changed files --- get-started/introduction.md | 176 ++++++++++++++++++++++++- get-started/the-stack.md | 2 + get-started/versioning-availability.md | 65 +++++---- 3 files changed, 206 insertions(+), 37 deletions(-) diff --git a/get-started/introduction.md b/get-started/introduction.md index 32f8f19024..c46ed53388 100644 --- a/get-started/introduction.md +++ b/get-started/introduction.md @@ -3,11 +3,178 @@ mapped_pages: - https://www.elastic.co/guide/en/elasticsearch/reference/current/elasticsearch-intro-what-is-es.html products: - id: elasticsearch +applies_to: + stack: + serverless: --- +# Solutions and use cases [introduction] +Elastic offers three major search-powered solutions: {{es}}, {{observability}}, and {{elastic-sec}}— all built on an open source, extensible platform. +Whether you're building a search experience, monitoring your infrastructure, or securing your environment, this topic helps you understand what each Elastic solution offers—and how to choose the right one for your business needs. + +| Your need | Recommended solution | Best for | +|-----------|-------------------|----------| +| Build powerful, scalable searches to quickly search, analyze, and visualize large amounts of data for real-time insights | [{{es}}](#search-overview) | Developers, architects, data engineers | +| Observe and monitor system health and performance or send telemetry data | [Elastic {{observability}}](#observability-overview) | DevOps, SREs, IT operations | +| Monitor data for anomalous activity, detect, prevent, and respond to security incidents | [{{elastic-sec}}](#security-overview) | SOC teams, security analysts, IT security admins | + +:::{tip} +Check out our [customer success stories](https://www.elastic.co/customers/success-stories) to learn how various organizations utilize our products for their specific business needs. +::: + +Each of our solutions is available as a fully managed {{serverless-short}} project or a self-managed deployment. Refer to [deployment options](../get-started/deployment-options.md) to learn about these options. + +## {{es}} [search-overview] + +{{es-serverless}} projects and the {{es}} solution combine the core {{es}} data store, search engine, and vector database technologies with specialized user interfaces and tools, giving you the building blocks to create, deploy, and run your own search applications. + + +For an overview of search use cases, including full-text, geospatial, semantic, and vector search, and retrieval augmented generation (RAG), go to [](/solutions/search.md). +To try out some simple search use cases, go to [](/solutions/search/get-started/quickstarts.md). + +For an introduction to core {{es}} concepts such as indices, documents, and mappings, refer to [](/manage-data/data-store.md). +To dive more deeply into the building blocks of an {{es}} cluster, including nodes, shards, primaries, and replicas, refer to [](/deploy-manage/distributed-architecture.md). + + + +## Elastic {{observability}} + +### {{observability}} overview [observability-overview] + +Elastic {{observability}} provides unified observability across applications and infrastructure. It combines logs, metrics, application traces, user experience data, and more into a single, integrated platform. This consolidation allows for powerful, cross-referenced analysis, enabling teams to move from detecting issues to understanding their root causes with speed and efficiency. By leveraging the search and analytics capabilities of {{es}}, it offers a holistic view of system behavior. + +Elastic {{observability}} embraces open standards like OpenTelemetry for flexible data collection, and offers scalable, cost-efficient data retention with tiered storage. + +### {{observability}} use cases [observability-use-cases] + +Apply {{observability}} to various scenarios to improve operational awareness and system reliability. +:::{dropdown} Use cases +* **Log Monitoring and Analytics:** Centralize and analyze petabytes of log data from any source. This enables quick searching, ad-hoc queries with ES|QL, and visualization with prebuilt dashboards to diagnose issues. +* **Application Performance Monitoring (APM):** Gain code-level visibility into application performance. By collecting and analyzing traces with native OTel support, teams can identify bottlenecks, track errors, and optimize the end-user experience. +* **Infrastructure Monitoring:** Monitor metrics from servers, virtual machines, containers, and serverless environments with over 400 out-of-the-box integrations, including OpenTelemetry. This provides deep insights into resource utilization and overall system health. +* **Digital Experience Monitoring:** + * **Real User Monitoring (RUM):** Capture and analyze data on how real users interact with web applications to improve perceived performance. + * **Synthetic Monitoring:** Proactively simulate user journeys and API calls to test application availability and functionality. + * **Uptime Monitoring:** Continuously check the status of services and applications to ensure they are available. +* **Universal Profiling:** Gain visibility into system performance and identify expensive lines of code without application instrumentation, helping to increase CPU efficiency and reduce cloud spend. +* **LLM Observability:** Gain deep insights into the performance, usage, and costs of Large Language Model (LLM) prompts and responses. +* **Incident Response and Management:** Facilitate the investigation of operational incidents by correlating data from multiple sources, which accelerates root cause analysis and resolution. +::: + +### {{observability}} core concepts [observability-concepts] +At the heart of Elastic {{observability}} are several key concepts that enable its capabilities. + +:::{dropdown} Concepts +* The three pillars of {{observability}} are: + * **Logs:** Timestamped records of events that provide detailed, contextual information. + * **Metrics:** Numerical measurements of system performance and health over time. + * **Traces:** A representation of the end-to-end journey of a request as it travels through a distributed system. +* **OpenTelemetry:** {{Observability}} offers first-class, production-grade support for OpenTelemetry. This allows organizations to use vendor-neutral instrumentation and stream native OTel data without proprietary agents, leveraging the Elastic Distribution of OpenTelemetry (EDOT). +* **AIOps and AI Assistant:** Leverages predictive analytics and an LLM-powered AI Assistant to reduce the time required to detect, investigate, and resolve incidents. This includes zero-config anomaly detection, pattern analysis, and the ability to surface correlations and root causes. +* **Alerting and Cases:** A built-in feature for creating rules to detect complex conditions and trigger actions. It allows teams to stay aware of potential issues and use Cases to track investigation details, assign tasks, and collaborate on resolutions. +* **Service Level Objectives (SLOs):** A framework for defining and monitoring the reliability of a service. Elastic Observability allows for creating and tracking SLOs to ensure that performance targets are being met. +::: + +## {{elastic-sec}} + +### Security overview [security-overview] + +{{elastic-sec}} is a unified security solution that integrates SIEM (Security Information and Event Management), endpoint security, and cloud security into a single platform so you can detect, prevent, and respond to cyber threats across your entire environment in near real time. Elastic Security leverages {{es}}'s powerful platform for its searching and analytic capabilities, and {{kib}} for its visualization features. By combining prevention, detection, and response capabilities, {{elastic-sec}} helps your organization reduce the risk of successful attacks. + +Install {{elastic-sec}} on one of our Elastic-managed Cloud deployments or your own self-managed infrastructure. + +### Security use cases [security-use-cases] + +Use {{elastic-sec}} for numerous security needs to ensure your systems are protected from the latest threats. + +:::{dropdown} Use cases +* **SIEM:** {{elastic-sec}} is a modern SIEM that provides a centralized platform for ingesting, analyzing, and managing security data from various sources. +* **Third-party integration support:** Ingest data from a variety of tools and data sources so you can centralize your security data. +* **Threat detection and analytics:** Identify unknown threats by enabling prebuilt or custom detection rules, automatically detect anomalous activity with built-in machine learning jobs, or proactively search for threats using our powerful threat hunting and interactive visualization tools. +* **Automatic migration:** Migrate SIEM rules from other platforms to {{elastic-sec}}. +* **Endpoint protection and threat prevention:** Automatically stop cybersecurity attacks—such as malware and ransomware—before damage and loss can occur. +* **AI-powered features:** Elastic Security leverages generative AI to help enhance threat detection, assist with incident response, and day-to-day security operations. For example, the AI Assistant can summarize alerts, identify relevant information, suggest investigation steps, and generate complex queries from natural language input. +* **Custom dashboards and visualizations:** Create custom dashboards and visualizations to gain insights into security events. +* **Cloud Security:** {{elastic-sec}} provides the following cloud features: + * **Cloud Security Posture Management (CSPM) and Kubernetes Security Posture Management (KSPM):** Check cloud service configurations against security benchmarks to identify and resolve misconfigurations that can be exploited. + * **Cloud Workload Protection:** Get visibility and runtime protection for cloud workloads. + * **Vulnerability Management:** Uncover vulnerabilities within your cloud infrastructure. +::: + +### Security core concepts [security-concepts] + +Before diving into setup and configuration, familiarize yourself with the foundational terms and core concepts that power {{elastic-sec}}. + +:::{dropdown} Concepts + +* **{{agent}}:** A single, unified way to add monitoring for logs, metrics, and other types of data to a host. Elastic Agent can also protect hosts from security threats, query data from operating systems, and forward data from remote services or hardware. +* **{{elastic-defend}}:** {{elastic-sec}}'s Endpoint Detection and Response (EDR) tool that protects endpoints from malicious activity. {{elastic-defend}} uses a combination of techniques like machine learning, behavioral analysis, and prebuilt rules to detect, prevent, and respond to threats in real-time. +* **{{elastic-endpoint}}:** The installed component that performs {{elastic-defend}}'s threat monitoring and prevention capabilities. +* **Detection engine:** The framework that detects threats by using rules to search for suspicious events in data sources and generating alerts when those rules meet the defined criteria. +* **Detection rules:** Sets of conditions that identify potential threats and malicious activities. Rules analyze various data sources, including logs and network traffic, to detect anomalies, suspicious behaviors, or known attack patterns. {{elastic-sec}} ships out-of-the-box prebuilt rules, or you can create your own custom rules. +* **Alerts:** A notification that's generated when a rule’s criteria are met. You can then investigate an alert to dive into deeper details. +* **Machine learning and anomaly detection:** Anomaly detection jobs identify anomalous events or patterns in your data. Use these with machine learning detection rules to generate alerts when behavior deviates from normal activity. +* **Entity analytics:** A threat detection feature that combines the power of Elastic’s detection engine and machine learning capabilities to identify unusual user behaviors across hosts, users, and services. Entity analytics uses a risk scoring engine to calculate a risk score, which is evaluated at a recurring interval. +* **Cases:** A tool that allows you to collect and share information about security issues. Opening a case lets you track key investigation details and collect alerts in a central location. You can also send cases to external systems. +* **Timeline:** A threat hunting tool that allows you to investigate security events so you can gather and analyze data related to alerts or suspicious activity. You can add events to Timeline from various sources, build custom queries, and import/export a Timeline to collaborate and share. +* **Security posture management:** Includes two Cloud Security features–Cloud Security Posture Management (CSPM) and Kubernetes Security Posture Management (KSPM)–that help you evaluate the services and resources in your cloud environment, such as storage, compute, IAM, and more—against security guidelines defined by the Center for Internet Security (CIS). These features help you identify and remediate configuration risks in your environment. +* **AI Assistant:** A generative AI-powered tool that helps with tasks like alert investigation, incident response, and query generation. It utilizes natural language processing and knowledge retrieval to provide context-aware assistance, summarize threats, suggest next steps, and automate workflows. Use AI Assistant to better understand and respond to security incidents. +::: + + + + % TODO: cleanup these links, consolidate with Explore and analyze - +$$$what-is-kib$$$ +$$$what-is-es$$$ $$$visualize-and-analyze$$$ $$$extend-your-use-case$$$ $$$_manage_your_data$$$ diff --git a/get-started/the-stack.md b/get-started/the-stack.md index 842dfc7402..77b9ae93d1 100644 --- a/get-started/the-stack.md +++ b/get-started/the-stack.md @@ -8,6 +8,8 @@ mapped_pages: products: - id: elastic-stack - id: kibana +applies_to: + stack: --- # The {{stack}} diff --git a/get-started/versioning-availability.md b/get-started/versioning-availability.md index 6afc51de38..bb4724a3c9 100644 --- a/get-started/versioning-availability.md +++ b/get-started/versioning-availability.md @@ -2,20 +2,24 @@ navigation_title: Versioning and availability mapped_pages: - https://www.elastic.co/guide/en/starting-with-the-elasticsearch-platform-and-its-solutions/current/introducing-elastic-documentation.html +applies_to: + serverless: + stack: products: - id: elastic-stack description: Learn how Elastic handles versioning and feature availability in the docs. Find the product versions that are supported, how to read availability badges, and... --- -# Versioning and availability in Elastic Docs +# Versioning and availability -Learn how Elastic Docs handles versioning, feature availability, and how to find the right documentation for your deployment type and product version. Find answers to common questions about the Elastic Stack versioning and confidently navigate our continuously updated documentation. +Learn how Elastic products are versioned, the lifecycle of features, and how to find the right documentation for your deployment type and product version. Find answers to common questions about the versioning and confidently navigate our continuously updated documentation. -## Frequently asked questions +## Understanding versioning -### Where can I find documentation for the latest version of the {{stack}}? +Many components of the [{{stack}}](/get-started/the-stack.md) (such as {{es}} and {{kib}}) share the same versioning pattern. +In the documentation, this group of components is typically referred to as the {{stack}}. -You’re in the right place! All documentation for Elastic Stack 9.0.0 and later is available at [elastic.co/docs](https://www.elastic.co/docs), including the latest {{version.stack| M.M}} version and any future versions in the 9.x series. +Orchestrators such as {{ece}} and {{eck}}, and other tools such as code clients and SDKs, are versioned independently of the {{stack}}. The {{ecloud}} console and {{serverless-short}} projects are always automatically updated with the latest changes. Need docs for an earlier version? Go to [elastic.co/guide](https://www.elastic.co/guide). @@ -91,45 +95,47 @@ To make sure you're always viewing the most up-to-date and relevant documentatio ## Understanding {{stack}} versioning -{{stack}} uses semantic versioning in the `X.Y.Z` format, such as `9.0.0`. +The components of the {{stack}} typically use semantic versioning in the `X.Y.Z` format, such as `9.0.0`. | Version | Description | -|-------|-------------| -| **Major (X)** | Indicates significant changes, such as new features, breaking changes, and major enhancements. Upgrading to a new major version may require changes to your existing setup and configurations. | -| **Minor (Y)** | Introduces new features and improvements, while maintaining backward compatibility with the previous minor versions within the same major version. Upgrading to a new minor version should not require any changes to your existing setup. | -| **Patch (Z)** | Contains bug fixes and security updates, without introducing new features or breaking changes. Upgrading to a new patch version should be seamless and not require any changes to your existing setup. | +| ----- | ----- | +| Major (X) | Indicates significant changes, such as new features, breaking changes, and major enhancements. Upgrading to a new major version may require changes to your existing setup and configurations. | +| Minor (Y) | Introduces new features and improvements, while maintaining backward compatibility with the previous minor versions within the same major version. Upgrading to a new minor version should not require any changes to your existing setup. | +| Patch (Z) | Contains bug fixes and security updates, without introducing new features or breaking changes. Upgrading to a new patch version should be seamless and not require any changes to your existing setup. | -Understanding {{stack}} versioning is essential for [upgrade planning](/deploy-manage/upgrade.md) and ensuring compatibility. +Understanding versioning is essential for [upgrade planning](/deploy-manage/upgrade.md) and ensuring compatibility, particularly in the self-managed [deployment option](/get-started/deployment-options.md). ## Availability of features -The features available to you can differ based on deployment type, product lifecycle stage, and specific version. +Available features can differ based on deployment type, product lifecycle stage, and specific version. ### Feature availability factors | Factor | Description | -|-------|-------------| -| **Deployment type** | The environment where the feature is available, for example, {{stack}}, {{serverless-full}}, {{ece}} (ECE), {{eck}} (ECK) | -| **Lifecycle state** | The development or support status of the feature, for example, GA and Beta | -| **Version** | The specific version the lifecycle state applies to | +| ----- | ----- | +| Deployment type | The environment where the feature is available, for example, self-managed, {{serverless-full}}, {{ece}}, {{eck}} | +| Lifecycle state | The development or support status of the feature, for example, GA, Technical preview, Beta | +| Version | The specific version the lifecycle state applies to | ### Lifecycle states | Lifecycle state | Description | -|-------|-------------| -| **Generally Available (GA)** | Production-ready feature. When unspecified, GA is the default | -| **Beta** | Feature is nearing general availability but not yet production-ready | -| **Technical preview** | Feature is in early development stage | -| **Unavailable** | Feature is not supported in this deployment type or version | +| ----- | ----- | +| Technical preview | Feature is in early development stage | +| Beta | Feature is nearing general availability, but not yet production ready | +| Generally Available (GA) | Production-ready feature. When unspecified, GA is the default | +| Deprecated | Feature is still usable, but is planned to be removed or replaced in a future update | +| Removed | Feature can no longer be used | +| Unavailable | Feature is unsupported in this deployment type or version | ### Examples of where availability can vary | Category | Example | -|-------|-------------| -| **Elastic Stack versions** | [Elastic Stack](the-stack.md) version 9.0.0 and later, including 9.1.0 | -| **Deployment types** | [Elastic Cloud Serverless](/deploy-manage/deploy/elastic-cloud/serverless.md), [Elastic Cloud Hosted](/deploy-manage/deploy/elastic-cloud/cloud-hosted.md), [Elastic Cloud Enterprise (ECE)](/deploy-manage/deploy/cloud-enterprise.md), [Elastic Cloud on Kubernetes (ECK)](/deploy-manage/deploy/cloud-on-k8s.md), and [Self-managed deployments](/deploy-manage/deploy/self-managed.md) | -| **Deployment versions** | [Elastic Cloud Enterprise (ECE)](/deploy-manage/deploy/cloud-enterprise.md) 4.0.0 and later, [Elastic Cloud on Kubernetes (ECK)](/deploy-manage/deploy/cloud-on-k8s.md) 3.0.0 and later | -| **Serverless project types** | {{es}}, {{observability}}, and {{elastic-sec}} +| ----- | ----- | +| {{stack}} versions | [{{stack}}](/get-started/the-stack.md) version 9.0.0 and later, including 9.1.0 | +| Deployment types | [{{serverless-full}}](/deploy-manage/deploy/elastic-cloud/serverless.md), [{{ech}}](/deploy-manage/deploy/elastic-cloud/cloud-hosted.md), [{{ece}}](/deploy-manage/deploy/cloud-enterprise.md), [{{eck}}](/deploy-manage/deploy/cloud-on-k8s.md), and [Self-managed deployments](/deploy-manage/deploy/self-managed.md) | +| Orchestrator versions | [{{ece}}](/deploy-manage/deploy/cloud-enterprise.md) 4.0.0 and later, [{{eck}}](/deploy-manage/deploy/cloud-on-k8s.md) 3.0.0 and later | +| Serverless project types | {{es}}, Elastic {{observability}}, and {{elastic-sec}} | ## Find docs for your product version @@ -207,10 +213,3 @@ Find the documentation for your Elastic product versions or releases. | [Elastic APM AWS Lambda extension](apm-aws-lambda://release-notes/release-notes.md) | 1.0.0 and later | | [Elastic APM Attacher for Kubernetes](apm-k8s-attacher://reference/index.md) | 1.1.3 | - - - - - - - From 0cdb85119b5bf3cb84f7f84fb830e15efb1db4d4 Mon Sep 17 00:00:00 2001 From: lcawl Date: Wed, 17 Sep 2025 16:53:15 -0700 Subject: [PATCH 02/11] Reset more files --- get-started/the-stack.md | 2 - get-started/versioning-availability.md | 65 +++++++++++++------------- 2 files changed, 33 insertions(+), 34 deletions(-) diff --git a/get-started/the-stack.md b/get-started/the-stack.md index 77b9ae93d1..842dfc7402 100644 --- a/get-started/the-stack.md +++ b/get-started/the-stack.md @@ -8,8 +8,6 @@ mapped_pages: products: - id: elastic-stack - id: kibana -applies_to: - stack: --- # The {{stack}} diff --git a/get-started/versioning-availability.md b/get-started/versioning-availability.md index bb4724a3c9..6afc51de38 100644 --- a/get-started/versioning-availability.md +++ b/get-started/versioning-availability.md @@ -2,24 +2,20 @@ navigation_title: Versioning and availability mapped_pages: - https://www.elastic.co/guide/en/starting-with-the-elasticsearch-platform-and-its-solutions/current/introducing-elastic-documentation.html -applies_to: - serverless: - stack: products: - id: elastic-stack description: Learn how Elastic handles versioning and feature availability in the docs. Find the product versions that are supported, how to read availability badges, and... --- -# Versioning and availability +# Versioning and availability in Elastic Docs -Learn how Elastic products are versioned, the lifecycle of features, and how to find the right documentation for your deployment type and product version. Find answers to common questions about the versioning and confidently navigate our continuously updated documentation. +Learn how Elastic Docs handles versioning, feature availability, and how to find the right documentation for your deployment type and product version. Find answers to common questions about the Elastic Stack versioning and confidently navigate our continuously updated documentation. -## Understanding versioning +## Frequently asked questions -Many components of the [{{stack}}](/get-started/the-stack.md) (such as {{es}} and {{kib}}) share the same versioning pattern. -In the documentation, this group of components is typically referred to as the {{stack}}. +### Where can I find documentation for the latest version of the {{stack}}? -Orchestrators such as {{ece}} and {{eck}}, and other tools such as code clients and SDKs, are versioned independently of the {{stack}}. The {{ecloud}} console and {{serverless-short}} projects are always automatically updated with the latest changes. +You’re in the right place! All documentation for Elastic Stack 9.0.0 and later is available at [elastic.co/docs](https://www.elastic.co/docs), including the latest {{version.stack| M.M}} version and any future versions in the 9.x series. Need docs for an earlier version? Go to [elastic.co/guide](https://www.elastic.co/guide). @@ -95,47 +91,45 @@ To make sure you're always viewing the most up-to-date and relevant documentatio ## Understanding {{stack}} versioning -The components of the {{stack}} typically use semantic versioning in the `X.Y.Z` format, such as `9.0.0`. +{{stack}} uses semantic versioning in the `X.Y.Z` format, such as `9.0.0`. | Version | Description | -| ----- | ----- | -| Major (X) | Indicates significant changes, such as new features, breaking changes, and major enhancements. Upgrading to a new major version may require changes to your existing setup and configurations. | -| Minor (Y) | Introduces new features and improvements, while maintaining backward compatibility with the previous minor versions within the same major version. Upgrading to a new minor version should not require any changes to your existing setup. | -| Patch (Z) | Contains bug fixes and security updates, without introducing new features or breaking changes. Upgrading to a new patch version should be seamless and not require any changes to your existing setup. | +|-------|-------------| +| **Major (X)** | Indicates significant changes, such as new features, breaking changes, and major enhancements. Upgrading to a new major version may require changes to your existing setup and configurations. | +| **Minor (Y)** | Introduces new features and improvements, while maintaining backward compatibility with the previous minor versions within the same major version. Upgrading to a new minor version should not require any changes to your existing setup. | +| **Patch (Z)** | Contains bug fixes and security updates, without introducing new features or breaking changes. Upgrading to a new patch version should be seamless and not require any changes to your existing setup. | -Understanding versioning is essential for [upgrade planning](/deploy-manage/upgrade.md) and ensuring compatibility, particularly in the self-managed [deployment option](/get-started/deployment-options.md). +Understanding {{stack}} versioning is essential for [upgrade planning](/deploy-manage/upgrade.md) and ensuring compatibility. ## Availability of features -Available features can differ based on deployment type, product lifecycle stage, and specific version. +The features available to you can differ based on deployment type, product lifecycle stage, and specific version. ### Feature availability factors | Factor | Description | -| ----- | ----- | -| Deployment type | The environment where the feature is available, for example, self-managed, {{serverless-full}}, {{ece}}, {{eck}} | -| Lifecycle state | The development or support status of the feature, for example, GA, Technical preview, Beta | -| Version | The specific version the lifecycle state applies to | +|-------|-------------| +| **Deployment type** | The environment where the feature is available, for example, {{stack}}, {{serverless-full}}, {{ece}} (ECE), {{eck}} (ECK) | +| **Lifecycle state** | The development or support status of the feature, for example, GA and Beta | +| **Version** | The specific version the lifecycle state applies to | ### Lifecycle states | Lifecycle state | Description | -| ----- | ----- | -| Technical preview | Feature is in early development stage | -| Beta | Feature is nearing general availability, but not yet production ready | -| Generally Available (GA) | Production-ready feature. When unspecified, GA is the default | -| Deprecated | Feature is still usable, but is planned to be removed or replaced in a future update | -| Removed | Feature can no longer be used | -| Unavailable | Feature is unsupported in this deployment type or version | +|-------|-------------| +| **Generally Available (GA)** | Production-ready feature. When unspecified, GA is the default | +| **Beta** | Feature is nearing general availability but not yet production-ready | +| **Technical preview** | Feature is in early development stage | +| **Unavailable** | Feature is not supported in this deployment type or version | ### Examples of where availability can vary | Category | Example | -| ----- | ----- | -| {{stack}} versions | [{{stack}}](/get-started/the-stack.md) version 9.0.0 and later, including 9.1.0 | -| Deployment types | [{{serverless-full}}](/deploy-manage/deploy/elastic-cloud/serverless.md), [{{ech}}](/deploy-manage/deploy/elastic-cloud/cloud-hosted.md), [{{ece}}](/deploy-manage/deploy/cloud-enterprise.md), [{{eck}}](/deploy-manage/deploy/cloud-on-k8s.md), and [Self-managed deployments](/deploy-manage/deploy/self-managed.md) | -| Orchestrator versions | [{{ece}}](/deploy-manage/deploy/cloud-enterprise.md) 4.0.0 and later, [{{eck}}](/deploy-manage/deploy/cloud-on-k8s.md) 3.0.0 and later | -| Serverless project types | {{es}}, Elastic {{observability}}, and {{elastic-sec}} | +|-------|-------------| +| **Elastic Stack versions** | [Elastic Stack](the-stack.md) version 9.0.0 and later, including 9.1.0 | +| **Deployment types** | [Elastic Cloud Serverless](/deploy-manage/deploy/elastic-cloud/serverless.md), [Elastic Cloud Hosted](/deploy-manage/deploy/elastic-cloud/cloud-hosted.md), [Elastic Cloud Enterprise (ECE)](/deploy-manage/deploy/cloud-enterprise.md), [Elastic Cloud on Kubernetes (ECK)](/deploy-manage/deploy/cloud-on-k8s.md), and [Self-managed deployments](/deploy-manage/deploy/self-managed.md) | +| **Deployment versions** | [Elastic Cloud Enterprise (ECE)](/deploy-manage/deploy/cloud-enterprise.md) 4.0.0 and later, [Elastic Cloud on Kubernetes (ECK)](/deploy-manage/deploy/cloud-on-k8s.md) 3.0.0 and later | +| **Serverless project types** | {{es}}, {{observability}}, and {{elastic-sec}} ## Find docs for your product version @@ -213,3 +207,10 @@ Find the documentation for your Elastic product versions or releases. | [Elastic APM AWS Lambda extension](apm-aws-lambda://release-notes/release-notes.md) | 1.0.0 and later | | [Elastic APM Attacher for Kubernetes](apm-k8s-attacher://reference/index.md) | 1.1.3 | + + + + + + + From 5fdb60e8dfb08af8aee6838c0ea1081c062722db Mon Sep 17 00:00:00 2001 From: Janeen Roberts Date: Wed, 24 Sep 2025 10:44:02 -0400 Subject: [PATCH 03/11] Update introduction.md --- get-started/introduction.md | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/get-started/introduction.md b/get-started/introduction.md index c46ed53388..5d29dc309e 100644 --- a/get-started/introduction.md +++ b/get-started/introduction.md @@ -9,13 +9,13 @@ applies_to: --- # Solutions and use cases [introduction] -Elastic offers three major search-powered solutions: {{es}}, {{observability}}, and {{elastic-sec}}— all built on an open source, extensible platform. +Elastic offers three major search-powered solutions: {{es}}, {{observability}}, and {{elastic-sec}}—all built on an open source, extensible platform. Whether you're building a search experience, monitoring your infrastructure, or securing your environment, this topic helps you understand what each Elastic solution offers—and how to choose the right one for your business needs. | Your need | Recommended solution | Best for | |-----------|-------------------|----------| | Build powerful, scalable searches to quickly search, analyze, and visualize large amounts of data for real-time insights | [{{es}}](#search-overview) | Developers, architects, data engineers | -| Observe and monitor system health and performance or send telemetry data | [Elastic {{observability}}](#observability-overview) | DevOps, SREs, IT operations | +| Observe and monitor system health and performance, or send telemetry data | [Elastic {{observability}}](#observability-overview) | DevOps, SREs, IT operations | | Monitor data for anomalous activity, detect, prevent, and respond to security incidents | [{{elastic-sec}}](#security-overview) | SOC teams, security analysts, IT security admins | :::{tip} @@ -31,7 +31,7 @@ Each of our solutions is available as a fully managed {{serverless-short}} proje -For an overview of search use cases, including full-text, geospatial, semantic, and vector search, and retrieval augmented generation (RAG), go to [](/solutions/search.md). +For an overview of search use cases, including full-text, geospatial, semantic, and vector search, as well as retrieval augmented generation (RAG), go to [](/solutions/search.md). To try out some simple search use cases, go to [](/solutions/search/get-started/quickstarts.md). For an introduction to core {{es}} concepts such as indices, documents, and mappings, refer to [](/manage-data/data-store.md). -To dive more deeply into the building blocks of an {{es}} cluster, including nodes, shards, primaries, and replicas, refer to [](/deploy-manage/distributed-architecture.md). +To dive more deeply into the building blocks of {{es}} clusters, including nodes, shards, primaries, and replicas, refer to [](/deploy-manage/distributed-architecture.md). @@ -153,15 +153,15 @@ Before diving into setup and configuration, familiarize yourself with the founda When building custom search experiences or indexing general data, you have several direct and flexible ingestion options: * **Native APIs and language clients:** Index any JSON document directly using the {{es}} REST API or the official clients for languages like Python, Java, Go, and more. -* **Web crawler:** Ingest content from public or private websites to make them searchable. +* **Web crawler:** Ingest content from public or private websites to make it searchable. * **Enterprise connectors:** Use pre-built connectors to sync data from external content sources like SharePoint, Confluence, Jira, and databases like MongoDB or PostgreSQL into {{es}}. ## Get data into Elastic Observability For full-stack observability, ingest logs, metrics, traces, and profiles using these OpenTelemetry-native methods: -* **{{edot}}:** Use Elastic's supported OpenTelemetry SDKs for custom application instrumentation and the Collector for vendor-neutral infrastructure telemetry. -* **{{agent}}:** A single agent to collect infrastructure logs and metrics from hosts, containers, and cloud services using pre-built integrations. +* **{{edot}}:** Use Elastic's OpenTelemetry SDKs for custom application instrumentation and the Collector for vendor-neutral infrastructure telemetry. +* **{{agent}}:** Collects infrastructure logs and metrics from hosts, containers, and cloud services using pre-built integrations. * **APM Agents:** Provide streamlined, out-of-the-box auto-instrumentation of your applications to capture detailed traces and performance metrics. * **{{ls}} and {{beats}}:** Leverage these battle-tested tools for advanced log processing pipelines (Logstash) and lightweight data shipping (Beats). From f315c1840fde8258cce97dbb2c66f5867f94394b Mon Sep 17 00:00:00 2001 From: Janeen Roberts Date: Sat, 4 Oct 2025 22:17:21 -0400 Subject: [PATCH 10/11] Fixing ref link --- get-started/introduction.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/get-started/introduction.md b/get-started/introduction.md index 8e15e46420..e8648e8441 100644 --- a/get-started/introduction.md +++ b/get-started/introduction.md @@ -94,7 +94,7 @@ At the heart of Elastic {{observability}} are several key components that enable * [**Logs:**](/solutions/observability/logs.md) Timestamped records of events that provide detailed, contextual information. * [**Metrics:**](/solutions/observability/infra-and-hosts/analyze-infrastructure-host-metrics.md) Numerical measurements of system performance and health over time. * [**Traces:**](/solutions/observability/apm/traces.md) Representations of end-to-end journeys of requests as they travel through distributed systems. -* [**OpenTelemetry:**](/solutions/observability/apm/use-opentelemetry-with-apm.md) {{Observability}} offers first-class, production-grade support for OpenTelemetry. This allows organizations to use vendor-neutral instrumentation and stream native OTel data without proprietary agents, leveraging the Elastic Distribution of OpenTelemetry (EDOT). +* [**OpenTelemetry:**](/solutions/observability/apm/opentelemetry/index.md) {{Observability}} offers first-class, production-grade support for OpenTelemetry. This allows organizations to use vendor-neutral instrumentation and stream native OTel data without proprietary agents, leveraging the Elastic Distribution of OpenTelemetry (EDOT). * [**AIOps and AI Assistant:**](/solutions/observability/observability-ai-assistant.md) Leverages predictive analytics and an LLM-powered AI Assistant to reduce the time required to detect, investigate, and resolve incidents. This includes zero-config anomaly detection, pattern analysis, and the ability to surface correlations and root causes. * **[Alerting](/solutions/observability/incident-management/alerting.md) and [Cases](/solutions/observability/incident-management/cases.md):** Allows you to create rules to detect complex conditions and perform actions. Cases allows teams to stay aware of potential issues and track investigation details, assign tasks, and collaborate on resolutions. * [**Service Level Objectives (SLOs):**](/solutions/observability/incident-management/service-level-objectives-slos.md) A framework for defining and monitoring the reliability of a service. Elastic {{observability}} allows for creating and tracking SLOs to ensure that performance targets are being met. From 43a4935299ce711451d5ff0daf195b26d1c102dd Mon Sep 17 00:00:00 2001 From: Janeen Roberts Date: Fri, 10 Oct 2025 11:14:14 -0400 Subject: [PATCH 11/11] Update introduction.md --- get-started/introduction.md | 16 +++++++++------- 1 file changed, 9 insertions(+), 7 deletions(-) diff --git a/get-started/introduction.md b/get-started/introduction.md index e8648e8441..4909e777a8 100644 --- a/get-started/introduction.md +++ b/get-started/introduction.md @@ -65,7 +65,7 @@ The following concepts relate to core {{es}} features and thus apply to all solu ### {{observability}} overview [observability-overview] -Elastic {{observability}} provides unified observability across applications and infrastructure. It combines logs, metrics, application traces, user experience data, and more into a single, integrated platform. This consolidation allows for powerful, cross-referenced analysis, enabling teams to move from detecting issues to understanding their root causes with speed and efficiency. By leveraging the search and analytics capabilities of {{es}}, it offers a holistic view of system behavior. +Elastic {{observability}} provides unified observability across applications and infrastructure. It combines logs, metrics, application traces, user experience data, and more into a single, integrated platform. This consolidation allows for powerful, cross-referenced analysis, enabling teams to move from detecting issues to understanding their root causes quickly and efficiently. By leveraging the search and analytics capabilities of {{es}}, it offers a holistic view of system behavior. Elastic {{observability}} embraces open standards like OpenTelemetry for flexible data collection, and offers scalable, cost-efficient data retention with tiered storage. @@ -83,7 +83,7 @@ Apply {{observability}} to various scenarios to improve operational awareness an * **Uptime monitoring:** Continuously check the status of services and applications to ensure they are available. * **Universal Profiling:** Gain visibility into system performance and identify expensive lines of code without application instrumentation, helping to increase CPU efficiency and reduce cloud spend. * **LLM Observability:** Gain deep insights into the performance, usage, and costs of Large Language Model (LLM) prompts and responses. -* **Incident response and management:** Investigate operational incidents by correlating data from multiple sources, which accelerates root cause analysis and resolution. +* **Incident response and management:** Investigate operational incidents by correlating data from multiple sources, accelerating root cause analysis and resolution. ::: ### {{observability}} core concepts [observability-concepts] @@ -115,10 +115,10 @@ Use {{elastic-sec}} to protect your systems from security threats. :::{dropdown} Use cases * **SIEM:** {{elastic-sec}}'s modern SIEM provides a centralized platform for ingesting, analyzing, and managing security data from various sources. * **Third-party integration support:** Ingest data from a various tools and data sources so you can centralize your security data. -* **Threat detection and analytics:** Identify unknown threats by enabling prebuilt or custom detection rules, automatically detect anomalous activity with built-in machine learning jobs, or proactively search for threats using our powerful threat hunting and interactive visualization tools. +* **Threat detection and analytics:** Identify threats by using prebuilt rules with the ability to customize or create custom detection rules, automatically detect anomalous activity with built-in machine learning jobs, or proactively search for threats using our powerful threat hunting and interactive visualization tools. * **Automatic migration:** Migrate SIEM rules from other platforms to {{elastic-sec}}. * **Endpoint protection and threat prevention:** Automatically stop cybersecurity attacks—such as malware and ransomware—before damage and loss can occur. -* **AI-powered features:** Leverage generative AI to help enhance threat detection, assist with incident response, and improve day-to-day security operations. For example, use AI Assistant to summarize alerts, identify relevant information, suggest investigation steps, and generate complex queries from natural language input. +* **AI-powered features:** Leverage generative AI to help enhance threat detection, assist with incident response, and improve day-to-day security operations. * **Custom dashboards and visualizations:** Create custom dashboards and visualizations to gain insights into security events. * **Cloud Security:** {{elastic-sec}} provides the following cloud features: * **Cloud Security Posture Management (CSPM) and Kubernetes Security Posture Management (KSPM):** Check cloud service configurations against security benchmarks to identify and resolve misconfigurations that can be exploited. @@ -140,10 +140,12 @@ Before diving into setup and configuration, familiarize yourself with the founda * [**Alerts:**](/solutions/security/detect-and-alert/manage-detection-alerts.md) Notifications that are generated when rule conditions are met. Alerts include a wide range of information about potential threats, including host, user, network, and other contextual data to assist your investigation. * [**Machine learning and anomaly detection:**](/solutions/security/advanced-entity-analytics/anomaly-detection.md) Anomaly detection jobs identify anomalous events or patterns in your data. Use these with machine learning detection rules to generate alerts when behavior deviates from normal activity. * [**Entity analytics:**](/solutions/security/advanced-entity-analytics/overview.md) A threat detection feature that combines the power of Elastic’s detection engine and machine learning capabilities to identify unusual behavior for hosts, users, and services. -* [**Cases:**](/solutions/security/investigate/cases.md) A tool that allows you to collect and share information about security issues. Opening a case lets you track key investigation details and collect alerts in a central location. You can also send cases to external systems. -* [**Timeline:**](/solutions/security/investigate/timeline.md) A threat hunting tool that allows you to investigate security events so you can gather and analyze data related to alerts or suspicious activity. You can add events to Timeline from various sources, build custom queries, and import/export a Timeline to collaborate and share. +* [**Cases:**](/solutions/security/investigate/cases.md) Allows you to collect and share information about security issues. Opening a case lets you track key investigation details and collect alerts in a central location. You can also send cases to external systems. +* [**Timeline:**](/solutions/security/investigate/timeline.md) Investigate security events so you can gather and analyze data related to alerts or suspicious activity. You can add events to Timeline from various sources, build custom queries, and import/export a Timeline to collaborate and share. * [**Security posture management:**](/solutions/security/cloud.md) Includes native cloud security features, such as Cloud Security Posture Management (CSPM) and Cloud Native Vulnerability Management (CNVM), that help you evaluate your cloud infrastructure's configuration against security best practices and identify vulnerabilities. You can use Elastic's native tools or ingest third-party cloud security data and incorporate it into {{elastic-sec}}'s workflows. -* [**AI Assistant:**](/solutions/security/ai/ai-assistant.md) A generative AI-powered tool that helps with tasks like alert investigation, incident response, and query generation. It utilizes natural language processing and knowledge retrieval to provide context-aware assistance, summarize threats, suggest next steps, and automate workflows. Use AI Assistant to better understand and respond to security incidents. +* [**AI Assistant:**](/solutions/security/ai/ai-assistant.md) Helps with tasks like alert investigation, incident response, and query generation. It utilizes natural language processing and knowledge retrieval to provide context-aware assistance, summarize threats, suggest next steps, and automate workflows. Use AI Assistant to better understand and respond to security incidents. +* [**Attack Discovery:**](/solutions/security/ai/attack-discovery.md) Uses large language models (LLMs) to analyze security alerts, identify coordinated attack patterns, and provide actionable intelligence to security operations teams. It improves alert triage efficiency by automatically correlating related alerts into comprehensive, simplified threat summaries, allowing you to quickly understand and respond to the most impactful attacks. +* [**Elastic AI SOC Engine (EASE):**](/solutions/security/ai/ease/ease-intro.md) Integrates Elastic's AI-powered security tools into existing SIEM and EDR/XDR platforms to help mitigate alert fatigue, accelerate threat investigations, and improve response efficiency ({{serverless-short}} only). :::