# ES enterprise search engine or log analytics?

**URL:** <https://discuss.elastic.co/t/es-enterprise-search-engine-or-log-analytics/21161>\
**Category:** Elasticsearch\
**Created:** [December 9, 2014, 7:46am UTC](https://discuss.elastic.co/t/es-enterprise-search-engine-or-log-analytics/21161 "2014-12-09T07:46:46Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Gianni\_Livolsi](https://avatars.discourse-cdn.com/v4/letter/g/41988e/32.png) [@Gianni\_Livolsi](https://discuss.elastic.co/u/Gianni_Livolsi)\
**Post date:** [December 9, 2014, 7:46am UTC](https://discuss.elastic.co/t/es-enterprise-search-engine-or-log-analytics/21161/1 "2014-12-09T07:46:46Z")

</div>

Elasticsearch is apparently morphing from a traditional enterprise search engine into a log analytics. I' am planning the future of my small company but I want to start in the right direction, that's just my feeling or actually elasticsearch is changing its marketing strategies??

---

<div class="post-metadata">

**Author:** ![Jurgen\_Wagner\_DVT](https://avatars.discourse-cdn.com/v4/letter/j/e0b2c6/32.png) [@Jurgen\_Wagner\_DVT](https://discuss.elastic.co/u/Jurgen_Wagner_DVT)\
**Post date:** [December 9, 2014, 8:54am UTC](https://discuss.elastic.co/t/es-enterprise-search-engine-or-log-analytics/21161/2 "2014-12-09T08:54:43Z")

</div>

Hello Gianni,  
I cannot look into the heads of the Elasticsearch developers and company  
strategists, but it is clear to me that if they want to position a new  
"product" in an area that is already rather well covered by other  
(commercial and OpenSource) products, they should find their own, distinct  
positioning in the market. Apparently, log ingestion, retrieval and  
analytics is a field in which there are strong Elasticsearch customers and  
nice success stories, but where many companies are struggling today to find  
solutions at reasonable cost. So, the logical consequence for Elasticsearch  
is to promote their (rather generic) tools as a solution (with Logstash and  
Kibana) that provides a quick start for many users with challenges in  
exactly this field. That's how you gain market share 🙂

Practically, you could do exactly the same with SolrCloud. However, your  
mileage will vary compared to "ELK".

So, I would interpret this "focus" on log analytics as simply a clever move  
to become visible, to quickly create a significant community of users, and  
to leverage the paid-for products Elasticsearch as a company is offering or  
planning to offer.

As for your start-up, does it really matter whether Elasticsearch will  
continue to focus on log analytics or not? Don't you think that if your  
company will build up extensive experience with Elasticsearch in the domain  
of large log analytics projects, you could later translate that into other  
application domains as well - just as Elasticsearch will explore other  
fields? Looking at the featured case studies on their web site, there are  
clearly more applications that could be transformed into nice patterns  
analogous to the "log analytics" application.

Best regards,  
--Jürgen

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/976f5c59-cc93-4876-980a-1b453319eff0%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/976f5c59-cc93-4876-980a-1b453319eff0%40googlegroups.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

**Author:** ![nik9000](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nik9000/32/44947_2.png) [@nik9000](https://discuss.elastic.co/u/nik9000)\
**Post date:** [December 9, 2014, 3:52pm UTC](https://discuss.elastic.co/t/es-enterprise-search-engine-or-log-analytics/21161/3 "2014-12-09T15:52:03Z")

</div>

Elasticsearch the open source project is totally data agnostic and supports  
traditional search use cases well. That won't go away because it too  
important to too many people.

By the same token log analytics is a very common use case so you'll see  
more attention payed to things like: speeding up indexing lots of small  
documents, index-mostly workloads, and aggregations. Lots of folks do lots  
of log analytics with Elasticsearch so that is probably here to stay as  
well.

These really are complimentary strategies - when you need to implement  
search in some application you might reach for Elasticsearch because some  
opsen has been talking your ear off about how nice Logstash and Kibana  
are. That's almost what happened to us.

One big difference between these two prongs is that ELK is batteries mostly  
included - its a tool and you might build custom dashboards or configure  
some custom filters but for the most part it just works. In the enterprise  
search space Elasticsearch is much more a building block than a premade  
tool. Its something that other tools build on to power search. So there  
is no setting to have it go and spider a sharepoint repository or whatever.

Nik

On Tue, Dec 9, 2014 at 3:54 AM, [juergen.wagner@devoteam.com](mailto:juergen.wagner@devoteam.com) wrote:

> Hello Gianni,  
> I cannot look into the heads of the Elasticsearch developers and company  
> strategists, but it is clear to me that if they want to position a new  
> "product" in an area that is already rather well covered by other  
> (commercial and OpenSource) products, they should find their own, distinct  
> positioning in the market. Apparently, log ingestion, retrieval and  
> analytics is a field in which there are strong Elasticsearch customers and  
> nice success stories, but where many companies are struggling today to find  
> solutions at reasonable cost. So, the logical consequence for Elasticsearch  
> is to promote their (rather generic) tools as a solution (with Logstash and  
> Kibana) that provides a quick start for many users with challenges in  
> exactly this field. That's how you gain market share 🙂
> 
> Practically, you could do exactly the same with SolrCloud. However, your  
> mileage will vary compared to "ELK".
> 
> So, I would interpret this "focus" on log analytics as simply a clever  
> move to become visible, to quickly create a significant community of users,  
> and to leverage the paid-for products Elasticsearch as a company is  
> offering or planning to offer.
> 
> As for your start-up, does it really matter whether Elasticsearch will  
> continue to focus on log analytics or not? Don't you think that if your  
> company will build up extensive experience with Elasticsearch in the domain  
> of large log analytics projects, you could later translate that into other  
> application domains as well - just as Elasticsearch will explore other  
> fields? Looking at the featured case studies on their web site, there are  
> clearly more applications that could be transformed into nice patterns  
> analogous to the "log analytics" application.
> 
> Best regards,  
> --Jürgen
> 
> --  
> You received this message because you are subscribed to the Google Groups  
> "elasticsearch" group.  
> To unsubscribe from this group and stop receiving emails from it, send an  
> email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
> To view this discussion on the web visit  
> [https://groups.google.com/d/msgid/elasticsearch/976f5c59-cc93-4876-980a-1b453319eff0%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/976f5c59-cc93-4876-980a-1b453319eff0%40googlegroups.com)  
> [https://groups.google.com/d/msgid/elasticsearch/976f5c59-cc93-4876-980a-1b453319eff0%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/976f5c59-cc93-4876-980a-1b453319eff0%40googlegroups.com?utm_medium=email&utm_source=footer)  
> .
> 
> For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAPmjWd3rBitxDcSGVUHC-KtE\_YNVA4ro%2ByQBJHTrSAEKnR3KHw%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAPmjWd3rBitxDcSGVUHC-KtE_YNVA4ro%2ByQBJHTrSAEKnR3KHw%40mail.gmail.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

**Author:** ![Jilles\_van\_Gurp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jilles_van_gurp/32/879_2.png) [@Jilles\_van\_Gurp](https://discuss.elastic.co/u/Jilles_van_Gurp)\
**Post date:** [December 9, 2014, 4:41pm UTC](https://discuss.elastic.co/t/es-enterprise-search-engine-or-log-analytics/21161/4 "2014-12-09T16:41:36Z")

</div>

The best way to think of elasticsearch is as an ever evolving swiss army  
knife for search. It has support for both traditional search features as  
well as some advanced features for structured search. For example,  
elasticsearch aggregations have very little to do with text search but are  
highly useful for digging through log data and other structured data. I  
wouldn't worry too much about the marketing, although given the work in  
particular areas, I would expect a lot more emphasis on things it has  
recently become much better on (e.g. aggregations, structured search, use  
as a resilient sharded& replicated document store) rather than stuff it has  
always done well (i.e. text search).

If you have a small company (like we do) and you are considering to bet the  
future on a technology like elasticsearch (like we did), it is useful to  
consider what you expect from the product right now and in the future. I'm  
now two years into this choice and at the time it was a shaky bet informed  
in no small part by my previous experience with lucene and solr. In short,  
I knew what was possible technically, what the limitations were, and which  
things were being worked on. So, it paid off but a lot of the features we  
use today did not exist two years ago. In retrospect, our timing was  
perfect and Elasticsearch seems to have a knack to deliver stuff we need  
just in time.

On Tuesday, December 9, 2014 9:40:37 AM UTC+1, Gianni Livolsi wrote:

> Elasticsearch is apparently morphing from a traditional enterprise search  
> engine into a log analytics. I' am planning the future of my small  
> company  
> but I want to start in the right direction, that's just my feeling or  
> actually elasticsearch is changing its marketing strategies??
> 
> --  
> View this message in context:  
> [http://elasticsearch-users.115913.n3.nabble.com/ES-enterprise-search-engine-or-log-analytics-tp4067414.html](http://elasticsearch-users.115913.n3.nabble.com/ES-enterprise-search-engine-or-log-analytics-tp4067414.html)  
> Sent from the Elasticsearch Users mailing list archive at [Nabble.com](http://Nabble.com).

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/199cca7c-9bd6-4780-9831-db47d51c8d2e%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/199cca7c-9bd6-4780-9831-db47d51c8d2e%40googlegroups.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 12:44am UTC](https://discuss.elastic.co/t/es-enterprise-search-engine-or-log-analytics/21161/5 "2017-07-06T00:44:43Z")

</div>

Closed on July 6, 2017, 12:44am UTC


