Skip to content
Merged
Show file tree
Hide file tree
Changes from 17 commits
Commits
Show all changes
30 commits
Select commit Hold shift + click to select a range
2be7611
Reset changed files
lcawl Sep 17, 2025
0cdb851
Reset more files
lcawl Sep 17, 2025
5fdb60e
Update introduction.md
jmikell821 Sep 24, 2025
c8d2068
Add links for Obs
theletterf Sep 25, 2025
929a6ed
Fixes link error
jmikell821 Sep 26, 2025
aa8fc6a
Update introduction.md
theletterf Sep 30, 2025
09a912b
Fix link
theletterf Sep 30, 2025
1c982c6
Remove link
theletterf Sep 30, 2025
c0d0045
Update introduction.md
jmikell821 Oct 4, 2025
4f7b011
Merge branch 'main' into intro-solutions
jmikell821 Oct 5, 2025
f315c18
Fixing ref link
jmikell821 Oct 5, 2025
2972dfd
Merge branch 'intro-solutions' of https://github.com/lcawl/docs-conte…
jmikell821 Oct 5, 2025
43a4935
Update introduction.md
jmikell821 Oct 10, 2025
c96ccb7
Augment solution overviews
lcawl Oct 23, 2025
b4a8740
Address link errors
lcawl Oct 23, 2025
d9f8f70
Minor edits
lcawl Oct 23, 2025
e08678e
Merge branch 'main' into intro-solutions
lcawl Oct 23, 2025
c30b770
Update solutions/search.md
lcawl Oct 27, 2025
962be88
Update get-started/introduction.md
lcawl Oct 27, 2025
80c01d6
Update solutions/search.md
lcawl Oct 27, 2025
02d4aa4
Merge branch 'main' into intro-solutions
lcawl Oct 27, 2025
a1fcb01
Update title and navigation title
lcawl Oct 27, 2025
673212e
Adds snippets for use cases/concepts
jmikell821 Oct 27, 2025
af79882
Merge branch 'intro-solutions' of https://github.com/lcawl/docs-conte…
jmikell821 Oct 27, 2025
91fb60e
Move get-started links, comment out use cases
lcawl Oct 27, 2025
e56ad93
Fix fundamentals link and remove extraneous header
lcawl Oct 27, 2025
a72d57b
Update get-started/introduction.md
lcawl Oct 28, 2025
944e484
Merge branch 'main' into intro-solutions
lcawl Oct 28, 2025
27ff581
Minor fix to bullets
lcawl Oct 28, 2025
56057f0
Merge branch 'main' into intro-solutions
lcawl Oct 28, 2025
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 5 additions & 9 deletions get-started/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -33,21 +33,17 @@ You'll also find other helpful information, such as how to use our docs, trainin

Elastic provides an open source search, analytics, and AI platform, and out-of-the-box solutions for observability and security. The Search AI platform combines the power of search and generative AI to provide near real-time search and analysis with relevance to reduce your time to value.

Elastic offers the following solutions or types of projects:

* [**{{es}}**](/solutions/search/get-started.md): Build powerful search and RAG applications using {{es}}'s vector database, AI toolkit, and advanced retrieval capabilities.
* [**Elastic {{observability}}**](/solutions/observability/get-started.md): Gain comprehensive visibility into applications, infrastructure, and user experience through logs, metrics, traces, and other telemetry data, all in a single interface.
* [**{{elastic-sec}}**](/solutions/security/get-started.md): Combine SIEM, endpoint security, and cloud security to provide comprehensive tools for threat detection and prevention, investigation, and response.

## Explore the fundamentals

Continue your journey with these essential guides that will help you understand and work with Elastic:

* **[The {{stack}}](/get-started/the-stack.md)**: Dive deeper into how the {{stack}}—our suite of open-source tools, including {{es}}, {{kib}}, {{beats}}, and {{ls}}—components work together. Learn about data ingestion methods and understand the core concepts of storing, visualizing, and querying your data.
* **[](/get-started/introduction.md)**: Get an introduction to the {{es}}, Elastic {{observability}}, and {{elastic-sec}} solutions and projects.

* **[](/get-started/the-stack.md)**: Dive deeper into how the {{stack}}—our suite of open-source tools, including {{es}}, {{kib}}, {{beats}}, and {{ls}}—components work together. Learn about data ingestion methods and understand the core concepts of storing, visualizing, and querying your data.

* **[Deployment options](/get-started/deployment-options.md)**: Explore the different ways you can deploy Elastic, from fully managed serverless solutions to self-managed installations, and choose the approach that best fits your operational needs.
* **[](/get-started/deployment-options.md)**: Explore the different ways you can deploy Elastic, from fully managed serverless solutions to self-managed installations, and choose the approach that best fits your operational needs.

* **[Versioning and availability](/get-started/versioning-availability.md)**: Learn how Elastic handles versioning, understand feature availability across different deployment types, and navigate our continuously updated documentation with confidence.
* **[](/get-started/versioning-availability.md)**: Learn how Elastic handles versioning, understand feature availability across different deployment types, and navigate our continuously updated documentation with confidence.

## Training resources

Expand Down
50 changes: 18 additions & 32 deletions get-started/introduction.md
Original file line number Diff line number Diff line change
Expand Up @@ -3,47 +3,33 @@ mapped_pages:
- https://www.elastic.co/guide/en/elasticsearch/reference/current/elasticsearch-intro-what-is-es.html
products:
- id: elasticsearch
applies_to:
stack:
serverless:
---

# Use cases [introduction]
$$$what-is-kib$$$
$$$what-is-es$$$

The {{stack}} is used for a wide and growing range of use cases. Here are a few examples:

## Elasticsearch

- **Full-text search**: Build a fast, relevant full-text search solution using inverted indexes, tokenization, and text analysis.
- **Vector database**: Store and search vectorized data, and create vector embeddings with built-in and third-party natural language processing (NLP) models.
- **Semantic search**: Understand the intent and contextual meaning behind search queries using tools like synonyms, dense vector embeddings, and learned sparse query-document expansion.
- **Hybrid search**: Combine full-text search with vector search using state-of-the-art ranking algorithms.
- **Build search experiences**: Add hybrid search capabilities to apps or websites, or build enterprise search engines over your organization’s internal data sources.
- **Retrieval augmented generation (RAG)**: Use {{ecloud}} as a retrieval engine to supplement generative AI models with more relevant, up-to-date, or proprietary data for a range of use cases.
- **Geospatial search**: Search for locations and calculate spatial relationships using geospatial queries.

[**Get started with {{es}} →**](../solutions/search/get-started.md)
# Solutions and use cases [introduction]

## Observability
Elastic offers three major search-powered solutions: {{es}}, Elastic {{observability}}, and {{elastic-sec}}—all built on an open source, extensible platform.
Whether you're building a search experience, monitoring your infrastructure, or securing your environment, there is a solution that is right for your business needs.

- **Logs, metrics, and traces**: Collect, store, and analyze logs, metrics, and traces from applications, systems, and services.
- **Application performance monitoring (APM)**: Monitor and analyze the performance of business-critical software applications.
- **Real user monitoring (RUM)**: Monitor, quantify, and analyze user interactions with web applications.
- **OpenTelemetry**: Reuse your existing instrumentation to send telemetry data to the Elastic Stack using the OpenTelemetry standard.
| Your need | Recommended solution | Best for |
|-----------|-------------------|----------|
| Build powerful, scalable searches to quickly search, analyze, and visualize large amounts of data for real-time insights | [{{es}}](/solutions/search.md) | Developers, architects, data engineers |
| Observe and monitor system health and performance, or send telemetry data | [Elastic {{observability}}](/solutions/observability.md) | DevOps, SREs, IT operations |
| Monitor data for anomalous activity, detect, prevent, and respond to security incidents | [{{elastic-sec}}](/solutions/security.md) | SOC teams, security analysts, IT security admins |

[**Get started with {{observability}} →**](../solutions/observability/get-started.md)
:::{tip}
Check out our [customer success stories](https://www.elastic.co/customers/success-stories) to learn how various organizations utilize our products for their specific business needs.
:::

## Security
Each of our solutions is available as a fully managed {{serverless-short}} project or a self-managed deployment. Refer to [deployment options](../get-started/deployment-options.md) to learn about these options.

- **Security information and event management (SIEM)**: Collect, store, and analyze security data from applications, systems, and services.
- **Endpoint security**: Monitor and analyze endpoint security data.
- **Threat hunting**: Search and analyze data to detect and respond to security threats.

[**Get started with {{elastic-sec}} →**](../solutions/security/get-started.md)

This is just a sample of search, observability, and security use cases enabled by {{ecloud}}. Refer to Elastic [customer success stories](https://www.elastic.co/customers/success-stories) for concrete examples across a range of industries.
If you're new to Elastic, you can find quickstarts and introductory steps in [](/solutions/search/get-started.md), [](/solutions/observability/get-started.md), and [](/solutions/security/get-started.md).

% TODO: cleanup these links, consolidate with Explore and analyze

$$$what-is-kib$$$
$$$what-is-es$$$
$$$visualize-and-analyze$$$
$$$extend-your-use-case$$$
$$$_manage_your_data$$$
Expand Down
51 changes: 44 additions & 7 deletions solutions/observability.md
Original file line number Diff line number Diff line change
Expand Up @@ -16,15 +16,54 @@ products:

# Elastic Observability overview

<!--
Elastic {{observability}} accelerates problem resolution with open, flexible, and unified observability powered by advanced machine learning and analytics. Elastic ingests all operational and business telemetry and correlates for faster root cause detection.
-->

For a complete overview, refer to [**What is Elastic {{observability}}**](/solutions/observability/get-started/what-is-elastic-observability.md).
Elastic {{observability}} provides unified observability across applications and infrastructure. It combines logs, metrics, application traces, user experience data, and more into a single, integrated platform.
This consolidation allows for powerful, cross-referenced analysis, enabling teams to move from detecting issues to understanding their root causes quickly and efficiently.
By leveraging the search and analytics capabilities of {{es}}, it offers a holistic view of system behavior.

## Get started [_get_started]
Elastic {{observability}} embraces open standards like OpenTelemetry for flexible data collection, and offers scalable, cost-efficient data retention with tiered storage.

For a complete overview, refer to [](/solutions/observability/get-started/what-is-elastic-observability.md).

## Use cases [observability-use-cases]

Apply {{observability}} to various scenarios to improve operational awareness and system reliability.

:::{dropdown} Use cases
* **Log monitoring and analytics:** Centralize and analyze petabytes of log data from any source. This enables quick searching, ad-hoc queries with ES|QL, and visualization with prebuilt dashboards to diagnose issues.
* **Application Performance Monitoring (APM):** Gain code-level visibility into application performance. By collecting and analyzing traces with native OTel support, teams can identify bottlenecks, track errors, and optimize the end-user experience.
* **Infrastructure monitoring:** Monitor metrics from servers, virtual machines, containers, and serverless environments with over 400 out-of-the-box integrations, including OpenTelemetry. This provides deep insights into resource utilization and overall system health.
* **AI-powered log analysis with Streams**: Ingest raw logs in any format directly to a single endpoint without the need for complex agent management or manual parsing pipelines. Streams leverages AI to automatically parse, structure, and analyze log data on the fly.
* **Digital experience monitoring:**
* **Real User Monitoring (RUM):** Capture and analyze data on how real users interact with web applications to improve perceived performance.
* **Synthetic monitoring:** Proactively simulate user journeys and API calls to test application availability and functionality.
* **Uptime monitoring:** Continuously check the status of services and applications to ensure they are available.
* **Universal Profiling:** Gain visibility into system performance and identify expensive lines of code without application instrumentation, helping to increase CPU efficiency and reduce cloud spend.
* **LLM Observability:** Gain deep insights into the performance, usage, and costs of Large Language Model (LLM) prompts and responses.
* **Incident response and management:** Investigate operational incidents by correlating data from multiple sources, accelerating root cause analysis and resolution.
:::

To start your {{observability}} journey, read the [**Get started**](/solutions/observability/get-started.md) guide, which presents all the essential steps, with links to valuable resources. You can also browse the {{observability}} [**Quickstart guides**](/solutions/observability/get-started/quickstarts.md).

## {{observability}} features [_observability_features]

## Core concepts [observability-concepts]

At the heart of Elastic {{observability}} are several key components that enable its capabilities.

:::{dropdown} Concepts
* The three pillars of {{observability}} are:

* [**Logs:**](/solutions/observability/logs.md) Timestamped records of events that provide detailed, contextual information.
* [**Metrics:**](/solutions/observability/infra-and-hosts/analyze-infrastructure-host-metrics.md) Numerical measurements of system performance and health over time.
* [**Traces:**](/solutions/observability/apm/traces.md) Representations of end-to-end journeys of requests as they travel through distributed systems.
* [**OpenTelemetry:**](/solutions/observability/apm/opentelemetry/index.md) {{Observability}} offers first-class, production-grade support for OpenTelemetry. This allows organizations to use vendor-neutral instrumentation and stream native OTel data without proprietary agents, leveraging the Elastic Distribution of OpenTelemetry (EDOT).
* [**AIOps and AI Assistant:**](/solutions/observability/observability-ai-assistant.md) Leverages predictive analytics and an LLM-powered AI Assistant to reduce the time required to detect, investigate, and resolve incidents. This includes zero-config anomaly detection, pattern analysis, and the ability to surface correlations and root causes.
* **[Alerting](/solutions/observability/incident-management/alerting.md) and [Cases](/solutions/observability/incident-management/cases.md):** Allows you to create rules to detect complex conditions and perform actions. Cases allows teams to stay aware of potential issues and track investigation details, assign tasks, and collaborate on resolutions.
* [**Service Level Objectives (SLOs):**](/solutions/observability/incident-management/service-level-objectives-slos.md) A framework for defining and monitoring the reliability of a service. Elastic {{observability}} allows for creating and tracking SLOs to ensure that performance targets are being met.
:::

Read the documentation for each of the {{observability}} features to learn more about how to use them.

Expand All @@ -35,9 +74,9 @@ Read the documentation for each of the {{observability}} features to learn more
- [Incident management](/solutions/observability/incident-management.md)
- [AI Assistant](/solutions/observability/observability-ai-assistant.md)

## Reference documentation [_reference_documentation]
## Related reference [_reference_documentation]

The {{observability}} reference documentation is available in the [Elastic reference documentation](/reference/observability/index.md).
The {{observability}} reference documentation is available in the [Elastic reference documentation](/reference/observability/index.md).

You can also browse reference documentation for the following components:

Expand All @@ -46,6 +85,4 @@ You can also browse reference documentation for the following components:
- [Elastic APM](/reference/apm/observability/apm.md)
- [Elastic APM agents](/reference/apm-agents/index.md)

## Release notes [_release_notes]

Browse the latest [{{observability}} release notes](/release-notes/elastic-observability/index.md) for more information on new features, enhancements, and fixes.
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@ products:

Before setting up observability for Kubernetes, make sure you have the following:

- Elastic Stack (self-managed or [Elastic Cloud](https://www.elastic.co/cloud)) version 8.16.0 or higher, or an [{{es-serverless}}](/solutions/search.md#elasticsearch-serverless) project.
- Elastic Stack (self-managed or [Elastic Cloud](https://www.elastic.co/cloud)) version 8.16.0 or higher, or an [{{es-serverless}}](/solutions/search.md) project.

- A Kubernetes version supported by the OpenTelemetry Operator. Refer to the operator's [compatibility matrix](https://github.com/open-telemetry/opentelemetry-operator/blob/main/docs/compatibility.md#compatibility-matrix) for more details.

Expand Down
30 changes: 18 additions & 12 deletions solutions/search.md
Original file line number Diff line number Diff line change
Expand Up @@ -10,11 +10,15 @@ products:
- id: elasticsearch
- id: cloud-serverless
- id: kibana
navigation_title: Elasticsearch
---

# Elasticsearch
# Elasticsearch solution overview

{{es}} enables you to build powerful search experiences for websites, applications, and enterprise data using Elastic's unified platform.
The {{es}} solution and serverless project type positions {{es}} as a comprehensive platform: a scalable data store, a powerful search engine, and a vector database in one.

At its core, {{es}} is a distributed datastore that can ingest, index, and manage various types of data in near real-time, making them both searchable and analyzable.
With specialized user interfaces and tools, it provides the flexibility to create, deploy, and run a wide range of applications, from search to analytics to AI-driven solutions.

## Use cases

Expand All @@ -30,23 +34,25 @@ Here are a few common real-world applications:
| **Chatbots/RAG** | Enable natural conversations, provide context, maintain knowledge | Vector search, ML models, knowledge base integration |
| **Geospatial search** | Process location queries, sort by proximity, filter by area | Geo-mapping, spatial indexing, distance calculations |

## {{es-serverless}} [elasticsearch-serverless]
```{applies_to}
serverless:
elasticsearch: ga
```
If you're new to {{es}} and want to try out some simple search use cases, go to [](/solutions/search/get-started.md) and [](/solutions/search/get-started/quickstarts.md).

## Core concepts [search-concepts]

{{es-serverless}} is one of the three available project types on [{{serverless-full}}](/deploy-manage/deploy.md).
For an introduction to core {{es}} concepts such as indices, documents, and mappings, refer to [](/manage-data/data-store.md).

This project type enables you to use the core functionality of {{es}}: searching, indexing, storing, and analyzing data of all shapes and sizes.
To dive more deeply into the building blocks of {{es}} clusters, including nodes, shards, primaries, and replicas, refer to [](/deploy-manage/distributed-architecture.md).

When using {{es}} on {{serverless-full}} you don’t need to worry about managing the infrastructure that keeps {{es}} distributed and available: nodes, shards, and replicas. These resources are completely automated on the serverless platform, which is designed to scale up and down with your workload.
This automation allows you to focus on building your search applications and solutions.
## Related reference

* [{{es}} reference documentation](elasticsearch://reference/elasticsearch/index.md)
* [Content connectors](elasticsearch://reference/search-connectors/index.md)
* [{{es}} API documentation]({{es-apis}})

::::{tip}
Not sure whether {{es}} on {{serverless-full}} is the right deployment choice for you?

Check out the following resources to help you decide:

- [What’s different?](/deploy-manage/deploy/elastic-cloud/differences-from-other-elasticsearch-offerings.md): Understand the differences between {{serverless-full}} and other deployment types.
- [Billing](/deploy-manage/cloud-organization/billing/elasticsearch-billing-dimensions.md): Learn about the billing model for {{es}} on {{serverless-full}}.
::::
::::
2 changes: 1 addition & 1 deletion solutions/search/get-started.md
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,7 @@ If you're looking for an introduction to the {{stack}} or the {{es}} product, go
:::::{step} Choose your deployment type

Elastic provides several self-managed and Elastic-managed options.
For simplicity and speed, try out [{{es-serverless}}](/solutions/search.md#elasticsearch-serverless):
For simplicity and speed, try out {{es-serverless}}:

::::{dropdown} Create an {{es-serverless}} project
:::{include} /deploy-manage/deploy/_snippets/create-serverless-project-intro.md
Expand Down
8 changes: 7 additions & 1 deletion solutions/search/ingest-for-search.md
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,13 @@ Search use cases usually focus on general **content**, typically text-heavy data

Once you've decided how to [deploy Elastic](/deploy-manage/index.md), the next step is getting your content into {{es}}. Your choice of ingestion method depends on where your content lives and how you need to access it.

There are several methods to ingest data into {{es}} for search use cases. Choose one or more based on your requirements.
There are several methods to ingest data into {{es}} for search use cases.
Choose one or more based on your requirements:

* [Native APIs and language clients](#es-ingestion-overview-apis): Index any JSON document directly using the {{es}} REST API or the official clients for languages like Python, Java, Go, and more.
* **Web crawler:** Ingest content from public or private websites to make it searchable.
* **Enterprise connectors:** Use pre-built connectors to sync data from external content sources like SharePoint, Confluence, Jira, and databases like MongoDB or PostgreSQL into {{es}}.


::::{tip}
If you just want to do a quick test, you can load [sample data](/manage-data/ingest/sample-data.md) into your {{es}} cluster using the UI.
Expand Down
Loading