Articles

Key enhancements include cost-effective search on more data via searchable snapshots and level frozen, on-the-fly analyst-driven data enhancements with runtime fields, and more integrations with Microsoft.

We are pleased to announce the General Public (GA) availability of Elastic 7.13. This release brings a rich set of new capabilities to our Elastic Enterprise Search, Observability, and Security solutions, built into the Elastic Stack: Elasticsearch and Kibana. This release enables customers to search petabytes of data in minutes with the best cost-benefit ratio thanks to searchable snapshots and the new frozen level. Analysts can now enhance data on the fly with runtime fields, our schema implementation while reading, in Kibana Lens and Discover. 

And we're building from our partnership with Microsoft with enhanced integrations that allow you to find and deploy Elastic directly from the Azure console and natively integrate data observability and security from Azure services.

Check out key enhancements across Elastic solutions, including extended content feeds for Elastic Workplace Search with Dropbox integration and new custom feed APIs, granular search optimization in Elastic App Search with a tuning API precision, better scalability and flexibility for data ingestion with the new Fleet server, and support for osquery in Elastic Security.

The best? Elastic 7.13 is available now on Elastic Cloud, the only hosted Elasticsearch offering that includes all the new features in this latest version. You can also download the Elastic Stack and our cloud orchestration products, Elastic Cloud Enterprise and Elastic Cloud for Kubernetes, for a self-managed experience.

Elastic Stack y Elastic Cloud

Search petabytes of data in minutes with the new frozen level

Customers no longer have to choose what data to keep or delete. The frozen tier, now available to the general public, allows customers to easily and inexpensively store and search petabytes of data. The frozen tier removes the limitations of local data storage, allowing customers to search orders of magnitude more cost-effectively for data by searching for data stored in object storage. Search petabytes of data in a security investigation or have unlimited logs, metrics and traces in minutes.

While storing data in object storage is cost-effective, it affects search performance. Elastic provides the best cost performance by retrieving only the data necessary to complete a search from the object store and caching the data locally as needed. Regardless of whether customers create dashboards or search huge data sets, the frozen level offers the best possible search experience.

The frozen tier is also available on Elastic Cloud, Elastic Cloud Enterprise, and Elastic Cloud on Kubernetes. It's fully integrated into autoscaling, allowing you to seamlessly scale to store and search large amounts of data. 

Bring powerful enterprise search, observability, and security capabilities to your Azure environment with enhanced integrations at Microsoft

We are excited to announce the latest development in our partnership continues with Microsoft. Available in public preview, you can now quickly find, deploy, and manage Elasticsearch directly from the Azure portal. Take advantage of simplified ingest for Azure platform, virtual machine, and other resource logs, and accelerate time to value for observability. Easily add Workplace Search so knowledge workers can find information across all collaboration tools and data repositories. Implement intelligent threat protection and use machine learning capabilities for anomaly detection to help secure your Azure environment. In addition, you can take advantage of consolidated billing, single sign-on to the Elastic Cloud console with your Azure credentials, Private Link (private beta) support, and more. read theGet started blog to get all the details.

 

 

Go from data visualization to data improvement in just a few clicks: Runtime fields for analysts in Discover and Kibana Lens

Ever had a great question that you wanted to delve into but didn't have the data to explore? The runtime fields in Discover and Kibana Lens are the first step in giving analysts the power to shape their data to answer more in-depth and innovative questions and get insights quickly.

Runtime fields empower analysts to explore and improve the data they work with. With the runtime field editor, analysts can create fields on the fly from Discover and Kibana Lens, allowing them to format, modify, and transform data without navigating to other screens or using Elasticsearch administrators.

This flexibility allows analysts to be more independent in exploring data, and gives them the power to make changes directly from workflows and see results in the moment.

Empower data scientists and data enthusiasts with a single place to store, transform, create, test and deploy supervised machine learning models

Elastic's supervised Machine Learning, now available to the general public, helps customers answer questions like "when will a customer defect?", "When could the hard drive fail?" or “what is the classification of this new security threat?”; all from a single Elastic stack.

Most data scientists today need a tool to store data, a tool to transform that data, a tool to train a data model, another tool to apply predictions from that model, and yet another tool to visualize and take measurements on it. data. Elastic has been developing features to reduce this number of tools and complexity, and deliver a comprehensive Machine Learning pipeline that provides customers with a single solution to operationalize and simplify data science.

Both supervised machine learning and anomaly detection are built on the Elastic Stack and tightly integrated into Elastic solutions such as Elastic Security and Observability. 

Read about these features and more on the blog Kibana 7.13, the blog of Elasticsearch 7.13 and blog Elastic Cloud 7.13.

Elastic solutions

Elastic Enterprise Search

Find more content with Workplace Search through new Dropbox integrations and an improved Custom Fonts API

Searching and collaborating using Dropbox is even more powerful with Elastic Workplace Search, which now supports Dropbox Paper, and offers full document-level permission syncing across all Dropbox content. 

Your development teams can also more easily ingest and manage content from any source, including legacy and custom applications, thanks to new custom source management APIs. New endpoints allow on-the-fly programmatic creation of fonts without the need for manual configuration.  

 

 

 

Correctly size your search engine results set with the new Elastic App Search fine-tuning API

Now in beta, the new Elastic App Search fine-tuning API empowers you to fine-tune the retrieval and accuracy of search results for your website or app. Easily configure how broad or narrow your search results should be with a single parameter or API call at search time to tailor your App Search deployment to your exact needs.

Learn about all the new Elastic Enterprise Search features on the Elastic Enterprise Search 7.13 blog.

Elastic Observability

Incorporate Azure service metrics and logs into Elastic Observability in a few clicks with extended integration with Microsoft

We improve support for Azure monitoring use cases with our new native expanded integration with Microsoft, and we allow users to easily incorporate logs and metrics from their Azure services into Elastic Observability with a few clicks. This includes both compute services such as VMs and containers, as well as non-compute services such as Azure SQL Database and Azure Data Factory. Tag-based filters allow you to easily adjust your settings to limit data collection to only specific resources. Logs and metrics are automatically written in Elastic Common Schema (ECS) format, making it easy to correlate data not only from your Azure infrastructure, but also from sources other than Azure.

Take advantage of the additional scalability and flexibility of data ingestion architectures with the new Fleet server, now in beta

The Elastic agent is a single agent that unifies the collection of security and observability data, and makes it easy to install and manage data integrations. Fleet is a new app in Kibana that allows you to centrally manage an entire fleet of Elastic agents. Together, these enhancements dramatically lower the total cost of ownership and time to value creation for platform owners and Elastic Observability and Security users. 

In this release, some of the key features include the following:

• Fleet Server, a new architecture component that can be deployed centrally or at the edge, improving the scalability and flexibility of supported ingest architectures. 

• Kubernetes auto-discovery support, improving ease of deployment in highly dynamic orchestrated environments.

• APM server support, allowing users to centrally manage the APM server from Fleet.

• Support for Heartbeat, our uptime monitoring engine, which allows users to enable HTTP checks through a graphical interface.

• Full support for this release from day one on Elastic Cloud, including fully managed Fleet server hosted functionality as part of your deployment.

 

 

As it is a beta version, it is not recommended for production deployments. Pre-beta testers should review the release notes for groundbreaking changes.

Learn about all the new features on the Elastic Observability 7.13 blog.

Elastic Security

Empower analysts to ask Elastic Security for anything, including OS context from hosts with new support for osquery

Elastic Security 7.13 introduces a new and open platform for central osquery management deployed with the Elastic agent. With one click, users can install and orchestrate osquery on all their Windows, macOS, and Linux hosts. The solution provides analysts with direct access to complete host data from across the ecosystem, which can be retrieved with pre-engineered and custom SQL searches for analysis in Elastic Security.

Osquery is an extremely useful tool, created by a vibrant open source community popular with Elastic users. But even today, managing osquery is challenging. We consulted the specialists, and they were clear: putting osquery in the hands of analysts will help advance security. Therefore, building on the capabilities of this release, we help organizations leverage both the visibility of osquery and the analytical power of Elastic. That's the great thing about free and open.

Elastic Security 7.13 also offers enhancements that help organizations operationalize threat intelligence, address new use cases with the detection engine and Machine Learning, and ingest new data sources.

Get all the details on the Elastic Security 7.13 blog.

 

Link: https://www.elastic.co/es/blog/whats-new-elastic-7-13-0