Elastic

What it does

Elastic is the company behind the Elastic Stack (Elasticsearch, Logstash, Kibana, Beats) - the most widely deployed open-source search and analytics engine powering enterprise search, log analytics, observability, and security information and event management (SIEM). Its AI capabilities include ESRE (Elastic Search Relevance Engine) combining vector search and BM25 for hybrid AI-powered search, ML anomaly detection that identifies unusual patterns in time-series log and metric data, AI log analysis using LLMs to explain error patterns and suggest remediation, intelligent alert correlation that reduces observability noise by grouping related alerts, and SIEM ML jobs that detect security threats from log data without manual rule writing.

Strengths

• Mid-market engineering teams use Elastic for log aggregation and observability - AI anomaly detection surfacing infrastructure issues and LLM-powered log analysis accelerating root cause investigation.
• Large enterprises use Elastic for enterprise-scale search, observability, and SIEM - AI-powered vector search enabling semantic enterprise search across massive document collections and ML threat detection supporting security operations.
• Elastic is the company behind the Elastic Stack (Elasticsearch, Logstash, Kibana, Beats) - the most widely deployed open-source search and analytics engine powering enterprise search, log analytics, observability, and security information and event management (SIEM).

Watch-outs

• Operational complexity at scale: Running Elasticsearch clusters at enterprise scale requires significant infrastructure expertise — organizations without dedicated platform engineering teams often find managed Elasticsearch services (Elastic Cloud or AWS OpenSearch) necessary to control operational burden.
• Cost can escalate with data volume: Elastic's storage and compute costs scale with data ingestion volume — high-volume log environments need careful index lifecycle management and data tiering to control cloud infrastructure costs.
• SIEM is less mature than purpose-built platforms: Elastic SIEM is strong for engineering-led security teams but lacks the out-of-box threat detection content and case management workflows of dedicated SIEM platforms like Splunk for enterprise SOC operations.

Pricing

Open-source free. Elastic Cloud: Standard from $95/month. Gold from $109/month. Platinum and Enterprise negotiated. Annual contracts with volume discounts.