ELASTICSEARCH-LOGS

Elasticsearch (EDI logs) is the Elasticsearch distributed search engine — central component of ELK / EFK stacks ingesting and indexing EDI structured logs (dispatches, acknowledgments, errors) for debug and compliance.

Definition

Elasticsearch is built on Apache Lucene. Full-text indexing, aggregations, time-series (Index Lifecycle Management, ILM), near-real-time search. Elastic Observability (formerly Elastic Stack) adds Kibana (visualisation), Beats (collectors) and Logstash (pipeline).

Origin

Created in 2010 by Shay Banon. Elastic NV founded in 2012. License moved to Elastic License 2.0 + SSPL in 2021 (response to AWS forks → OpenSearch).

Use

An EDI operator ingests 10 GB/day of structured JSON logs into an Elastic cluster. Index pattern: edi-logs-* with ILM (hot 7d → warm 30d → cold 90d → delete). Kibana search: 'trace_id:abc-123 AND partner_id:GLOBEX'. Drill-down in 200 ms.

Related terms

• Trace ID — pivot field.
• Audit trail — close use case.
• Datadog — SaaS alternative.
• OpenTelemetry — ingestion format.