Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 14 hours
Course Outline
Day 1: Foundations, Architecture, and Detailed Comparison (ELK vs. OpenSearch)
Morning Session: Core Principles & Architectural Overview
- Introduction & Background:
- Exploring the origins of the ELK Stack (Elasticsearch, Logstash, Kibana)
- The 2021 fork: Understanding the rise of OpenSearch (AWS vs. Elastic licensing changes, Apache 2.0 vs. SSPL/Elastic License) - Internal Mechanics (Shared Foundations):
- Apache Lucene core engine: Shards, segments, inverted indices, and document storage
- Distributed cluster architecture: Nodes (Master, Data, Coordinator), clusters, and cluster state management
- Fundamentals of Data Ingestion and Processing:
- Logstash pipelines, Beats, and modern alternatives (Fluentbit, OpenTelemetry/Data Prepper)
Afternoon Session: Feature Divergence & Ecosystem Distinctions
- Security & Enterprise Feature Contrast:
- Elasticsearch: Security constraints in the free tier versus paid capabilities (SSO, advanced alerting, machine learning, cross-cluster replication tiers)
- OpenSearch: Native free fine-grained access control, internal user database, SAML/LDAP integration, and security plugins - Interfaces & Query Languages:
- Kibana vs. OpenSearch Dashboards: Interface layouts, management tools, and developer experience
- Query Languages: Elasticsearch's ES|QL compared to OpenSearch's PPL (Piped Processing Language) and SQL support - Advanced Workloads (Vector Search & AI):
- HNSW implementations, k-NN search performance, and approaches to machine learning integration.
Day 2: Deployment, Migration Planning, Operations, and Troubleshooting
Morning Session: Setup & Cluster Configuration
- Deploying OpenSearch:
- System requirements, kernel parameters (vm.max_map_count), and JVM heap tuning
- Bare-metal/VM installation via tarball and package managers
- Containerized deployment using Docker and Docker Compose
- Multi-node cluster bootstrap and security plugin initialization (opensearch-security-install) - Configuring OpenSearch Dashboards:
- Connecting Dashboards to the OpenSearch cluster
- Setting up SSL/TLS certificates and authentication backends
Afternoon Session: Migration Pathways, Operations & Best Practices
- Migration Strategies (ELK to OpenSearch):
- Evaluating current ES version compatibility (optimal paths from pre-7.10/7.11 versus newer versions)
- Snapshot & Restore Method: Leveraging shared repository storage (AWS S3, NFS) for smooth data transfer
- Reindex-from-Remote & Logstash Rolling Migrations: Managing live data cutovers with minimal downtime
- Adjusting API and client SDKs (updating endpoints, connection strings, and client libraries) - Lifecycle Management & Operational Distinctions:
- Elasticsearch ILM (Index Lifecycle Management) versus OpenSearch ISM (Index State Management) syntax and policies
- Rollover, shrinking, downsampling, and index retention strategies - Monitoring, Backup, and Troubleshooting:
- Cluster health APIs, cluster stats, and tracking shard allocation issues
- Common failure scenarios (circuit breaker exceptions, JVM garbage collection pauses, split-brain mitigation)
Q&A and Conclusion: Open forum for addressing specific corporate migration hurdles and architecture reviews
Practical exercises and Hands-On Labs are central to the course. Participants will develop skills in OpenSearch deployment, configuration, data ingestion, security, migration, monitoring, and troubleshooting through realistic, real-world scenarios.
Requirements
Participants are expected to possess:
- Fundamental knowledge of Linux command-line operations.
- Understanding of networking principles (TCP/IP, HTTP/HTTPS, DNS).
- Basic comprehension of log management and monitoring methodologies.
- General familiarity with containers (Docker) is advantageous but not mandatory.
- Foundational experience with Elasticsearch or the ELK Stack.
Custom Corporate Training
Training solutions designed exclusively for businesses.
- Customized Content: We adapt the syllabus and practical exercises to the real goals and needs of your project.
- Flexible Schedule: Dates and times adapted to your team's agenda.
- Format: Online (live), In-company (at your offices), or Hybrid.
Price per private group, online live training, starting from 3200 € + VAT*
Contact us for an exact quote and to hear our latest promotions
Testimonials (2)
The content is very helpful, and the trainer makes it more easier to understand
Ibrahim Al mayahi - Vastech SA
Course - Advanced Elasticsearch and Kibana Administration
the profesionalism of the trainer; the way he tried to respond to all the questions; the review questions we had to ask: engaging us in conversations
