Elasticsearch Search and Analytics Engine

Elasticsearch is a free and open-source distributed search and analytics engine built on Apache Lucene, designed for horizontal scalability, reliability, and real-time search. Developed by Elastic N.V. (founded in 2012 by Shay Banon, headquartered in Amsterdam and Mountain View, California), Elasticsearch is the core component of the Elastic Stack (formerly ELK Stack: Elasticsearch, Logstash, Kibana). Key features: distributed architecture: Elasticsearch runs as a cluster of nodes, automatically distributing data (shards) and workload across nodes. Each index is split into primary and replica shards, providing data redundancy and query parallelism. Clusters can scale horizontally to hundreds of nodes and petabytes of data. Near real-time search: documents are indexed and searchable within one second (the default refresh interval), enabling near real-time analytics and monitoring. Full-text search: powered by Apache Lucene, providing tokenization, stemming, stop words, synonyms, phonetic matching, and 40+ language analyzers. Complex queries: supports boolean queries, phrase matching, fuzzy queries, range queries, geospatial queries, nested queries, and more through the Query DSL (JSON-based). Aggregations: powerful analytical capabilities including metrics (sum, avg, min, max, stats), bucketing (terms, histogram, date_histogram, range), and pipeline aggregations, enabling OLAP-style analytics on large datasets. Ingest pipelines: pre-process documents before indexing using processors (grok, convert, date, geoip). Machine learning: built-in anomaly detection and time-series forecasting (commercial feature). Security: authentication, authorization, audit logging, and encryption (commercial feature). RESTful API: all operations via HTTP/JSON. Connectors for Logstash, Beats, and language clients (Java, Python, JavaScript, Go, Ruby, PHP, .NET). Java codebase. Apache-2.0 (with Elastic License for commercial features).