Hello Smit and everyone,
as some of you probably already know, a few days ago Elastic announced that they will not release new versions under the Apache License, Version 2.0 (ALv2). New versions of the Elastic Stack software (starting from 7.11) will be dual licensed under Elastic License and the Server Side Public License (SSPL). More information can be found here:
This change has raised some controversy because SSPL is not recognized as Open Source, since it violates definition number 6, of "The Open Source Definition". More information here:
As a result of this license change, several vendors (including Amazon) have now decided to fork the Elastic Stack to keep it open source. See blog posts below:
As an open source project ourselves (our source code is licensed under GPLv2), with a community of thousands of enterprise users that rely on our solution to protect their infrastructure, we are committed to continue offering a comprehensive and innovative security solution (EDR/SIEM) for threat prevention, detection, and response. We have no plan to change our license or commercialize our source code.
Moreover, as one of the biggest advocates for open source in the cybersecurity space, we have decided to contribute to the initiatives to fork Elasticsearch and Kibana based on the latest ALv2 version. This means that our solution by default will be integrated with an open source version of Elasticsearch and Kibana.
In addition, for those who choose to use the Elastic commercial version, we will maintain compatibility with it too (as we do with other commercial software, such as Splunk).
I hope it answers the question. Happy to provide further explanation if needed,
Santiago.