Opensearch/dashboard vs elasticsearch/kibana

[azizi hack]

Hi Wazuh experts, 

Between these two versions of DB and webUI:

 

opensearch vs elasticsearch

dashboard vs kibana

Which one is highly recommended in term of features/functionality, reliability, and long term support?

Thank you.

[John Soliani]

Hello Az,

  First, let's clarify this. OpenSearch/Wazuh-Indexer is a package that contains Elasticsearch plus extra add-ons totally free, it works with Dashboard/Wazuh-Dashboard which is Kibana with extra free add-ons also.
  So basically here we are talking about FREE VS NON-FREE options.

  Both options are production-ready products, reliable, and have a good team to support them. Regarding features we would need to check our needs and our budget, not always more is better, but sometimes less is. If you can afford the Platinum or Enterprise license of ELK, would be a great option, not only all features but also support to help you get on track.

 Check the official OpenSearch site for answers to other questions about OpenSearch like:

- What is OpenSearch?

- Why was OpenSearch created?

- Why should I use OpenSearch?

- Is OpenSearch suitable for production use?

- What license is OpenSearch released under?

Check Elastic stack features as well, they even have Getting Started videos (you must register first).

Both are great options, if you are starting, I would go with OpenSearch, moving to ElasticStack is possible in the future if it's really needed, but not the other way around, migrating from Elastic Stack to OpenSearch is quite simple but it's not feasible the other way around. Wazuh 4.3.6 is available on both options.

- Wazuh 4.3.6 Installation guide with Indexer, Manager, and Dashboard.

- Wazuh 4.3.6 Installation guide with ElasticStack, Manager, and Kibana.

Hope this helps!

[azizi hack]

Dear John, 

Noted. Thanks for the detail explanation. 

Its clear now.  Appreciate it.