Slide 1

Slide 1 text

Elasticsearch 2.0 What’s cooking? Alexander Reelsen @spinscale [email protected]

Slide 2

Slide 2 text

Agenda Simplification Security Resiliency Features Plugins

Slide 3

Slide 3 text

About 2012 Elasticsearch got founded Series A investment Trainings Supports subscriptions

Slide 4

Slide 4 text

About 2012 Series B investment Kibana Elasticsearch for Apache Hadoop Integration Logstash Elasticsearch Clients 2013 Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Slide 5

Slide 5 text

About 2012 Series C investment Marvel released 2013 2014

Slide 6

Slide 6 text

About 2012 Shield goes GA First user conference & rebrand Found acquired Packetbeat joins Watcher in beta 2013 2014 2015

Slide 7

Slide 7 text

About 2012 2013 2014 2015 Joined in March 2013 Working on Elasticsearch, Shield & Watcher Development, Trainings, Conferences, Support, Blog posts We're hiring...

Slide 8

Slide 8 text

Cleanups

Slide 9

Slide 9 text

Cleanups Replaced: Facets Removed: shutdown API Removed: Thrift/Memcached protocol support Removed: Rivers Removed: Bulk UDP

Slide 10

Slide 10 text

Moved into plugins Delete-by-query murmur3/size types Multicast discovery

Slide 11

Slide 11 text

Mapping changes

Slide 12

Slide 12 text

Mapping changes Fields … must be referenced by full name … names cannot be referenced using type name prefix … names cannot contain dots Types Type names cannot start with a dot Type may no longer be deleted Removed: index_analyzer & _analyzer date format changes

Slide 13

Slide 13 text

Mapping changes Fields … must be referenced by full name … names cannot be referenced using type name prefix … names cannot contain dots Types Type names cannot start with a dot Type may no longer be deleted Removed: index_analyzer & _analyzer date format changes https://www.elastic.co/blog/great-mapping-refactoring

Slide 14

Slide 14 text

Query/Filter changes

Slide 15

Slide 15 text

Query/Filter changes Queries/Filters merged into queries context decides over scoring Two-Phase Execution approximation and verification Query Caching based on usage pattern by tracking queries Using roaring bitmaps for caches

Slide 16

Slide 16 text

Query/Filter changes { "filtered" : { "query": { query definition }, "filter": { filter definition } } }

Slide 17

Slide 17 text

Query/Filter changes { "bool" : { "must": { query definition }, "filter": { filter definition } } }

Slide 18

Slide 18 text

Security

Slide 19

Slide 19 text

Security Security Manager enabled by default Very reduced permission set after startup Networking Unicast by default Binds to local interfaces only by default

Slide 20

Slide 20 text

Reliability

Slide 21

Slide 21 text

Reliability Transaction log: fsync() after each operation Multiple path data striping Cluster state diffs Doc values by default Units are required (“1m”) 1.6: Synced flush, async shard allocation fix 1.7: delayed allocation

Slide 22

Slide 22 text

Features

Slide 23

Slide 23 text

Features Pipeline Aggs Derivatives, moving avg, holt winters, time series! Index compression Structured exceptions

Slide 24

Slide 24 text

Plugins 22 plugins are part of main repo now bin/plugin install clouds-aws Shield/Watcher/Marvel releases aligned now bin/plugin install watcher Helper: Migration plugin!

Slide 25

Slide 25 text

Plugins

Slide 26

Slide 26 text

Plugins Shield document/field level security, realms API Watcher hipchat/slack actions, activate/deactivate API Marvel new UI, less but more useful metrics

Slide 27

Slide 27 text

Plugins

Slide 28

Slide 28 text

Sense is back!

Slide 29

Slide 29 text

Resources

Slide 30

Slide 30 text

No content

Slide 31

Slide 31 text

No content

Slide 32

Slide 32 text

https://www.elastic.co/webinars/elasticsearch-2-0-overview/

Slide 33

Slide 33 text

Resources https://imotov.github.io/presentations/what-s-new-in-elasticsearch-20.html https://www.elastic.co/blog/to-shade-or-not-to-shade https://www.elastic.co/blog/elasticsearch-unplugged https://www.elastic.co/blog/core-delete-by-query-is-a-plugin https://www.elastic.co/blog/staying-in-control-with-moving-averages-part-1 https://www.elastic.co/blog/staying-in-control-with-moving-averages-part-2 https://www.elastic.co/blog/better-query-execution-coming-elasticsearch-2-0 https://www.elastic.co/blog/out-of-this-world-aggregations https://www.elastic.co/blog/store-compression-in-lucene-and-elasticsearch https://www.elastic.co/blog/great-mapping-refactoring https://www.elastic.co/blog/frame-of-reference-and-roaring-bitmaps https://www.elastic.co/blog/elasticsearch-2-0-0-beta1-released https://www.elastic.co/blog/elasticsearch-2-0-0-beta2-released https://www.elastic.co/blog/elasticsearch-2-0-0-rc1-released https://www.elastic.co/elasticon/tour/2015/muenchen https://www.elastic.co/elasticon/conf/2016/sf

Slide 34

Slide 34 text

Q & A Thanks for listening! Alexander Reelsen @spinscale [email protected] We're hiring https://www.elastic.co/about/careers We're helping https://www.elastic.co/subscriptions