Re:Elastic SIEM – Security Information and Event Management
by donretag on Tuesday June 25, 2019 @06:14PM
(#20279595)
Search has been suffering under Elastic for a long time. Only a small percentage of Elasticsearch users use it for search. Then again, Elastic employs many Lucene committers, so they indirectly help search by being a major maintainer of Lucene.
If you want search, most of the NLP crowd is using Solr.
Seems a logical progression from Kibana and Logstash - but sometimes I worry search will suffer for all this other stuff.