# Elastic Blog - Elasticsearch, Kibana, and ELK Stack Tutorials, deep dives, news, releases, stories, and more from the creators of Elasticsearch This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Australia's AI opportunity starts with data DevFeed: [Australia's AI opportunity starts with data]() Original publisher: [Read original article]() Author: Sean MacKirdy Published: 2026-09-17T01:00:00Z Content type: opinion Language: en Sources: [Elastic Blog - Elasticsearch, Kibana, and ELK Stack]() Topics: [data](), [Artificial Intelligence](), [AI Strategy]() Tags: [agentic-ai-government](), [ai](), [ai-adoption](), [australia](), [data](), [platform](), [public-sector-media-entertainment]() ### AI overview Elastic's participation in Australia's first Parliamentary AI Industry Showcase emphasized that data is a central constraint on AI performance and a prerequisite for deploying AI that is effective, safe, and trusted. ### Source excerpt Elastic, a Founding Partner at Australia's first Parliamentary AI Industry Showcase, highlights that data, not just models, is the key to deploying safe, effective, and trusted AI. ## Elastic announces GA of cross-project search on Serverless, enabling teams to query across all linked projects without moving a byte DevFeed: [Elastic announces GA of cross-project search on Serverless, enabling teams to query across all linked projects without moving a byte]() Original publisher: [Read original article]() Author: Jordi Mon Companys,Lucy Wang Published: 2026-09-16T00:00:00Z Content type: release Language: en Sources: [Elastic Blog - Elasticsearch, Kibana, and ELK Stack]() Topics: [Serverless](), [Elastic Cloud](), [Cloud](), [observability](), [Security](), [SIEM, Security, Observability]() Tags: [architecture-cloud-migration-migrating-cloud-native-scaling-search-analytics-search-applicatio](), [cloud](), [cloud-elasticsearch-platform](), [customers](), [elastic](), [elastic-cloud](), [observability](), [observability-security-search](), [security](), [serverless]() ### AI overview Elastic announced the general availability of cross-project search for Elastic Cloud Serverless. It lets teams query multiple linked projects in a single session across regions, project types, and cloud providers, while keeping data in place and avoiding certificates, remote-cluster configuration, and per-connection authentication. ### Source excerpt Cross-project search is now GA on Elastic Cloud Serverless. Link multiple projects and query all of them from a single Discover or ES|QL session: no certificates, no remote cluster config, and three clicks to set up. Available from September 1, 2026. ## CISA's Logging Reference Architecture for OMB M-26-14: What federal agencies should do next DevFeed: [CISA's Logging Reference Architecture for OMB M-26-14: What federal agencies should do next]() Original publisher: [Read original article]() Author: Woody Walton Published: 2026-09-16T00:00:00Z Content type: article Language: en Sources: [Elastic Blog - Elasticsearch, Kibana, and ELK Stack]() Topics: [cisa](), [Logging](), [cybersecurity and infrastructure security agency](), [log management](), [Architecture & Design](), [implementation](), [audit](), [Security]() Tags: [architecture](), [audit](), [cisa](), [cybersecurity-and-infrastructure-security-agency](), [cybersecurity-open-source-standards-log-management-government](), [government](), [implementation](), [logging](), [logs](), [public-sector](), [security]() ### AI overview This Elastic blog explains CISA's Logging Reference Architecture for OMB M-26-14 and the actions federal civilian executive branch agencies must take. It highlights planning and maturity deadlines, recommends assessing existing capabilities and documenting gaps, and discusses storage tiers, retrieval, immutability, and audit requirements. ### Source excerpt Now that CISA has released its Logging Reference Architecture (LRA) for OMB M-26-14, federal agencies tasked to complete their logging plans. In this blog, we walk you through the most important aspects of the LRA guidance. ## Elastic Stack 9.4.7 released DevFeed: [Elastic Stack 9.4.7 released]() Original publisher: [Read original article]() Author: adrian brown Published: 2026-09-15T00:00:00Z Content type: release Language: en Sources: [Elastic Blog - Elasticsearch, Kibana, and ELK Stack]() Topics: [releases](), [upgrade]() Tags: [product](), [release](), [upgrade]() ### AI overview Elastic Stack 9.4.7 has been released. The article recommends upgrading from earlier versions, including 9.4.6, and directs readers to the release notes for fixes and complete product-specific changes. ### Source excerpt Version 9.4.7 of the Elastic Stack was released today. We recommend you upgrade to this latest version. We recommend 9.4.7 over the previous versions 9.4.6 For details of the issues that have been fixed and a full list of changes for each product in this version, please refer to the release notes. ## Elastic Stack 9.5.4 released DevFeed: [Elastic Stack 9.5.4 released]() Original publisher: [Read original article]() Author: adrian brown Published: 2026-09-15T00:00:00Z Content type: release Language: en Sources: [Elastic Blog - Elasticsearch, Kibana, and ELK Stack]() Topics: [releases](), [upgrade]() Tags: [product](), [release](), [upgrade]() ### AI overview Elastic Stack 9.5.4 has been released. The article recommends upgrading from earlier versions, including 9.5.3, and directs readers to the release notes for fixed issues and product-specific changes. ### Source excerpt Version 9.5.4 of the Elastic Stack was released today. We recommend you upgrade to this latest version. We recommend 9.5.4 over the previous versions 9.5.3 For details of the issues that have been fixed and a full list of changes for each product in this version, please refer to the release notes. ## The only perfect Endpoint Prevention and Response (EPR) score in 2026 belongs to Elastic DevFeed: [The only perfect Endpoint Prevention and Response (EPR) score in 2026 belongs to Elastic]() Original publisher: [Read original article]() Author: Mia LaVada Published: 2026-09-15T00:00:00Z Content type: article Language: en Sources: [Elastic Blog - Elasticsearch, Kibana, and ELK Stack]() Topics: [Endpoint Security & XDR](), [Testing](), [Security](), [SOC]() Tags: [2026](), [alert-fatigue](), [analysts](), [investigation-incident-response-security-compliance-security-analytics-xdr](), [obfuscation](), [persistence](), [protection](), [security](), [security-endpoint-security](), [soc](), [techniques](), [testing](), [tooling](), [usb]() ### AI overview Elastic describes its results in the 2026 AV-Comparatives Endpoint Prevention and Response test, reporting 100% protection scores, zero false alerts, and the lowest modeled operational footprint among tested products. The article explains that Elastic stopped all 50 attack scenarios at the initial phase. ### Source excerpt Elastic sits at the very top of this year's AV-Comparatives' CyberRisk Quadrant within the 2026 Endpoint Prevention and Response (EPR) test with the highest protection scores at 100%. Learn more. ## See you at Elastic{ON} 2026 DevFeed: [See you at Elastic{ON} 2026]() Original publisher: [Read original article]() Author: Dan Courcy Published: 2026-09-08T00:00:00Z Content type: news Language: en Sources: [Elastic Blog - Elasticsearch, Kibana, and ELK Stack]() Topics: [AI search](), [telemetry]() Tags: [ai](), [ai-agent](), [developer](), [elasticsearch](), [event](), [logging](), [metrics](), [observability](), [platform-observability-search-security](), [production](), [search](), [sre]() ### AI overview Elastic announces its Elastic{ON} 2026 global event tour, with sessions for developers on scaling AI agents with Elasticsearch and for SREs on observability, logging, metrics, and AI-assisted incident response. ### Source excerpt Elastic{ON} kicks off this September with seven stops in cities around the world. Elastic's CEO Ash Kulkarni will be appearing at stops across the tour, opening keynotes with a candid conversation about why your data has never been more valuable. ## Why your AI bill tripled while token prices fell 75% DevFeed: [Why your AI bill tripled while token prices fell 75%]() Original publisher: [Read original article]() Author: Sunile Manjee Published: 2026-09-04T00:00:00Z Content type: article Language: en Sources: [Elastic Blog - Elasticsearch, Kibana, and ELK Stack]() Topics: [long-context](), [Inference](), [Chat Bot]() Tags: [agent](), [agentic-ai](), [ai](), [cost](), [inference](), [reasoning]() ### AI overview The article explains why spending on agentic AI can rise despite lower token prices: multistep, multiturn, and multihop work repeats and expands context, increasing billed token use. ### Source excerpt Token prices dropped 75%, so why did your agentic AI bill triple? Here's the real math behind agentic AI cost and how IT leaders can measure it. ## Open by design: How Elastic supports MOSA, the DoD's Modular Open Systems Approach DevFeed: [Open by design: How Elastic supports MOSA, the DoD's Modular Open Systems Approach]() Original publisher: [Read original article]() Author: Woody Walton Published: 2026-09-04T00:00:00Z Content type: article Language: en Sources: [Elastic Blog - Elasticsearch, Kibana, and ELK Stack]() Topics: [Architecture & Design](), [data](), [Instrumentation](), [telemetry]() Tags: [acquisition](), [analytics](), [data](), [defense-government-open-source-standards](), [design](), [elasticsearch-platform](), [government-public-sector](), [instrumentation](), [integration](), [open](), [opentelemetry](), [scalability](), [systems]() ### AI overview Elastic explains how its data and analytics platform can support the US Department of Defense Modular Open Systems Approach through modularity, open standards, and component removability. ### Source excerpt Major US defense acquisition programs are required to be designed around a Modular Open Systems Approach (MOSA). Here's what program offices need to know about how Elastic can support MOSA at the data and analytics layer. ## Elastic Stack 9.5.3 released DevFeed: [Elastic Stack 9.5.3 released]() Original publisher: [Read original article]() Author: Vincent Deuschle Published: 2026-09-03T00:00:00Z Content type: release Language: en Sources: [Elastic Blog - Elasticsearch, Kibana, and ELK Stack]() Topics: [releases]() Tags: [release](), [release-notes]() ### AI overview Elastic Stack version 9.5.3 has been released, and users are recommended to upgrade from version 9.5.2. ### Source excerpt Version 9.5.3 of the Elastic Stack was released today. We recommend you upgrade to this latest version. We recommend 9.5.3 over the previous versions 9.5.2 For details of the issues that have been fixed and a full list of changes for each product in this version, please refer to the release notes. ## Elastic and Tencent Cloud deepen strategic partnership to power AI-era search foundation DevFeed: [Elastic and Tencent Cloud deepen strategic partnership to power AI-era search foundation]() Original publisher: [Read original article]() Author: Yuki Jiang Published: 2026-09-03T00:00:00Z Content type: release Language: en Sources: [Elastic Blog - Elasticsearch, Kibana, and ELK Stack]() Topics: [AI search](), [elasticsearch](), [Large Language Model]() Tags: [ai-search](), [cloud](), [elasticsearch](), [large-language-models](), [partnership](), [platform-elasticsearch]() ### AI overview Elastic and Tencent Cloud expanded their collaboration and launched Tencent Cloud Elasticsearch Service Enterprise Edition, positioning AI search, model integration, and agent connectivity for enterprise data retrieval. ### Source excerpt Tencent Cloud and Elastic announced an expanded strategic collaboration in Shenzhen in August 2026. The companies will deepen their technical and product collaboration to help enterprises establish dedicated AI search for the AI era. ## The security attack that hid inside your observability data DevFeed: [The security attack that hid inside your observability data]() Original publisher: [Read original article]() Author: Roberto Arico Published: 2026-09-03T00:00:00Z Content type: article Language: en Sources: [Elastic Blog - Elasticsearch, Kibana, and ELK Stack]() Topics: [SIEM, Security, Observability](), [telemetry](), [cpu]() Tags: [cost](), [cpu](), [endpoint-security](), [endpoint-security-observability-security-siem-log-analytics](), [observability](), [security](), [security-analytics-security-compliance-threat-hunting-tool-consolidation-agentic-ai-alerting]() ### AI overview The article explains how separating observability and security platforms can conceal threats such as cryptominers, duplicate data costs, and prevent teams from seeing the full operational and security picture. ### Source excerpt Your ops team sees a CPU spike. Your security team sees nothing. The cryptominer runs for six hours. Avoid duplication of cost and time and see how a unified observability and security platform with grounded AI closes the gap. ## Elastic Stack 8.19.21 released DevFeed: [Elastic Stack 8.19.21 released]() Original publisher: [Read original article]() Author: Julien Mailleret Published: 2026-09-02T00:00:00Z Content type: release Language: en Sources: [Elastic Blog - Elasticsearch, Kibana, and ELK Stack]() Topics: [releases](), [Vulnerabilities]() Tags: [announcement](), [release](), [release-notes](), [security](), [vulnerabilities]() ### AI overview Elastic Stack 8.19.21 is released and includes fixes for potential security vulnerabilities. Users are recommended to upgrade and consult the release notes for the full changes. ### Source excerpt Version 8.19.21 of the Elastic Stack was released today. We recommend you upgrade to this latest version. We recommend 8.19.21 over the previous versions 8.19.21 For details of the issues that have been fixed and a full list of changes for each product in this version, please refer to the release notes. The 8.19.21 release contains fixes for potential security vulnerabilities. Please see our security announcement for more details ## Elastic Stack 9.4.6 released DevFeed: [Elastic Stack 9.4.6 released]() Original publisher: [Read original article]() Author: Julien Mailleret Published: 2026-09-02T00:00:00Z Content type: release Language: en Sources: [Elastic Blog - Elasticsearch, Kibana, and ELK Stack]() Topics: [releases](), [Vulnerabilities](), [Release notes]() Tags: [announcement](), [release](), [release-notes](), [security](), [vulnerabilities]() ### AI overview Elastic Stack 9.4.6 is released. The update includes fixes for potential security vulnerabilities, and users are advised to upgrade. ### Source excerpt Version 9.4.6 of the Elastic Stack was released today. We recommend you upgrade to this latest version. We recommend 9.4.6 over the previous versions 9.4.5 For details of the issues that have been fixed and a full list of changes for each product in this version, please refer to the release notes. The 9.4.6 release contains fixes for potential security vulnerabilities. Please see our security announcement for more details ## Defending against AI-fueled social engineering DevFeed: [Defending against AI-fueled social engineering]() Original publisher: [Read original article]() Author: Joe DeFever Published: 2026-09-01T00:00:00Z Content type: article Language: en Sources: [Elastic Blog - Elasticsearch, Kibana, and ELK Stack]() Topics: [Social engineering](), [spoofing]() Tags: [agentic-ai-alerting-security-analytics](), [ai](), [attacks](), [phishing](), [security](), [soc](), [social-engineering]() ### AI overview The article describes how AI enables personalized spear phishing, smishing, and deepfake-based impersonation at greater scale. It argues that defenders should detect behavioral signals rather than rely solely on static signatures and known patterns. ### Source excerpt AI is supercharging social engineering. Learn how SOC teams can detect deepfakes, spear phishing, and smishing before they cause real damage. ## How can agencies unify smart city data to improve public services? DevFeed: [How can agencies unify smart city data to improve public services?]() Original publisher: [Read original article]() Author: Brixton Pizzuti Published: 2026-08-27T00:00:00Z Content type: article Language: en Sources: [Elastic Blog - Elasticsearch, Kibana, and ELK Stack]() Topics: [Elastic Cloud]() Tags: [ai](), [analytics](), [cloud-elasticsearch-geospatial-kibana-platform](), [data](), [elastic-cloud](), [infrastructure](), [real-time](), [security](), [telemetry](), [undefined-anomaly-detection-cloud-migration-cloud-monitoring-government-ingesting-log-monitori]() ### AI overview The article describes using Elastic to unify smart-city IT and operational-technology data, improving visibility and real-time operational insight. ### Source excerpt Learn how can smart cities unify operational data, improve visibility, detect anomalies, and secure connected infrastructure. ## Forging India's Digital Future: Elastic{ON} Comes to Mumbai DevFeed: [Forging India's Digital Future: Elastic{ON} Comes to Mumbai]() Original publisher: [Read original article]() Author: Atul Ahuja Published: 2026-08-26T00:00:00Z Content type: article Language: en Sources: [Elastic Blog - Elasticsearch, Kibana, and ELK Stack]() Topics: [AI search](), [telemetry]() Tags: [agentic-ai](), [agentic-ai-cybersecurity](), [ai-agents](), [cybersecurity](), [data](), [disaster-recovery](), [india](), [observability](), [observability-security-search](), [resilience](), [search](), [security]() ### AI overview Elastic{ON} Mumbai will cover search, full-stack observability, security, and the use of enterprise data to ground agentic AI. The article also discusses regulatory expectations for unified, real-time technology visibility, resilience, and evidence production. ### Source excerpt Join us at Elastic{ON} Mumbai to explore search, full-stack observability, and security, and how Elastic acts as the context engine that grounds agentic AI in your enterprise data, transforming regulatory mandates and data into an AI advantage. ## Machine vs. machine: The new reality of cybersecurity in ANZ DevFeed: [Machine vs. machine: The new reality of cybersecurity in ANZ]() Original publisher: [Read original article]() Author: Jeremy Pell Published: 2026-08-26T00:00:00Z Content type: article Language: en Sources: [Elastic Blog - Elasticsearch, Kibana, and ELK Stack]() Topics: [Cybersecurity](), [Frontier AI](), [Threat Research](), [threat detection](), [data-architecture](), [AI Platforms/Deployment](), [Security & Privacy]() Tags: [agentic-ai-cybersecurity-security-research](), [australia](), [compliance](), [cybersecurity](), [data-architecture](), [endpoint-security-siem-security](), [frontier-ai](), [policy](), [research](), [threat-detection]() ### AI overview Frontier AI is accelerating cyberattacks across Australia and New Zealand to machine speed, while defensive capabilities, policy, data visibility, and operational security are struggling to keep pace. Survey findings from more than 850 IT and cybersecurity professionals highlight gaps between regulatory intent and real-world protection, as well as the need for searchable, unified data architectures to support reliable AI-enabled defence. ### Source excerpt Frontier AI has accelerated cyber threats to machine speed, leaving many ANZ organisations vulnerable. Our latest research reveals how fragmented data and visibility gaps hinder defence and why a unified platform is essential to battle threats. ## How SLED can win the cybersecurity race with agentic AI DevFeed: [How SLED can win the cybersecurity race with agentic AI]() Original publisher: [Read original article]() Author: Bobby Suber Published: 2026-08-21T00:00:00Z Content type: article Language: en Sources: [Elastic Blog - Elasticsearch, Kibana, and ELK Stack]() Topics: [Security Attacks](), [AI Bots](), [Language models]() Tags: [agentic-ai](), [agentic-soc](), [ai-agents](), [ai-search](), [attacks](), [cybersecurity](), [large-language-models-llms](), [public-sector-education-non-profit-government](), [security]() ### AI overview The article describes how AI-enabled attacks are pressuring state, local, and education security teams, and presents an agentic SOC as a way to accelerate investigations by correlating alerts, gathering context, and preparing response plans. ### Source excerpt AI-accelerated attacks are outpacing SLED security teams. Learn how state, local, and education organizations are closing the gap by fixing their data foundation first. ## The search multiplier: Driving revenue, productivity, and AI at scale DevFeed: [The search multiplier: Driving revenue, productivity, and AI at scale]() Original publisher: [Read original article]() Author: Nicole Volk Published: 2026-08-20T00:00:00Z Content type: article Language: en Sources: [Elastic Blog - Elasticsearch, Kibana, and ELK Stack]() Topics: [elasticsearch](), [AI search](), [AI Infrastructure](), [Generative AI](), [idc](), [Resilience]() Tags: [accelerate](), [agentic-ai-cloud-search-context-engineering-customer-experience-deployment-end-user-experience](), [ai](), [ai-infrastructure](), [analysis](), [business-value](), [customer-story-elasticsearch-workplace-search](), [elasticsearch](), [elasticsearch-platform](), [financial-services](), [government](), [healthcare](), [resilience](), [retail](), [retrieval](), [search]() ### AI overview An IDC study of 11 large enterprises reports that the Elasticsearch Platform, used as a search and retrieval foundation, helped organizations deliver AI products faster while improving revenue, productivity, search relevance, and operational resilience. The study reports a 517% three-year ROI, $13.4 million in annual benefits per organization, and an 11-month payback period. ### Source excerpt An independent IDC study found organizations deploying the Elasticsearch Platform for enterprise search and agentic AI deliver AI products faster, drive higher revenue, boost productivity, and strengthen operational resilience across the business. ## Elastic Stack 9.5.2 released DevFeed: [Elastic Stack 9.5.2 released]() Original publisher: [Read original article]() Author: Navya Uppalapati Published: 2026-08-20T00:00:00Z Content type: release Language: en Sources: [Elastic Blog - Elasticsearch, Kibana, and ELK Stack]() Topics: [releases]() Tags: [release](), [release-notes]() ### AI overview Elastic Stack version 9.5.2 has been released, with an upgrade recommendation over version 9.5.1. ### Source excerpt Version 9.5.2 of the Elastic Stack was released today. We recommend you upgrade to this latest version. We recommend 9.5.2 over the previous versions 9.5.1 For details of the issues that have been fixed and a full list of changes for each product in this version, please refer to the release notes. ## What's new in ECK 3.5 DevFeed: [What's new in ECK 3.5]() Original publisher: [Read original article]() Author: Kostas Stamatakis Published: 2026-08-20T00:00:00Z Content type: release Language: en Sources: [Elastic Blog - Elasticsearch, Kibana, and ELK Stack]() Topics: [Elastic Cloud]() Tags: [cloud](), [cloud-native-kubernetes](), [elastic-cloud](), [elasticsearch](), [feature](), [infrastructure](), [kubernetes](), [memory](), [onboarding](), [orchestration](), [platform](), [release](), [resource](), [scale](), [security](), [selectors](), [tls](), [workflows]() ### AI overview ECK 3.5 adds label-selector-based namespace management, pausable orchestration for maintenance, and automatic mutual TLS client certificates across Elasticsearch-connected components. ### Source excerpt ECK 3.5 brings dynamic namespace management via label selectors, pause orchestration for safe maintenance windows, mutual TLS across all stack components, simplified resource specs, and a reduced operator memory footprint. ## How state and local agencies can get ahead of fraud starting with the data they already have DevFeed: [How state and local agencies can get ahead of fraud starting with the data they already have]() Original publisher: [Read original article]() Author: Leanne Link Published: 2026-08-19T00:00:00Z Content type: article Language: en Sources: [Elastic Blog - Elasticsearch, Kibana, and ELK Stack]() Topics: [data](), [systems](), [Generative AI](), [Artificial Intelligence]() Tags: [agentic-ai-alerting-anomaly-detection-fraud-detection-government-state-local-government](), [applications](), [audits](), [data](), [fraud](), [generative-ai](), [government](), [phishing](), [synthetic](), [systems](), [tax](), [us]() ### AI overview This article explains how fragmented data across state and local government systems can delay fraud detection and remediation. It describes the growing scale of fraud, the use of generative AI by bad actors to fabricate identities and synthetic personas, and the operational, audit, financial, and funding consequences for agencies. ### Source excerpt Fraud and waste continues to be a challenge for state and local government agencies in the US. Though the data exists, the challenge is pulling it all together for an accurate anomaly detection and remediation. ## 7 lessons for IT leaders on using observability to monitor AI applications DevFeed: [7 lessons for IT leaders on using observability to monitor AI applications]() Original publisher: [Read original article]() Author: Brad Quarry Published: 2026-08-19T00:00:00Z Content type: article Language: en Sources: [Elastic Blog - Elasticsearch, Kibana, and ELK Stack]() Topics: [ai observability](), [telemetry](), [Language models](), [AI, ML & Data Engineering]() Tags: [ai](), [applications](), [business](), [events](), [generative-ai](), [instrumentation](), [large-language-models](), [llm](), [monitor](), [observability](), [telemetry]() ### AI overview An Elastic IT case study argues that LLM observability should be included in AI application MVPs so teams can measure usage, time savings, and return on investment from the start. ### Source excerpt Discover the seven lessons we learned as we evolve our LLM observability practice to monitor and improve our AI applications. [Next page]()