SlideShare a Scribd company logo
TAIPEI
© 2020, Amazon Web Services, Inc. or its affiliates. All rights reserved.
My ElasticSearch Journey on AWS
smalltown
Lead Site Reliability Engineering
AMIS
2
Hello!
I am smalltown
AMIS Lead Site Reliability Engineering
Taipei HashiCorp User Group Organizer
AWS User Group Taiwan Staff
3
Agenda
● Background
● ElasticSearch on Private Cloud
● AWS ElasticSearch Service
● ElasticSearch Operator on Kubernetes
● Open Distro for ElasticSearch on Kubernetes
4
© 2020, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Background
5
Life is Hard, Not Mention to Maintain ELK
High Availability
Scalability
Index Backup
Retention Policy
Health Status Monitoring
6
My Elastic Decision Tree
Service
Self-Hosted
Open Distro
7
My Kubernetes Decision Tree
Self-Hosted
AWS EKS
Spot
On Demand
8
What is My ElasticSearch Journey?!
● ElasticSearch on Private Cloud
● AWS ElasticSearch Service
● ElasticSearch Operator on Kubernetes
● Open Distro for ElasticSearch on Kubernetes
9
© 2020, Amazon Web Services, Inc. or its affiliates. All rights reserved.
ElasticSearch on Private Cloud
10
What Happened?!
● First Time Maintain Official ElasticSearch Cluster
● Manually Scale Instance Number & Type, also Disk Volume, IOPS
● Don’t Know Cost How Much (Chargeback)
11
Retrospective
Advantage
The Cost of Large-Scale Data Center is Lower than Public Cloud
Soft Reminder
Cannot Scale Resource Automatically, Need to colleagues’ assistant
12
© 2020, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS ElasticSearch Service
13
What Happened?!
● There is no Time for a Crazy Growing Startup Company to Survey, Setup
● ElasticSearch Service Provide a Fast, Stable Way for Log Central
Management
● Only One Click, Everything Works
14
Retrospective
Advantage
Don’t need to Waste Time to Setup ElasticSearch
Soft Reminder
Comparing to Self-Hosted ElasticSearch, The Cost is Higher
15
© 2020, Amazon Web Services, Inc. or its affiliates. All rights reserved.
ElasticSearch Operator on
Kubernetes
16
What Happened?!
● The Log Size Grows Day by Day, Hence, The Cost also Grows
● Some Teams Only Use Kubernetes as Application Workload
● Find the Easy Way to Deploy ElasticSearch into Kubernetes (Operator)
17
What is ElasticSearch (K8S) Operator?
● It is a Software with ElasticSearch Operation Knowledge
● Enable Users to Create, Configure, and Manage ElasticSearch
Cluster Automatically
Ref18
Retrospective
Advantage
Leverage Vishwakarma to Self-Hosted Kubernetes Cluster W/ All Spot Instances
Leverage ElasticSearch Operator to Deploy ElasticSearch Cluster within Several Hours
Soft Reminder
The Log Size Still Grows, Operator Cannot Adjust Detail ElasticSearch Configuration
ElasticSearch OSS Version Doesn’t Fulfill Company’s Compliance
19
© 2020, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Open Distro for ElasticSearch on
Kubernetes
20
What Happened?!
● Still Using Vishwakarma to Self-Hosted Kubernetes Cluster W/ All Spot
Instances
● Leverage Elastic Official Helm Chart W/ Little Customize to Deploy
ElasticSearch & Kibana
● Replace ElasticSearch & Kibana OSS W/ Open Distro for ElasticSearch
21
What is Open Distro for ElasticSearch?
● AWS Official Depends on ElasticSearch OSS version to Append More
Strong Features
● Currently There are Security, Alerting, SQL, Performance Analyzer, Index
Management...etc
● Preparing to add Anomaly Detection, k-NN Search, Security integration
with alerting in the future
22
Retrospective
Advantage
Elastic Official Helm Chart Let me do whatever I want for the ElasticSearch Cluster
The Kubernetes Cluster Still Keeps the Lowest Cost
The ElasticSearch Cluster Meet My Company Compliance Now
Soft Reminder
It takes Time to Setup Open Distro for ElasticSearch (Document is not so Friendly)
23
Current ELK Infrastructure
Beats
Kibana
Logstash
ElasticSearch
Vishwakarma
Redis
LDAP/SAML
Open Distro
AWS S3
Prometheus
24
💰 Money! 💰 Money! 💰 Money!
By Month
(US$)
ElasticSearch
(r5.2xlarge * 5)
Logstash
(t3.large * 2)
ETCD/Kibana
(t3.medium * 1)
K8S Master
(t3.medium * 1)
Total
Service 2,675 120 30 (Kibana) N/A 2,825
Self-Hosted 540 (Spot) N/A 30 (ETCD) 9 (Spot) 579
● This is just a Simple Example
● Not Including EBS Volume, Redis...etc (Both Solution Necessary)
25
THANKS!
ANY QUESTIONS?
You can find me at my office:
● Frontend Engineer
● Software Engineer
● Software Engineer in Test
● Project Manager Job Page
26

More Related Content

What's hot (19)

PPTX
使用 Prometheus 監控 Kubernetes Cluster
inwin stack
 
PDF
Spinnaker Summit 2018: CI/CD Patterns for Kubernetes with Spinnaker
Andrew Phillips
 
PDF
The Kubernetes Operator Pattern - ContainerConf Nov 2017
Jakob Karalus
 
PDF
Sf bay area Kubernetes meetup dec8 2016 - deployment models
Peter Ss
 
PDF
Cloud Native User Group: Shift-Left Testing IaC With PaC
smalltown
 
PDF
Defining & Enforcing Policies the GitOps Way
Weaveworks
 
PDF
StarlingX - A Platform for the Distributed Edge | Ildiko Vancsa
Vietnam Open Infrastructure User Group
 
PDF
Cloud Native Microservices with Spring Cloud
Conor Svensson
 
PPTX
Spinnaker on Kubernetes
Jinwoong Kim
 
PDF
Practical tips and tricks for Apache Kafka messages integration | Francesco T...
HostedbyConfluent
 
PDF
Monitoring with prometheus at scale
Juraj Hantak
 
PDF
Spring Cloud and Netflix OSS overview v1
Dmitry Skaredov
 
PDF
Cloud Native Microservices with Spring Cloud
Conor Svensson
 
PDF
Managing Stateful Services with the Operator Pattern in Kubernetes - Kubernet...
Jakob Karalus
 
PDF
Microservices with Netflix OSS and Spring Cloud
acogoluegnes
 
PDF
基於 K8S 開發的 FaaS 專案 - riff
inwin stack
 
PDF
[Lakmal] Automate Microservice to API
Lakmal Warusawithana
 
PDF
Persist your data in an ephemeral k8 ecosystem
LibbySchulze
 
PDF
The Operator Pattern - Managing Stateful Services in Kubernetes
QAware GmbH
 
使用 Prometheus 監控 Kubernetes Cluster
inwin stack
 
Spinnaker Summit 2018: CI/CD Patterns for Kubernetes with Spinnaker
Andrew Phillips
 
The Kubernetes Operator Pattern - ContainerConf Nov 2017
Jakob Karalus
 
Sf bay area Kubernetes meetup dec8 2016 - deployment models
Peter Ss
 
Cloud Native User Group: Shift-Left Testing IaC With PaC
smalltown
 
Defining & Enforcing Policies the GitOps Way
Weaveworks
 
StarlingX - A Platform for the Distributed Edge | Ildiko Vancsa
Vietnam Open Infrastructure User Group
 
Cloud Native Microservices with Spring Cloud
Conor Svensson
 
Spinnaker on Kubernetes
Jinwoong Kim
 
Practical tips and tricks for Apache Kafka messages integration | Francesco T...
HostedbyConfluent
 
Monitoring with prometheus at scale
Juraj Hantak
 
Spring Cloud and Netflix OSS overview v1
Dmitry Skaredov
 
Cloud Native Microservices with Spring Cloud
Conor Svensson
 
Managing Stateful Services with the Operator Pattern in Kubernetes - Kubernet...
Jakob Karalus
 
Microservices with Netflix OSS and Spring Cloud
acogoluegnes
 
基於 K8S 開發的 FaaS 專案 - riff
inwin stack
 
[Lakmal] Automate Microservice to API
Lakmal Warusawithana
 
Persist your data in an ephemeral k8 ecosystem
LibbySchulze
 
The Operator Pattern - Managing Stateful Services in Kubernetes
QAware GmbH
 

Similar to AWS re:Invent re:Cap 2019: My ElasticSearch Journey on AWS (20)

PDF
Analyzing your web and application logs with the Amazon Elasticsearch Service...
javier ramirez
 
PDF
Elasticsearch
Shagun Rathore
 
PDF
How LogDNA Scaled Elasticsearch on Kubernetes
LogDNA
 
PDF
The elastic stack on docker
SmartWave
 
PDF
Growing with elastic search
Devi A S L
 
PDF
Run the elastic stack on kubernetes with eck
Daliya Spasova
 
PDF
Open Distro for ElasticSearch and how Grimoire is using it. Madrid DevOps Oct...
javier ramirez
 
PDF
OpenDistro for Elasticsearch and how Bitergia is using it.Madrid DevOps
javier ramirez
 
PDF
Philipp Krenn, Elastic. From Containers to Kubernetes Operators
IT Arena
 
PPTX
Devnexus 2018
Roy Russo
 
PDF
Log Analytics with AWS
AWS Germany
 
PPTX
Dev nexus 2017
Roy Russo
 
PDF
American Ancestors Use Case - Scalability & Support Using the Elasticsearch S...
Elasticsearch
 
PDF
Getting Started with Elasticsearch
Alibaba Cloud
 
PPTX
Deploying E.L.K stack w Puppet
Colin Brown
 
PDF
Enterprise search: search at scale
UllyCarolinneSampaio
 
PDF
Using AWS Elasticsearch for fast feedback on business data
Steven Ensslen
 
PDF
Elastic.co's ELK Stack - Platform Agnostic Immutable Infrastructure & Analys...
AWS Chicago
 
PDF
Applied Elk Stack Data Insights And Business Metrics With Collective Capabili...
klegerrejuso
 
PDF
Automating the Elastic Stack
Elasticsearch
 
Analyzing your web and application logs with the Amazon Elasticsearch Service...
javier ramirez
 
Elasticsearch
Shagun Rathore
 
How LogDNA Scaled Elasticsearch on Kubernetes
LogDNA
 
The elastic stack on docker
SmartWave
 
Growing with elastic search
Devi A S L
 
Run the elastic stack on kubernetes with eck
Daliya Spasova
 
Open Distro for ElasticSearch and how Grimoire is using it. Madrid DevOps Oct...
javier ramirez
 
OpenDistro for Elasticsearch and how Bitergia is using it.Madrid DevOps
javier ramirez
 
Philipp Krenn, Elastic. From Containers to Kubernetes Operators
IT Arena
 
Devnexus 2018
Roy Russo
 
Log Analytics with AWS
AWS Germany
 
Dev nexus 2017
Roy Russo
 
American Ancestors Use Case - Scalability & Support Using the Elasticsearch S...
Elasticsearch
 
Getting Started with Elasticsearch
Alibaba Cloud
 
Deploying E.L.K stack w Puppet
Colin Brown
 
Enterprise search: search at scale
UllyCarolinneSampaio
 
Using AWS Elasticsearch for fast feedback on business data
Steven Ensslen
 
Elastic.co's ELK Stack - Platform Agnostic Immutable Infrastructure & Analys...
AWS Chicago
 
Applied Elk Stack Data Insights And Business Metrics With Collective Capabili...
klegerrejuso
 
Automating the Elastic Stack
Elasticsearch
 
Ad

More from smalltown (20)

PDF
DevOpsDays Taipei 2025 - 為什麼你裝了一堆 O11y 工具,卻沒人用?🤷
smalltown
 
PDF
DevOpsDays Taipei 2025 - 🚒 DevOps 救火隊的逆襲:如何擺脫永無止境的電話鈴聲
smalltown
 
PDF
Kubernetes Summit 2024 - How GenAI Help you in K8s Ops
smalltown
 
PDF
DevOpsDays Taipei 2024 - Evolution of DevOps: Lessons Learned from a Growing ...
smalltown
 
PDF
SHOPLINE 職人聊天室: 警報管理 - 從系統和制度下手 By smalltown
smalltown
 
PDF
Kubernetes Summit 2023: Head First Kubernetes
smalltown
 
PDF
SRE Conference 2022 - How to Build a Healthy On-Call Culture
smalltown
 
PDF
Kubernetes Summit 2021: Multi-Cluster - The Good, the Bad and the Ugly
smalltown
 
PDF
DevOpsDays Taipei 2021 - How FinTech Embrace Change Management
smalltown
 
PDF
Kubernetes Summit 2019 - Harden Your Kubernetes Cluster
smalltown
 
PDF
HashiCorp Vault Workshop:幫 Credentials 找個窩
smalltown
 
PDF
TW SEAT - DevOps: Security 干我何事?
smalltown
 
PDF
Cloud Native User Group: Prometheus Day 2
smalltown
 
PDF
DevOpsDays - DevOps: Security 干我何事?
smalltown
 
PDF
Kubernetes Summit 2018 - Kubernetes: Stateless -> Stateful
smalltown
 
PDF
Kubernetes Day 2017 - Build, Ship and Run Your APP, Production !!
smalltown
 
PDF
Docker Summit 2016 - Kubernetes: Sweets and Bitters
smalltown
 
PDF
DevOpsDays Taipei 2017 - Terraform: Everything Is Code
smalltown
 
PDF
COSCUP 2017 - infrastructure As Code
smalltown
 
PDF
AWS Connect 2017 - Container (feat. AWS)
smalltown
 
DevOpsDays Taipei 2025 - 為什麼你裝了一堆 O11y 工具,卻沒人用?🤷
smalltown
 
DevOpsDays Taipei 2025 - 🚒 DevOps 救火隊的逆襲:如何擺脫永無止境的電話鈴聲
smalltown
 
Kubernetes Summit 2024 - How GenAI Help you in K8s Ops
smalltown
 
DevOpsDays Taipei 2024 - Evolution of DevOps: Lessons Learned from a Growing ...
smalltown
 
SHOPLINE 職人聊天室: 警報管理 - 從系統和制度下手 By smalltown
smalltown
 
Kubernetes Summit 2023: Head First Kubernetes
smalltown
 
SRE Conference 2022 - How to Build a Healthy On-Call Culture
smalltown
 
Kubernetes Summit 2021: Multi-Cluster - The Good, the Bad and the Ugly
smalltown
 
DevOpsDays Taipei 2021 - How FinTech Embrace Change Management
smalltown
 
Kubernetes Summit 2019 - Harden Your Kubernetes Cluster
smalltown
 
HashiCorp Vault Workshop:幫 Credentials 找個窩
smalltown
 
TW SEAT - DevOps: Security 干我何事?
smalltown
 
Cloud Native User Group: Prometheus Day 2
smalltown
 
DevOpsDays - DevOps: Security 干我何事?
smalltown
 
Kubernetes Summit 2018 - Kubernetes: Stateless -> Stateful
smalltown
 
Kubernetes Day 2017 - Build, Ship and Run Your APP, Production !!
smalltown
 
Docker Summit 2016 - Kubernetes: Sweets and Bitters
smalltown
 
DevOpsDays Taipei 2017 - Terraform: Everything Is Code
smalltown
 
COSCUP 2017 - infrastructure As Code
smalltown
 
AWS Connect 2017 - Container (feat. AWS)
smalltown
 
Ad

Recently uploaded (20)

PPTX
Comprehensive Risk Assessment Module for Smarter Risk Management
EHA Soft Solutions
 
PPTX
Change Common Properties in IBM SPSS Statistics Version 31.pptx
Version 1 Analytics
 
PPTX
AEM User Group: India Chapter Kickoff Meeting
jennaf3
 
PDF
MiniTool Partition Wizard Free Crack + Full Free Download 2025
bashirkhan333g
 
PPTX
Get Started with Maestro: Agent, Robot, and Human in Action – Session 5 of 5
klpathrudu
 
PDF
Download Canva Pro 2025 PC Crack Full Latest Version
bashirkhan333g
 
PDF
Generic or Specific? Making sensible software design decisions
Bert Jan Schrijver
 
PDF
AOMEI Partition Assistant Crack 10.8.2 + WinPE Free Downlaod New Version 2025
bashirkhan333g
 
PDF
Wondershare PDFelement Pro Crack for MacOS New Version Latest 2025
bashirkhan333g
 
PDF
AI Prompts Cheat Code prompt engineering
Avijit Kumar Roy
 
PDF
4K Video Downloader Plus Pro Crack for MacOS New Download 2025
bashirkhan333g
 
PPTX
ChiSquare Procedure in IBM SPSS Statistics Version 31.pptx
Version 1 Analytics
 
PDF
IObit Driver Booster Pro 12.4.0.585 Crack Free Download
henryc1122g
 
PPTX
Agentic Automation: Build & Deploy Your First UiPath Agent
klpathrudu
 
PPTX
Help for Correlations in IBM SPSS Statistics.pptx
Version 1 Analytics
 
PDF
How to Hire AI Developers_ Step-by-Step Guide in 2025.pdf
DianApps Technologies
 
PPTX
Agentic Automation Journey Series Day 2 – Prompt Engineering for UiPath Agents
klpathrudu
 
PDF
Open Chain Q2 Steering Committee Meeting - 2025-06-25
Shane Coughlan
 
PPTX
iaas vs paas vs saas :choosing your cloud strategy
CloudlayaTechnology
 
PDF
Top Agile Project Management Tools for Teams in 2025
Orangescrum
 
Comprehensive Risk Assessment Module for Smarter Risk Management
EHA Soft Solutions
 
Change Common Properties in IBM SPSS Statistics Version 31.pptx
Version 1 Analytics
 
AEM User Group: India Chapter Kickoff Meeting
jennaf3
 
MiniTool Partition Wizard Free Crack + Full Free Download 2025
bashirkhan333g
 
Get Started with Maestro: Agent, Robot, and Human in Action – Session 5 of 5
klpathrudu
 
Download Canva Pro 2025 PC Crack Full Latest Version
bashirkhan333g
 
Generic or Specific? Making sensible software design decisions
Bert Jan Schrijver
 
AOMEI Partition Assistant Crack 10.8.2 + WinPE Free Downlaod New Version 2025
bashirkhan333g
 
Wondershare PDFelement Pro Crack for MacOS New Version Latest 2025
bashirkhan333g
 
AI Prompts Cheat Code prompt engineering
Avijit Kumar Roy
 
4K Video Downloader Plus Pro Crack for MacOS New Download 2025
bashirkhan333g
 
ChiSquare Procedure in IBM SPSS Statistics Version 31.pptx
Version 1 Analytics
 
IObit Driver Booster Pro 12.4.0.585 Crack Free Download
henryc1122g
 
Agentic Automation: Build & Deploy Your First UiPath Agent
klpathrudu
 
Help for Correlations in IBM SPSS Statistics.pptx
Version 1 Analytics
 
How to Hire AI Developers_ Step-by-Step Guide in 2025.pdf
DianApps Technologies
 
Agentic Automation Journey Series Day 2 – Prompt Engineering for UiPath Agents
klpathrudu
 
Open Chain Q2 Steering Committee Meeting - 2025-06-25
Shane Coughlan
 
iaas vs paas vs saas :choosing your cloud strategy
CloudlayaTechnology
 
Top Agile Project Management Tools for Teams in 2025
Orangescrum
 

AWS re:Invent re:Cap 2019: My ElasticSearch Journey on AWS

  • 2. © 2020, Amazon Web Services, Inc. or its affiliates. All rights reserved. My ElasticSearch Journey on AWS smalltown Lead Site Reliability Engineering AMIS 2
  • 3. Hello! I am smalltown AMIS Lead Site Reliability Engineering Taipei HashiCorp User Group Organizer AWS User Group Taiwan Staff 3
  • 4. Agenda ● Background ● ElasticSearch on Private Cloud ● AWS ElasticSearch Service ● ElasticSearch Operator on Kubernetes ● Open Distro for ElasticSearch on Kubernetes 4
  • 5. © 2020, Amazon Web Services, Inc. or its affiliates. All rights reserved. Background 5
  • 6. Life is Hard, Not Mention to Maintain ELK High Availability Scalability Index Backup Retention Policy Health Status Monitoring 6
  • 7. My Elastic Decision Tree Service Self-Hosted Open Distro 7
  • 8. My Kubernetes Decision Tree Self-Hosted AWS EKS Spot On Demand 8
  • 9. What is My ElasticSearch Journey?! ● ElasticSearch on Private Cloud ● AWS ElasticSearch Service ● ElasticSearch Operator on Kubernetes ● Open Distro for ElasticSearch on Kubernetes 9
  • 10. © 2020, Amazon Web Services, Inc. or its affiliates. All rights reserved. ElasticSearch on Private Cloud 10
  • 11. What Happened?! ● First Time Maintain Official ElasticSearch Cluster ● Manually Scale Instance Number & Type, also Disk Volume, IOPS ● Don’t Know Cost How Much (Chargeback) 11
  • 12. Retrospective Advantage The Cost of Large-Scale Data Center is Lower than Public Cloud Soft Reminder Cannot Scale Resource Automatically, Need to colleagues’ assistant 12
  • 13. © 2020, Amazon Web Services, Inc. or its affiliates. All rights reserved. AWS ElasticSearch Service 13
  • 14. What Happened?! ● There is no Time for a Crazy Growing Startup Company to Survey, Setup ● ElasticSearch Service Provide a Fast, Stable Way for Log Central Management ● Only One Click, Everything Works 14
  • 15. Retrospective Advantage Don’t need to Waste Time to Setup ElasticSearch Soft Reminder Comparing to Self-Hosted ElasticSearch, The Cost is Higher 15
  • 16. © 2020, Amazon Web Services, Inc. or its affiliates. All rights reserved. ElasticSearch Operator on Kubernetes 16
  • 17. What Happened?! ● The Log Size Grows Day by Day, Hence, The Cost also Grows ● Some Teams Only Use Kubernetes as Application Workload ● Find the Easy Way to Deploy ElasticSearch into Kubernetes (Operator) 17
  • 18. What is ElasticSearch (K8S) Operator? ● It is a Software with ElasticSearch Operation Knowledge ● Enable Users to Create, Configure, and Manage ElasticSearch Cluster Automatically Ref18
  • 19. Retrospective Advantage Leverage Vishwakarma to Self-Hosted Kubernetes Cluster W/ All Spot Instances Leverage ElasticSearch Operator to Deploy ElasticSearch Cluster within Several Hours Soft Reminder The Log Size Still Grows, Operator Cannot Adjust Detail ElasticSearch Configuration ElasticSearch OSS Version Doesn’t Fulfill Company’s Compliance 19
  • 20. © 2020, Amazon Web Services, Inc. or its affiliates. All rights reserved. Open Distro for ElasticSearch on Kubernetes 20
  • 21. What Happened?! ● Still Using Vishwakarma to Self-Hosted Kubernetes Cluster W/ All Spot Instances ● Leverage Elastic Official Helm Chart W/ Little Customize to Deploy ElasticSearch & Kibana ● Replace ElasticSearch & Kibana OSS W/ Open Distro for ElasticSearch 21
  • 22. What is Open Distro for ElasticSearch? ● AWS Official Depends on ElasticSearch OSS version to Append More Strong Features ● Currently There are Security, Alerting, SQL, Performance Analyzer, Index Management...etc ● Preparing to add Anomaly Detection, k-NN Search, Security integration with alerting in the future 22
  • 23. Retrospective Advantage Elastic Official Helm Chart Let me do whatever I want for the ElasticSearch Cluster The Kubernetes Cluster Still Keeps the Lowest Cost The ElasticSearch Cluster Meet My Company Compliance Now Soft Reminder It takes Time to Setup Open Distro for ElasticSearch (Document is not so Friendly) 23
  • 25. 💰 Money! 💰 Money! 💰 Money! By Month (US$) ElasticSearch (r5.2xlarge * 5) Logstash (t3.large * 2) ETCD/Kibana (t3.medium * 1) K8S Master (t3.medium * 1) Total Service 2,675 120 30 (Kibana) N/A 2,825 Self-Hosted 540 (Spot) N/A 30 (ETCD) 9 (Spot) 579 ● This is just a Simple Example ● Not Including EBS Volume, Redis...etc (Both Solution Necessary) 25
  • 26. THANKS! ANY QUESTIONS? You can find me at my office: ● Frontend Engineer ● Software Engineer ● Software Engineer in Test ● Project Manager Job Page 26