Blog

Ten Years of Search Guard: Complete Elasticsearch Data Protection Without Volume-Based Licensing

Ten Years of Search Guard: Complete Elasticsearch Data Protection Without Volume-Based Licensing

Anja Glauch || 2026-09-22

Encryption at rest across indices, snapshots and translogs, customer-held keys, and total cost of ownership 50 to 70 percent below Elastic Platinum.

Deduplicating Events in Elasticsearch: The Upsert Strategy

Deduplicating Events in Elasticsearch: The Upsert Strategy

Jochen Kressin || 2026-09-15

Learn how to deduplicate events in Elasticsearch using Logstash upsert operations instead of storage-heavy transforms. Optimize your ingestion pipeline.

Upgrading to Elasticsearch 9: Why Your "Read-Only" 7.x Indices Still Block the Boot

Upgrading to Elasticsearch 9: Why Your "Read-Only" 7.x Indices Still Block the Boot

Daniel Gleim || 2026-09-03

Use Kibana’s Upgrade Assistant to reindex or mark 7.x indices read-only, not just index.blocks.write, or 9.x will still refuse to start.

SG Blog Writing Kibana Pt5 Zeichenfläche 1 Kopie 10

Writing Kibana Plugins , Part 5: Adding a User Interface

Jochen Kressin || 2026-08-31

In this last part of our series, we will add a nice little user interface to manage the data in our accounts sample index.

LDAP Authentication Broken in Elasticsearch 8.18.0: The Entitlements Bug

LDAP Authentication Broken in Elasticsearch 8.18.0: The Entitlements Bug

Jochen Kressin || 2026-08-18

Elasticsearch 8.18.0 and 9.0.0 broke LDAP authentication with a NotEntitledException error. Learn what caused it and how to fix it.

Understanding Translog Recovery When a Failed Node Rejoins Your Elasticsearch Cluster

Understanding Translog Recovery When a Failed Node Rejoins Your Elasticsearch Cluster

Jochen Kressin || 2026-08-06

Learn how Elasticsearch handles translog recovery when a failed primary node rejoins the cluster after a replica has been promoted.

How Elasticsearch Checks for Document Existence with Custom IDs

How Elasticsearch Checks for Document Existence with Custom IDs

Jochen Kressin || 2026-07-21

Discover how Elasticsearch efficiently checks document existence when using custom IDs through shard routing and logarithmic terms dictionary lookups.

Encryption at Rest for Elasticsearch: The Complete Series

Encryption at Rest for Elasticsearch: The Complete Series

Daniel Gleim || 2026-07-16

The full Encryption at Rest series in one place: what it is, where it applies across industries, and how it maps to PCI-DSS, GDPR, SOX and more. Plus an FAQ.

Resolving Elasticsearch 9.0.1 Upgrade Issues with Custom Plugin Compatibility

Resolving Elasticsearch 9.0.1 Upgrade Issues with Custom Plugin Compatibility

Daniel Gleim || 2026-07-14

If you want to to upgrade from Elasticsearch 8.x to 9.0, you need to understand how plugin compatibility works and what to do when things don't go as planned

Elasticsearch Snapshot Restore Fails Despite Setting index.blocks.write: A Version Compatibility Deep Dive

Elasticsearch 8 to 9 Snapshot Restore Fails? The 7.x-Origin Index Trap and the Fix That Worked

Daniel Gleim || 2026-06-17

This scenario highlights a subtle but important aspect of cross-version compatibility that caught one user off guard during their upgrade from 8.7.1 to 9.0.1

Tags

Search Guard (76)Security (46)Elasticsearch (41)Company (26)Compliance (15)Kibana (13)Alerting (13)TLS (12)Hall of Fame (11)Helpful Hints (8)Licensing (8)Events (4)

Sign up for Search Guard Newsletter

© 2026 floragunn GmbH - All Rights Reserved

Search Guard is a trademark of floragunn GmbH, registered in the U.S. and in other countries. Elasticsearch, Kibana, Logstash, and Beats are trademarks of Elasticsearch BV, registered in the U.S. and in other countries. Apache and Apache Lucene are trademarks of the Apache Software Foundation in the United States and/or other countries.