Opensearch
App in the BluixApps catalog
What it is
OpenSearch is the community-driven fork of Elasticsearch, maintained by AWS after Elastic relicensed under SSPL. Distributed search and analytics, Apache 2.0 licensed, with built-in security, alerting, anomaly detection, observability. Drop-in compatible with the Elasticsearch ecosystem (Logstash, Beats, Kibana → OpenSearch Dashboards).
It's the answer for teams that want the Elastic Stack without Elastic's license terms or commercial pressure.
What it's for
- Log aggregation — centralized logging from microservices
- Application search — full-text search at scale across millions of documents
- Security analytics (SIEM) — log analysis for security events
- Metrics analytics — time-series data + dashboards
- Vector search — k-NN search for AI applications (added in 2.x)
Who it's for
- Platform engineering teams running log aggregation at scale (TB+/day)
- SRE teams unifying metrics, logs, traces in one analytics layer
- Security teams building SIEM workflows on OSS infrastructure
- Search teams needing distributed full-text + faceted search beyond Meilisearch's scope
- Compliance-bound orgs rejecting SSPL-licensed Elasticsearch for legal reasons
Why teams pick OpenSearch over alternatives
- Apache 2.0 — no SSPL ambiguity, true open source
- AWS-backed — sustained commercial development + AWS Managed Service compatibility
- Drop-in Elasticsearch replacement — same APIs, similar dashboards (Kibana fork)
- Built-in security — RBAC, TLS, audit logging without paid X-Pack equivalent
- k-NN plugin — vector search for AI use cases
- Anomaly detection — ML-powered alerting included
Integrations
- Log shippers — Logstash, Beats, Fluent Bit, Fluentd, Vector
- Dashboards — OpenSearch Dashboards (Kibana fork) included
- Client SDKs — Python, JS, Java, Go, .NET, Ruby
- Alert channels — Slack, email, PagerDuty via Alerting plugin
- SQL endpoint — query OpenSearch with SQL via plugin
- Vector search — k-NN plugin for embedding similarity
- Trace ingestion — Jaeger-compatible trace storage
Notable users & community
- 10k+ GitHub stars on opensearch-project/OpenSearch
- Backed by AWS with multi-year roadmap commitment
- Used at scale by AWS customers + enterprises migrating off Elastic
- Active community across AWS, Capital One, SAP, Hyland
- Featured in observability + SIEM architecture guides
Tips & operations
- Heap sizing matters — set JVM heap to 50% of container RAM; over-allocation degrades GC
- Shard sizing — aim for 10-50 GB per shard; smaller = overhead, larger = recovery pain
- Index lifecycle policies — ILM for time-series data; without it, indices grow unbounded
- Snapshot to S3 — built-in snapshot repository; cron + S3 = cheap off-site backup
- Disable wildcard delete in production — accidental
DELETE _all= data loss - Resource limits — OpenSearch needs
vm.max_map_count >= 262144on host
What we ship in BluixApps
- Docker compose: OpenSearch single-node + OpenSearch Dashboards
- Pinned
opensearchproject/opensearch:2.18.0(release-tagged) - HTTPS via Let's Encrypt; admin user with random password
- Persistent volume at
/usr/share/opensearch/datafor indices - Security plugin enabled by default (TLS + RBAC)
- Snapshot repository configured for daily backup
- Backup hook captures snapshot exports
Get this app — pick a BluixApps plan
Same catalog. Scaling tenant isolation, white-label and support tier.
| Tier | Tenants | Catalog | Support | White-label | Monthly | |
|---|---|---|---|---|---|---|
| Stacks | 1 | 19 curated stacks | Standard | — | $19/mo | DetailDeploy |
| Starter | 10 | Full catalog | Standard | +$15–25/mo | $49/mo | DetailDeploy |
| Pro | 25 | Full catalog | Priority bugfix | +$15–25/mo | $149/mo | DetailDeploy |
| Growth | 100 | Full catalog | Priority bugfix | +$15–25/mo | $349/mo | DetailDeploy |
| Scale | 500 | Full catalog | 7-day window | +$15–25/mo | $799/mo | DetailDeploy |
| Enterprise | Unlimited | Full catalog | Priority 7-day | Bundled | $1,499/mo | DetailDeploy |
