OpenSearch tools

    Historically, many multiple popular agents and ingestion tools have worked with Elasticsearch OSS, such as Beats, Logstash, Fluentd, FluentBit, and OpenTelemetry. OpenSearch aims to continue to support a broad set of agents and ingestion tools, but not all have been tested or have explicitly added OpenSearch compatibility.

    As an intermediate compatibility solution, OpenSearch has a setting that instructs the cluster to return version 7.10.2 rather than its actual version.

    If you use clients that include a version check, such as versions of Logstash OSS or Filebeat OSS between 7.x - 7.12.x, enable the setting:

    , the alternative is to add the following line to on each node and then restart the node:

    You can download the OpenSearch output plugin for Logstash from . The Logstash output plugin is compatible with OpenSearch and Elasticsearch OSS (7.10.2 or lower).

    These are the latest versions of Beats OSS with OpenSearch compatibility. For more information, see the compatibility matrices.

    Some users report compatibility issues with ingest pipelines on these versions of Beats. If you use ingest pipelines with OpenSearch, consider using the 7.10.2 versions of Beats instead.

    Italicized cells are untested, but indicate what a value theoretically should be based on existing information.

     Beats OSS 7.0.0 to 7.11.x*Beats OSS 7.12.xBeats 7.13.x
    Elasticsearch OSS 7.0.0 to 7.9.xYesYesNo
    Elasticsearch OSS 7.10.2YesYesNo
    ODFE 1.0 to 1.12YesYesNo
    ODFE 1.13YesYesNo
    OpenSearch 1.x to 2.xYes via version settingYes via version settingNo
    Logstash OSS 7.0.0 to 7.11.xYesYesYes
    Logstash OSS 7.12.x*YesYesYes
    Logstash 7.13.x with OpenSearch output pluginYesYesYes

    * Most current compatible version with Elasticsearch OSS.

    ** Beats OSS includes all Apache 2.0 Beats agents (i.e. Filebeat, Metricbeat, Auditbeat, Heartbeat, Winlogbeat, Packetbeat).

    Beats versions newer than 7.12.x are not supported by OpenSearch. If you must update the Beats agent(s) in your environment to a newer version, you can work around the incompatibility by directing traffic from Beats to Logstash and using the Logstash Output plugin to ingest the data to OpenSearch.

    The OpenSearch CLI command line interface (opensearch-cli) lets you manage your OpenSearch cluster from the command line and automate tasks. For more information on OpenSearch CLI, see OpenSearch CLI.