Eliatra — OpenSearch Support, Services and Development

Eliatra provides custom development for OpenSearch and OpenSearch Dashboards, aimed at implementing specific customer use cases. It states that its focus is exclusively on the OpenSearch platform, offering trusted expertise, operational support and professional services. The company can set up, configure and run OpenSearch environments, handle migrations from the Elastic Stack, and fine-tune individual features. Its positioning rests on specialised IT security knowledge applied to OpenSearch and related technologies.

• Support for OpenSearch
• Professional services
• Custom feature development
• Set-up, configuration and operation of OpenSearch environments
• Migration from the Elastic Stack

Eliatra describes itself as being all about open source and OpenSearch, with the open source philosophy as one of its core principles. It is an official OpenSearch partner and contributes to the project, and has been active on the OpenSearch forum answering questions about OpenSearch security. The company provides enterprise support with guaranteed SLAs for organisations running OpenSearch in mission-critical parts of their infrastructure, including bug fixes and hotfix releases. It also cites in-depth expertise with Elasticsearch and X-Pack to support migrations to OpenSearch, in some cases without downtime.

• Official OpenSearch partner
• Enterprise support with guaranteed SLAs
• Hotfix releases and bug fixing
• Attended the OpenSearch Conference in Seattle as a partner

Eliatra Suite is the company's software offering for OpenSearch, released as version 1.0.0 for OpenSearch 2.5.x and 2.6.x. The first two modules are Eliatra Suite Security Plus and Eliatra Suite Alerting Plus. Security Plus supports authentication and authorisation technologies including LDAP, OIDC, SAML, Kerberos and JWT, with document- and field-level access control, an audit module and a configuration tool called spct. Alerting Plus is a notification system built on watches, conditions and actions, with escalation by severity level, throttling and acknowledgement, and multi-tenancy integration.

• Eliatra Suite Security Plus — security for OpenSearch and Dashboards
• Eliatra Suite Alerting Plus — watches, conditions and notification actions
• Notification channels include Email, Slack, PagerDuty, JIRA, Webhooks and Index
• Audit module supporting GDPR, SOX, ISO and HIPAA compliance needs

Eliatra offers encryption at rest for OpenSearch through a plugin, published first as Eliatra Cloud Tresor and then as the GA release Eliatra Cloud Lock. The plugin encrypts OpenSearch data held on disk, supports encrypted indices and encrypted snapshots, and keeps the decryption key in memory on cluster nodes rather than on server disk. It installs like any other OpenSearch plugin and works on Docker, Kubernetes, EC2 or in a customer's own data centre, in public or private clouds and on-premises. Cloud Lock ships with a command line tool called clctl for initialisation and key management; the earlier Cloud Tresor release used a tool named earctl.

• Encrypted indices and encrypted snapshots to S3 or NFS
• Mapping must include a binary _encrypted_tl_content metadata field
• Realtime get actions execute as non-realtime actions
• Slight performance impact when indexing and searching encrypted indices
• Re-initialisation required after a full cluster restart

Eliatra publishes an article series guiding users step by step through migrating from Elasticsearch to OpenSearch, beginning with prerequisites, and further articles covering migration from X-Pack Security to OpenSearch Security, including custom roles. Eliatra Suite ships a Compatibility Edition that allows a migration from Elasticsearch with Search Guard FLX installed to OpenSearch with Eliatra Suite without downtime for the cluster. That path requires Elasticsearch 7.10.2 OSS with Search Guard FLX 1.1.1 or later and targets OpenSearch 2.5.x or 2.6.x. Migrating Kibana to OpenSearch Dashboards is also covered, though it requires a short downtime because Kibana and Dashboards cannot run simultaneously.

• Compatibility Edition downloadable from Eliatra's Maven repository
• Requires the new Search Guard FLX configuration format (sg_authc.yml)
• TLS certificates signed by a common Root or Intermediate CA
• At least one replica per index
• Eliatra Suite Migration Tool used during the process

SMEK is an Eliatra managed service that provisions ephemeral Kubernetes clusters in under a minute, typically in less than five seconds. It is API-centric and aimed at developers and devops engineers who need isolated clusters for automated testing in CI environments and for development work; it is not intended for production workloads. Clusters are created through an API request using a bearer token obtained from Eliatra, with parameters for Kubernetes version, minutes to live, whether to keep the cluster, notification email, privileged pods and cluster size. The create call returns a kubeconfig file for immediate use with kubectl, and stop and list APIs are also available.

• Currently supports Kubernetes version 1.27.4
• Cluster size 1-mid: one node, 8 CPU cores, 32 GB memory, 100 GB usable disk
• Automatic termination or stop after a defined number of minutes
• Privileged pods only where the token permits
• TCP ports below 1024 unavailable except 80 and 443

The Eliatra website presents new work from its labs, including Encryption at Rest and Coretex AxIom. The company also publishes technical writing on emerging OpenSearch capabilities: a Machine Learning Engineer at Eliatra has covered Conversational Search in OpenSearch, explaining conversation history and Retrieval-Augmented Generation, and the steps to configure connectors, models and a RAG search pipeline. That work was also presented as a talk at OpenSearchCon in Berlin on vector and conversational search.

• Encryption at Rest
• Coretex AxIom
• Conversational Search guidance for OpenSearch

Eliatra is a remote-first company with its main office in Dublin and team members across Ireland, Europe and the United States. Its registered details are given as Excelerate Technology Ltd. T/A Eliatra, 77 Lower Camden Street, Dublin, D02 XE80, Ireland, with the website at eliatra.com. The company grew its development team during 2022 and has advertised openings for OpenSearch backend and frontend development. Prospective users of products such as SMEK are asked to contact Eliatra to obtain an API token.

• Main office: 77 Lower Camden Street, Dublin, D02 XE80, Ireland
• Legal name: Excelerate Technology Ltd. T/A Eliatra
• Founded 2020
• Remote-first working model
• Website: https://eliatra.com