>> Narrator: From around the globe
it's theCUBE, with digital coverage
of AWS reinvent 2020 special coverage sponsored
by AWS global partner network.
>> Hello, and welcome to theCUBE virtual
with our special coverage of AWS reinvent 2020
with additional special coverage of APN partner experience.
We are theCUBE virtual and I'm your host, Justin Warren.
And today I'm joined by Angelos Kottas
who is vice president of product marketing at elastic
and he comes to us from San Francisco.
Angelos , welcome to theCUBE.
>> Thank you, Justin.
A pleasure to join you.
>> Great to have you here.
Now. I've been a big fan
of elastic for a while have used your products
in a variety of circumstances?
You're big partners of AWS and have seen quite a bit
of change over the last couple of years.
We were talking just before we came on air.
Maybe you could talk us through what elastic is doing
with AWS and a little bit about those changes
that you've seen over the last >> Absolutely
one period.
>> Sounds good Justin. So first of all
many people know elastic as the makers of elastic search.
One of the most popular open source of search engines
and along with elastic search
we have cabana and beats and Logstash
and many people know us as the Elk Stack, right?
And so clearly we have roots
in the open source community and people have used us
for custom applications for years and years.
One of the key changes over the last few years is
that we've realized that many customers were doing some
of the same things with elastic.
So we said, what if we really focus
on end to end experiences for our three core use cases?
And so we chose three use cases
and built solutions around them.
What is enterprise search, right?
Which is how do you find information on your website
in your application or in your workspace?
The second is observability.
So think
about software development software in every industry.
What about dev ops?
What about performance?
What about consistency and last but not least, especially
you know, with some of the current transitions
in digital transformation, think about security.
Think about your network security, your endpoint security
and how you have visibility across your entire IT ecosystem.
So we've chosen those three solution areas
and put significant engineering
into building out that experience.
How quickly can we deliver value,
how pre-built can the configuration be the integrations
be, the workflow, the reporting
and the dashboards around those use cases.
The last piece, which is very relevant
for reinvent is the transition to cloud, right?
So we still offer a downloadable software and many
of our customers and users download the elastic stack
and deploy it on-prem and hybrid cloud environments.
But one of the fastest growing deployment models is
in the public cloud.
And of course, elastic cloud on AWS is one
of our major routes to market, happy to meet many
of our customers where they are, which is on AWS.
>> Oh it's great to be able to have that choice
I think that people can download the software
try and get it, get comfortable with it
but then people often find
that actually running software yourself,
there's quite a lot of work involved in doing that.
I know that I, I've experienced that myself.
Just little things like maintenance and so on.
So it sounds like you're actually taking care of a lot
of that for customers if they move to the cloud service.
But is there anything else special
about the cloud service that customers might not
be that aware of?
>> Well, I mean, choice is a big part of it
and so it's not just do I choose cloud it's wearing cloud.
So we've actually, we now run elastic cloud
in over 40 regions around the world.
So we can be close to you in terms of latency,
and in terms of performance, in terms of data sovereignty
we can be local to your environment.
The other aspect
it's not just how we simplify deploying elastic.
You know, clearly we architect it
we install it, deploy and upgraded for you.
But also we have focused quite a bit
on integrating cloud data sources.
So with AWS, as an example, we look at all
of the applications and data sources that you host on AWS.
And we think about how do we get those data streams
how do we get that data directly integrated
into elastic. One final piece, actually
which I forget sometimes it's not the technical side.
It's the business side is the commercial integration, right?
So we are, you know, very happy to
to be listed on the AWS marketplace.
We've made it easy for you to find, deploy
and actually build through your AWS commercial agreements
via the marketplace integration.
>> Right, so easy to get started and to start using it
and search is certainly something that elastic is famous
for. But you mentioned observability there, a bit
of a question I have around observability is, is it
that just a fancy way of saying monitoring?
There seems to be this, this buzzword around the place.
So what do you mean when you say observability?
>> So one of the key foundational principles
of the elastic observability solution is that, you know
you want a unified data database
a unified place to store all that data.
So it is stretching across logs metrics, application traces
it's bringing together a common platform that lets you look
at different aspects of observability.
So whether you're doing end to end application traces
or whether you're just collecting infrastructure logs
and looking at performance metrics
it's kind of across the board, even looking
at things in our most recent release that just
came out last week, you know
expanding on user experience, monitoring and synthetics.
So you can optimize web interactions
and web experiences, for example.
>> Right. Okay.
So there's a bunch
of different types of data that are involved there.
I know traditionally people would silo those
off into a specific customized thing just
for that particular type of workload.
What is it about elastic that means
that you can put all of these in one place?
>> Yeah. You know,
one of early catchphrases for what does elastic do?
What do we focus on?
The value we deliver is speed, scale and relevance.
And so one of the things that is famous
about the elastic way of doing things is the way
in which we index data on ingest and so that
you can get search queries that return within milliseconds
and so that performance characteristics.
A second one is scale.
And this is actually really key, not just for observability
but right next to observability, you get security as well.
We like to say, if you're going to observe
you might as well protect as well.
So when you expand to that universe
you have not just hundreds of devices
you might have thousands or tens
of thousands of devices that you are ingesting information
whether it's operational data, whether it's security data.
So scale becomes extremely significant.
How can you scale horizontally and vertically
and maintain that performance even when you are
in a fortune 500 scale infrastructure
The last piece is relevance.
And so, you know that data
it's not just about knowing what to look for.
It's about using things like machine learning
and anomaly detection to uncover unusual patterns
of behavior and proactively alerting
and making that visible through notifications and
through alerts that can actually integrate not just
with your elastic operations
but actually with third party software.
Maybe you want to trigger a service now ticket
or a, you know, a Slack integration
and all of that is part of the elastic platform as well.
>> Right? Okay.
So by putting everything kind of in one place
that is around what you're talking about.
So we have enterprise search and then to be able to
find things we're collecting all
of the data that we need to find things.
And then you touched on security at the beginning
and we're starting to talk around security there.
So I'm keen to move on to that
>> (chuckles)
>> By looking at all of these, these different, these signals
we can hopefully then manage some of security
which I know is very much front
of mind for everyone over the last year.
Cyber security has very much come
to the forefront of everyone's thinking.
>> Absolutely. And you know, we've been
on the network side of security for some time.
So we've had our SIM solution, you know
security information event monitoring,
but we made a very strategic acquisition a little
over a year ago.
We saw that a critical piece
of visibility is also the end point.
And so we partnered with end game and eventually we acquired
end game to create end to end visibility on that security.
So it is being able to connect, you know
the path of data from your servers
and network devices all the way to the end points.
And an example of the power
of this unified architecture is the new elastication
that we introduced in beta a couple of months ago.
We said, what if we had a single deployment
that both does endpoint protection
and does malware scanning of your endpoint devices
while also ingesting data into your observability systems.
And so that's kind of the power of the platform
the ability to use common infrastructure
common integrations, so
that every use case you adopt on top of elastic,
it sort of multiplies the value you're getting
from using elastic as an infrastructure player.
>> Alright that's a good combining
a couple of different things
into the one tool that you can use.
I know sys who I'd spoken to are quite concerned
about the proliferation
of tools that they have in their environment,
it seems that they've bought lots of different things
but a lot of them are kind of sitting
in a drawer, not really being used.
And partly, it's just, we
we have so many different ways of dealing with these issues.
None of it's really flushed out
or sorry has been fully fleshed out that we
definitely know this is the one true way to solve this.
So what are you hearing from customers
as they start to use these security functions?
What are they telling you
about the way that they're managing security
in their environments?
>> Well, you know, we think about a few different personas
in the security market, right?
We think about threat hunters, for example
who are looking to identify threats, we're looking
at the operations team that do the cleanup that do the
you know, the resolution of security threats.
And we also, so there's a, you know,
there's two competing terms in the security market.
We have security operations in the observability world.
We have dev ops, right?
And, and developer, you know, the continue
of developer and deployment into a dev ops role.
And so we're starting to see this concept
of DevSecOps, right?
What if there is a unified set it's not
all things to all people
and that's an important thing, right?
We're not trying to be, your single security vendor
for all IT security needs, but instead we're saying, what
if you had a security operations analyst, a thrent Hunter
an executive, a CSO who's looking for, you know
an overall level of threat or compliance to policy
and you can bring those experiences together
through the elastic security solution.
>> Right? So it sounds like you
you're trying to allow people to work
in the way that they need to providing them the tools
that suit their particular circumstance.
>> That's right.
That's right.
I mean, in terms of how do you define success?
You look at metrics like meantime to resolution, you know
can we reduce the meantime to resolution
or you look at law collection
and how much more efficiently can you collect logs?
You look at asset monitoring
and what percentage of your IT infrastructure
you actually have unified visibility into, you know
we have one great cloud customer OALEKS group.
They are a popular online marketplace, you know
and they quoted to us
that they had a 1900% increase in law collection, right.
In terms of scope of what they are collecting logs on
they reduce that MTTR by 30% for security incidents
so dramatically streamlined and shortened the exposure.
And then they increased asset monitoring
by 35% across cloud, as well as on-prem.
And I think that's the other piece is that, you know
whether you deploy your security in the cloud or on-prem
you are looking to secure your hybrid environment.
And so being able to take data feeds from your SAS partners
from your infrastructure running on AWS
as well as from those endpoint devices.
>> Well, it sounds like there's plenty of scope
of interesting things for people to come
and have a look at it, at elastic.
So, Angelos, thank you so much for joining us here, please.
Thank you to my guests
Angelos Kottas,
vice president of product marketing at elastic.
You've been watching theCUBE virtual
and our coverage of AWS reinvent 2020
with special coverage of APN partner experience.
Make sure you check out all our coverage
on your desktop laptop or on your phone, wherever you are.
I've been your host, Justin Warren.
And I look forward to seeing you again soon.
(upbeat music)