Elasticsearch is a distributed search and analytics engine built on Apache Lucene, developed by Elastic (the company behind the Elastic Stack, which also includes Kibana, Logstash, and Beats). It's widely used for full-text search, log and metrics analytics, and as the backbone of many SIEM and observability platforms. Elastic Cloud is the company's managed hosting option for the stack.

Aikido connects to Elasticsearch as a SIEM destination, pushing security findings into your Elasticsearch index so they're searchable alongside your other infrastructure, application, and audit logs. Connection is available via URL or Cloud ID, authenticated with either an API key or username/password, and teams can configure which issues sync (status, minimum severity, issue type, language) along with sync frequency. It's a fit for teams already running Elasticsearch or Elastic Cloud as their SIEM who want to correlate Aikido findings in one place rather than checking a separate dashboard.

The Elastic SIEM integration is available starting from Aikido Advanced.