The first technical talk of the event will highlight the latest releases at Elastic with specific insight into how those changes impact public sector projects. See the inside view of the most important capabilities and hear predictions on the developments that will be most applicable in our industry.

1. 1
What’s new at Elastic
Dave Erickson
Director of Solutions Architecture, US Federal

2. This presentation and the accompanying oral presentation contain forward-looking statements, including statements
concerning plans for future offerings; the expected strength, performance or benefits of our offerings; and our future
operations and expected performance. These forward-looking statements are subject to the safe harbor provisions
under the Private Securities Litigation Reform Act of 1995. Our expectations and beliefs in light of currently
available information regarding these matters may not materialize. Actual outcomes and results may differ materially
from those contemplated by these forward-looking statements due to uncertainties, risks, and changes in
circumstances, including, but not limited to those related to: the impact of the COVID-19 pandemic on our business
and our customers and partners; our ability to continue to deliver and improve our offerings and successfully
develop new offerings, including security-related product offerings and SaaS offerings; customer acceptance and
purchase of our existing offerings and new offerings, including the expansion and adoption of our SaaS offerings;
our ability to realize value from investments in the business, including R&D investments; our ability to maintain and
expand our user and customer base; our international expansion strategy; our ability to successfully execute our
go-to-market strategy and expand in our existing markets and into new markets, and our ability to forecast customer
retention and expansion; and general market, political, economic and business conditions.
Additional risks and uncertainties that could cause actual outcomes and results to differ materially are included in
our filings with the Securities and Exchange Commission (the “SEC”), including our Annual Report on Form 10-K for
the most recent fiscal year, our quarterly report on Form 10-Q for the most recent fiscal quarter, and any
subsequent reports filed with the SEC. SEC filings are available on the Investor Relations section of Elastic’s
website at ir.elastic.co and the SEC’s website at www.sec.gov.
Any features or functions of services or products referenced in this presentation, or in any presentations, press
releases or public statements, which are not currently available or not currently available as a general availability
release, may not be delivered on time or at all. The development, release, and timing of any features or functionality
described for our products remains at our sole discretion. Customers who purchase our products and services
should make the purchase decisions based upon services and product features and functions that are currently
available.
All statements are made only as of the date of the presentation, and Elastic assumes no obligation to, and does not
currently intend to, update any forward-looking statements or statements relating to features or functions of services
or products, except as required by law.
Forward-Looking Statements

3. 2010
Today
Elasticsearch 0.4
released
Common Schema
ECS
Elasticsearch 1.0
released
APM SIEM Endpoint
Logstash
joins forces
Kibana
joins forces
Beats
Machine
Learning
Cloud
Elastic Chronology
Unified
for all
FedRAMP
Cloud

4. Apr
2020
Lens
ILM
The Dev Team has been busy
Mar
2021
Workplace
Search
SIEM
Cases
42 Elastic
Cloud
Regions
EQL
Language
200
Prebuilt
SIEM Alerts
SUNBURST
Protections
Alerts
Service
Maps
Elastic
Agent
Endpoint
Security
Server/APM
Correlation
Searchable
Snapshots
Schema on
Read
Runtime
Fields

5. 5
Listening
to you

6. 2,884 8,141 1,689
Elasticsearch Kibana Beats
Listening to you: Building your future
# of User Github Issues/Enhancements Resolved This Year

7. Listening to you:
SolarWinds response
• Command Execution via SolarWinds
Process
• SolarWinds Process Disabling Services
via Registry
• Suspicious SolarWinds Child Process
• SUNBURST C2 Activity
Basic | GA

8. 8
Listening to you: Elastic Maps Server
For air-gapped environments
The most requested Maps Feature

9. 9
Building you
a
Fast
Day 0
Experience

10. 10
Many data shippers today
Filebeat
Metricbeat
Winlogbeat
Heartbeat
Security
APM
Elastic Agent
Filebeat
Metricbeat
Winlogbeat
Heartbeat
Security
APM
Day 0 Install
Easier to upgrade
Designed with Fleet for easy
usage

12. 12
Day 0 Enterprise Search Web Crawler
We will build your website’s search for you. Air-gapped or not

13. 13
Schema on write Schema on read
Advantages:
● Speed
● Scale
Advantages:
● Flexibility
● Ingest Pace
Built to load anything on Day 0
Organized

14. 14
Best Practice Architecture -
automatically
Scaled up and down for workloads
Sizing built using the experience found
from 1000’s of clusters
Day 0: Deployment Autoscaling
Autoscale more, think less

15. 15
Different tools
for each
audience

16. 16
For Each Audience: Different Banners - at last

17. 17
More smooth flow
More intuitive controls
New chart types
Chart cosmetic customizations
Visual Analytics for audiences with different, needs, skills, and backgrounds
For Each Audience: Lens Experience

18. 18
For missions where you need to visualize pattern of life of MOVING objects
For Each Audience: Maps: Tracks layer
Visualize routes and paths
Time-series location data (GPS,
sensor, etc.)
Built on Geo_Line agg
Why it matters

19. 19
For Each Audience: Maps Geo-fencing

20. 20

21. 21
For Each Audience: Searchable Snapshots extend data’s life
● Multi-year reports are now
available
● Built for Eco-Friendly Search
● Stop asking the question ‘which
data should I keep’ and start
asking the question ‘what new
questions can be answered with ALL
of the data’
Different Tiers for Different Requirements

22. 22

23. 23

24. 24
For Each Audience:
Frozen Tier - Technical Preview in 7.12
Directly search snapshots with the new frozen tier
Greatly increase the amount of data
searchable by Elasticsearch, with the same
amount of hardware
Powered by Searchable Snapshots (Cold and
Frozen Tiers)
Data cached locally for frequent searches
Ram : Data ratio of 11600, 1020x over our
Warm/Cold tiers
S3, Azure, Google Cloud, MinIO, HDFS, Shared
File System support
Enterprise | Tech Preview

25. 25

26. 26
3 Clicks to
Resolution
Directing you to
that needle in the
haystack

27. 27
3 Clicks:
Service Maps
ML/alerts guide your
troubleshooting
Who talks with who
Live generated APM maps, no need to manually
figure it out
Bubbled Up Alerts/ML
When there is an issue, see exactly which
components are acting differently
Server/Container Metrics
Know the exact system running the code
LOGGING METRICS APM
ADVANCED
SEARCH
SECURITY
ANALYTICS
DATA
SCIENCE
FOUNDATION
SPECIALIZATIONS
Pretty screenshot
10801080

28. APM
Correlations
Tune your thresholds
for “slow” or “bad”
Drill down right to
what’s causing the
problem

29. 3 Clicks: What’s Next for ML?
Integrations

30. 3 Clicks: ML - Solution First
ML features are focused on adding value to Solutions
Elastic Security
Elastic Observability
40+ curated ML anomaly
detection jobs
+ Pipeline of new content
APM
Uptime
Logs
Curated ML anomaly
detection jobs in API,
Uptime, Logs, Metrics
+ Pipeline of new content
Metrics

31. 31
One mission.
Many teams.
We all work better when we
work together ... but I still
want to control what others
see

32. One search bar
Our engineers focus on security first.
This is search only for what you are
allowed to see. Many sources for One
Mission
Now GA
New!
New!

33. 33
One Mission: Many clusters

34. 34
One Mission: Search and Replicate across regions
Holistic View of all Important Items
Combine data with that of multiple teams
Store copies of data for poor connectivity
moments
Share what others need to know and nothing else
ECE 2.9 -- Cross Cluster Search and Cross
Cluster Replication now works between
different ECE environments
ECE ECE
Deployment A Deployment B

35. 35
One mission. Cross Domain Operations is happening now
One dashboard for all teams working for
the same purpose
Our engineers have built all the tools in
Kibana to customize it for your mission

36. Take a quick spin
demo.elastic.co
Join the
Elastic
Community Learn via Elastic Public
Sector Meetup
https://www.meetup.com/Elastic-gove
rnment-and-education-user-group/
Connect on Public
Sector Slack:
https://elastic-uspubs
ec.slack.com/

37. Capture the Bug
Observability Game)
Capture the Flag
Security Game)
Virtual Community Events:

38. Virtual Hackathon
Show off your talents
• Judged by your Executives
• Give engineers time to
develop what they know is
needed
• Everyone grows as all teams
can utilize what was created

39. 39
Thank you
This presentation includes forward-looking
statements that are subject to risks and
uncertainties. Actual results may differ materially
as a result of various risk factors included in the
reports on the Forms 10-K, 10-Q, and 8-K, and in
other filings we make with the SEC from time to
time. Elastic undertakes no obligation to update
any of these forward-looking statements.