 From around the globe, it's theCUBE with digital coverage of AWS re-invent 2020. Special coverage sponsored by AWS Global Partner Network. Hello and welcome to theCUBE virtual with our special coverage of AWS re-invent 2020 with additional special coverage of APN partner experience. We are theCUBE virtual and I'm your host, Justin Warren and today I'm joined by Angelos Kotas who is vice president of product marketing at Elastic. And he comes to us from San Francisco. Angelos, welcome to theCUBE. Thank you, Justin, a pleasure to join you. Great to have you here. Now I've been a big fan of Elastic for a while, have used your products in a variety of circumstances. You're big partners of AWS and have seen quite a bit of change over the last couple of years. We were talking just before we came on air. Maybe you could talk us through what Elastic is doing with AWS and a little bit about those changes that you've seen over the last little period. Sounds good, Justin. So first of all, many people know Elastic as the makers of Elastic Search, one of the most popular open source search engines. And along with Elastic Search, we have Kibana and Beats and Logstash and many people know us as the Elk stack, right? And so clearly we have roots in the open source community and people have used us for custom applications for years and years. One of the key changes over the last few years is that we realized that many customers were doing some of the same things with Elastic. So we said, what if we really focus on end-to-end experiences for our three core use cases? And so we chose three use cases and built solutions around them. One is Enterprise Search, right? Which is how do you find information on your website, in your application or in your workspace? The second is Observability. So think about software development, software in every industry, what about DevOps, what about performance, what about consistency? And last but not least, especially with some of the current transitions in digital transformation, think about security. Think about your network security, your endpoint security and how you have visibility across your entire IT ecosystem. So we've chosen those three solution areas and put significant engineering into building out that experience. How quickly can we deliver value? How pre-built can the configuration be, the integrations be, the workflow, the reporting and the dashboards around those use cases? The last piece, which is very relevant for a reinvent is the transition to cloud, right? So we still offer downloadable software and many of our customers and users download the Elastic stack and deploy it on-prem in hybrid cloud environments. But one of the fastest growing deployment models is in the public cloud. And of course, Elastic Cloud on AWS is one of our major rough market. Happy to meet many of our customers where they are, which is on AWS. And it's great to be able to have that choice, I think, that people can download the software, try and get comfortable with it. But then people often find that actually running software yourself, there's quite a lot of work involved in doing that. I know that I've experienced that myself, just little things like maintenance and so on. So it sounds like you're actually taking care of a lot of that for customers if they move to the cloud service. But is there anything else special about the cloud service that customers might not be that aware of? Well, I mean, choice is a big part of it. And so it's not just, do I choose cloud? It's wearing cloud. So we've actually, we now run Elastic Cloud in over 40 regions around the world. So we can be close to you in terms of latency and in terms of performance, in terms of data sovereignty, we can be local to your environment. The other aspect, it's not just how we simplify deploying Elastic, clearly we architect it, we install it, deploy it and upgrade it for you. But also we have focused quite a bit on integrating cloud data sources. So with AWS as an example, we look at all of the applications and data sources that you host on AWS. And we think about how do we get those data streams? How do we get that data directly integrated into Elastic? One final piece actually, which I forget sometimes, it's not the technical side, it's the business side, is the commercial integration, right? So we are very happy to be listed on the AWS marketplace. We've made it easy for you to find, deploy and actually build through your AWS commercial agreements via the marketplace integration. Right, so easy to get started and to start using it. And search is certainly something that Elastic is famous for. But you mentioned observability there, bit of a question I have around observability. Is that just a fancy way of saying monitoring? There seems to be this buzzword around the place. So what do you mean when you say observability? So one of the key foundational principles of the Elastic observability solution is that you want a unified database, a unified place to store all of that data. So it is stretching across logs, metrics, application traces. It's bringing together a common platform that lets you look at different aspects of observability. So whether you're doing end-to-end application traces or whether you're just collecting infrastructure logs and looking at performance metrics, it's kind of across the board, even looking at things in our most recent release that just came out last week, expanding on user experience monitoring and synthetics so you can optimize web interactions and web experiences, for example. Right, okay. So there's a bunch of different types of data that are involved there. I know traditionally people would silo those off into a specific customized thing just for that particular type of workload. What is it about Elastic that means that you can put all of this in one place? Yeah, you know, one of the early catchphrases for what does Elastic do? What do we focus on? The value we deliver is speed, scale and relevance. And so one of the things that is famous about the Elastic way of doing things is the way in which we index data on ingest and so that you can get search queries that return within milliseconds. And so that performance characteristics. A second one is scale. And this is actually really key, not just for observability, but right next to observability, you get security as well. We like to say, if you're gonna observe, you might as well protect as well. So when you expand to that universe, you have not just hundreds of devices, you might have thousands or tens of thousands of devices that you are ingesting information whether it's operational data, whether it's security data. So scale becomes extremely significant. How can you scale horizontally and vertically and maintain that performance even when you are at a Fortune 500 scale infrastructure? The last piece is relevance. And so, you know, that data, it's not just about knowing what to look for, it's about using things like machine learning and anomaly detection to uncover unusual patterns of behavior and proactively alerting and making that visible through notifications and through alerts that can actually integrate not just with your elastic operations, but actually with third party software. Maybe you wanna trigger a service now ticket or a slack integration. And all of that is part of the elastic platform as well. Right, okay. So by putting everything kind of in one place that is around what you're talking about. So we have enterprise searching there to be able to find things. We're collecting all of the data that we need to find things. And then you touched on security at the beginning and we're starting to talk around security there. So I'm keen to move on to that. By looking at all of these different, these signals, we can hopefully then manage some of the security which I know is very much front of mind for everyone over the last year. Cyber security has very much come to the forefront of everyone's thinking. Absolutely. And, you know, we've been on the network side of security for some time. So we've had our SIM solution, you know, security information event monitoring, but we made a very strategic acquisition a little over a year ago. We saw that a critical piece of visibility is also the endpoint. And so we partnered with Endgame and eventually we acquired Endgame to create end-to-end visibility on that security. So it is being able to connect, you know, the path of data from your servers and network devices all the way to the endpoints. And an example of the power of this unified architecture is the new elastic agent that we introduced in beta a couple of months ago. We said, what if we had a single deployment that both does endpoint protection and does malware scanning of your endpoint devices while also ingesting data into your observability systems? And so that's kind of the power of the platform, the ability to use common infrastructure, common integrations so that every use case you adopt on top of elastic, it sort of multiplies the value you're getting from using elastic as an infrastructure player. All right. So you're combining a couple of different things into the one tool that you can use. I know Sizao who I've spoken to are quite concerned about the proliferation of tools that they have in their environment. It seems that they've bought lots of different things but a lot of them are kind of sitting in a drawer not really being used. And partly it's just we have so many different ways of dealing with these issues. None of it's really flushed out, sorry has been fully fleshed out that we definitely know this is the one true way to solve this. So what are you hearing from customers as they start to use these security functions? What are they telling you about the way that they're managing security in their environments? Well, you know, we think about a few different personas in the security market, right? We think about threat hunters for example who are looking to identify threats. We're looking at the operations team that do the cleanup, that do the, you know the resolution of security threats. And we also, so there's two competing terms in the security market, we have security operations. In the observability world, we have DevOps, right? And developer, you know, the continuum of developer and deployment into a DevOps role. And so we're starting to see this concept of DevSecOps, right? What if there is a unified set? And it's not all things to all people and that's an important thing, right? We're not trying to be your single security vendor for all IT security needs, but instead we're saying what if you had a security operations analyst, a threat hunter, an executive, a CISO who's looking for, you know, an overall level of threat or compliance to policy? And you can bring those experiences together through the elastic security solution. Right, so it sounds like you're trying to allow people to work in the way that they need to, providing them the tools that suit their particular circumstances. That's right, that's right. And I mean, in terms of how do you define success, you look at metrics like mean time to resolution, you know, can we reduce the mean time to resolution? Or you look at log collection and how much more efficiently can you collect logs? You look at asset monitoring and what percentage of your IT infrastructure you actually have unified visibility into, you know, we have one great cloud customer, OLX Group, they are a popular online marketplace, you know, and they quoted to us that they had a 1900% increase in log collection, right, in terms of scope of what they are collecting logs on. They reduced that MTTR by 30% for security incidents. So dramatically streamlined and shortened the exposure. And then they increased asset monitoring by 35% across cloud as well as on-prem. And I think that's the other piece is that, you know, whether you deploy your security in the cloud or on-prem, you are looking to secure your hybrid environment. And so being able to take data feeds from your SaaS partners, from your infrastructure running on AWS, as well as from those endpoint devices. Well, it sounds like there's plenty of scope of interesting things for people to come and have a look at at Elastic. So, Angelos, thank you so much for joining us here. Please thank you to my guest, Angelos Cottes, Vice President of Product Marketing at Elastic. You've been watching theCUBE virtual and our coverage of AWS re-invent 2020 with special coverage of APN partner experience. Make sure you check out all our coverage on your desktop, laptop or on your phone, wherever you are. I've been your host, Justin Warren, and I look forward to seeing you again soon.