Built-in SSO for clusters
Your ClusterNest account now signs you in to your OpenSearch and Prometheus clusters. There is no identity provider to set up and no password to hand out, and access follows who is in your organization.
Read itBlog
Platform releases and product announcements, newest first.
Your ClusterNest account now signs you in to your OpenSearch and Prometheus clusters. There is no identity provider to set up and no password to hand out, and access follows who is in your organization.
Read itThe documentation now lives on the website, so the product pages, the blog and the reference are in one place. And the console and the sign-in portal have been rebuilt to match: the same typeface, the same colors, the same flat, quiet look in light and dark.
Read itWe ran OpenSearch Benchmark against a three-node ClusterNest Standard cluster and the matching Amazon OpenSearch Service configuration, from a test machine inside AWS's own region. We measured bulk indexing, queries and both together, from a single client up to 64 in parallel, and priced each cluster at its list price.
Read itOpenSearch 3.9 is live on ClusterNest, with a native neural sparse search engine, leaner vector storage, and new observability tools in Dashboards.
Read itLogging from Kubernetes into OpenSearch often starts with a username and password stored in a Secret. That is straightforward to set up, but the credential spreads across nodes and clusters and almost never gets rotated. Meanwhile, Kubernetes can issue short-lived, signed identities to pods, and OpenSearch can validate them. This article walks through connecting those pieces, then solving the less obvious problem of keeping clusters isolated.
Read itManaged OpenSearch now trusts several identity providers at once. Employees, contractors, the company you just acquired and your CI pipelines all sign in through the system that already governs them, and the secrets behind it never leave the vault. SSO is still free on every tier.
Read itManaged Prometheus is out of beta, and it's a different service from the one that went in. Every cluster is distributed and highly available, alerting is built in, remote write 2.0 cut the egress of two of our own clusters by about two thirds, and your workloads can push metrics without a single static credential.
Read itClusterNest now runs an MCP connector, so a coding agent can create clusters, rotate credentials, manage organizations and read invoices directly. Paste one URL into your client, log in through the browser, and it works inside your own account.
Read itclusternest.com has been rebuilt, and the blog now runs on it rather than on the documentation site. Every post kept its slug, and the old addresses redirect: posts, tag pages and both feeds.
Read itOpenSearch 3.8 is live on ClusterNest, with faster vector search, a broader set of AI agent integrations, and new tools for exploring logs without leaving Dashboards.
Read itWe've shipped two updates that make it easier to automate ClusterNest end-to-end: a simpler way to authenticate against the API programmatically, and a Terraform provider release that's faster on long applies and can now manage organizations directly.
Read itOpenSearch 3.7 just landed on ClusterNest, with a strong focus on observability and query safety.
Read itWe sent 494,175 numbered log lines through Fluent Bit and Vector into OpenSearch and counted every one that arrived. With stock settings, one shipper lost 62 percent of a busy pod's logs and the other lost 85 percent, both without logging a single error. Five defaults were behind it, and each one is a one-line fix.
Read itBig milestone: OpenSearch 3.6 is live on ClusterNest, and it's the project's first Long-Term Support release, with 18+ months of guaranteed support, so it's a solid pick for clusters you don't want to babysit through every minor upgrade.
Read itWe shipped exactly 100 MB of logs into OpenSearch, once with Fluent Bit and once with Vector, and measured every byte that landed on disk. One copy came to about 1.5 times the raw size, the replica doubled that, and the search index, not the logs, turned out to be the biggest part of the bill.
Read itOpenSearch 3.3 and 3.4 are selectable on ClusterNest clusters. In the same change, OpenSearch 2.x is deprecated here: still running, no longer offered on new clusters.
Read itMetrics on the same terms as logs. Managed Prometheus is open in beta: a remote write endpoint and PromQL over a cluster you size by tier and node count, priced the same way as our OpenSearch service.
Read itOpenSearch 3.2 can be selected on new and existing clusters. The console handles it, and Terraform provider 1.1.2 adds it to the version list.
Read itThe ClusterNest Console has been rebuilt from the ground up. Dark mode throughout, one visual language from the landing page to the cluster list, and the settings that used to be Terraform-only are now in the interface.
Read itOpenSearch clusters can now snapshot to an S3 bucket you control, on AWS or any S3-compatible store. Authentication is an IAM role or static keys, and the copy is yours whatever happens to your account with us.
Read itOpenSearch 3.0 and 3.1 can now be selected on ClusterNest clusters. It is the first major release since 2.0, rebased on Lucene 10 and requiring Java 21, so it is a version worth reading the notes for before you move.
Read itAdvanced tier OpenSearch clusters are open to everyone. Eight vCPU, 64 GiB and 2 TB of NVMe per node, launched from the console with no quota request and no waiting for an approval.
Read itOpenSearch clusters can now delegate authentication to your identity provider over SAML or OIDC, so access follows the directory you already run. It costs nothing extra, on every tier.
Read itClusters can now be declared in Terraform rather than clicked into existence. The ClusterNest provider is out of preview: create, update and destroy OpenSearch clusters from the same repository as the rest of your infrastructure.
Read itv2 of the ClusterNest API publishes a full OpenAPI schema, so you can generate a client rather than write one. It also brings its own authentication: two-factor, passkeys and app passwords. The console already runs on it.
Read itTwo years after launching managed OpenSearch, we are closing the Elasticsearch service to new clusters. Existing customers keep running, and we will come to you about the migration rather than the other way round.
Read itIn 2013 you set up centralised logging by installing Elasticsearch, Logstash and Kibana, and the reason that was a good decision is that it was not really a decision. Ten years on, every letter has multiple credible answers, the licence under the first one has moved, and the integration work is yours. Here is what happened, what it costs, and the four questions I now use to pick a stack.
Read itThe service we said we were building in July is open. Managed OpenSearch clusters, priced by tier and node count like our Elasticsearch service, with OpenSearch Dashboards included and a migration we run with you.
Read itOpenSearch has reached a stable release. We said in January that the answer to the Elasticsearch relicensing was an engine that is genuinely open with more than one vendor behind it, and this is the one. A managed service is in build.
Read itElastic has moved Elasticsearch and Kibana off Apache 2.0 and onto the SSPL and its own licence. The source is still readable. It is no longer open source, and that changes what any managed service can honestly promise.
Read itClusterNest is open. Managed Elasticsearch clusters, sized by tier and node count, with provisioning, upgrades, backups and monitoring on us. You pick two numbers and those two numbers are the bill.
Read it