Corporate · onsite · online training worldwide
contact@DevOpsSchool.com· +91 99057 40781·
> Search & Analytics Engine · DevOpsSchool Trainer

Elasticsearch Trainer

Private corporate batches, live online cohorts and 1-on-1 mentoring in distributed search and analytics — inverted indexes, mapping, the Query DSL and aggregations at scale — taught by a practitioner who runs it in production.

20 years across DevOps, SRE and Security · 10,000+ engineers trained · Trained teams at JPMorgan Chase, Verizon, Nokia and the World Bank

DeliveryOnline · Onsite · Hybrid
FormatsCorporate · 1-on-1 · Cohort
AgendaCustomisable
Batch size8–30 engineers
Engineers we've trained work at
JPMorgan ChaseBank of AmericaWells FargoVerizonNokiaWorld BankGE HealthcareVMwareOracleQualcommMercedes-BenzAirbusDatadogSplunkDeloitteInfosysWiproCapgemini
# who teaches it

Your Elasticsearch trainer

Rajesh Kumar

Principal DevOps Engineer & Architect

Early-bird MLOpsAIOps practitionerData platform operations20 years in productionPrincipal / architect roles10,000+ engineers trainedM.Tech BITS Pilani25+ certifications

Rajesh teaches Elasticsearch from the inverted index outward — how analysers, tokenizers and filters decide what is searchable, why a mapping is a one-way decision, and what BM25 relevance actually scores. Sessions work the whole path in the API rather than in a UI: index and document CRUD, bulk operations, query versus filter context, full-text and term-level queries, boolean compound queries and boosting, then metric, bucketing and multi-level nested aggregations. The operational half — shard sizing, cluster health and allocation, index lifecycle management, snapshot and restore, and reindexing without downtime — is covered against a running multi-node cluster.

Twenty years across DevOps, SRE and Security, in principal and architect roles at PayPay, SoftwareAG, ServiceNow, JDA Software, Intuit, Adobe and others. He has trained engineers at JPMorgan Chase, Verizon, Nokia, the World Bank, VMware, Oracle, Mercedes-Benz and Airbus — more than 10,000 people personally. He teaches what he runs, not what he reads.

One practitioner, not a bench

You are booked with a named engineer, and that is who turns up. Marketplaces and larger providers rotate whoever is free, so the person who sold you the agenda is rarely the person teaching it.

The same trainer is available for the next engagement, which matters when a team builds on what it learned last time.

18,000+certified learners
500+corporate batches delivered
50+countries served
100+certification programmes
# faculty

Who delivers Elasticsearch engagements

Your batch is assigned a named trainer before it starts, and that is who teaches it. See the full faculty.

How your Elasticsearch trainer is chosen

Engagements are matched on the tool, not the calendar. For Elasticsearch that means a trainer who has run it in production — distributed search and analytics — inverted indexes, mapping, the Query DSL and aggregations at scale — rather than whoever is free that week. You are told who is teaching before you commit, and that person is on the discovery call that shapes the agenda.

Where a batch is large enough to need a second trainer, the pairing is declared up front. The lead trainer stays accountable for the syllabus and the assessment either way.

Rajesh Kumar

Principal DevOps Engineer & Architect

India20 yrsLead trainer

Twenty years across DevOps, SRE and Security in principal and architect roles at PayPay, SoftwareAG, ServiceNow, JDA Software, Intuit, Adobe, IBM/Emptoris, Ness, MindTree and Accenture. He has trained more than 10,000 engineers personally, at organisations including JPMorgan Chase, Verizon, Nokia, the World Bank, VMware, Oracle, Mercedes-Benz and Airbus. He teaches what he runs, not what he reads.

Durga Prasad

IndiaInstructorCoach

Gaurav Aggarwal

IndiaInstructorCoach

Harsh Mehta

IndiaInstructorCoach

Kapil Gupta

IndiaInstructorCoach

Kunal Jain

IndiaInstructorCoach

Nikhil Gupta

IndiaInstructorCoach

Pranab Kumar

IndiaInstructorCoach

Rohit Ghatol

IndiaInstructorCoach

Amit Agarwal

IndiaInstructorCoach

Anil Kumar

IndiaInstructorCoach

Balachandran Anbalagan

IndiaInstructorCoach

# how to engage

Four ways to work with this trainer

Private corporate batch

Teams of 8–30

Custom agenda, your timezone, onsite or online, NDA-friendly.

Request a quote

1-on-1 mentoring

Individual engineers

A private instructor and a curriculum built around your goal.

₹99,999

Live & Interactive cohort

Individuals who want peers

Scheduled batch, max 8 to 10 hours of live instruction.

₹34,999

Self-paced video

Self-starters

Full LMS access — 20+ courses and 50+ tools included.

₹833/mo
# private batches

Private Elasticsearch training for your team

A private batch starts with a discovery call. We look at the stack you actually run — the CI system, the cloud, the constraints — and map the agenda onto it, so examples use your topology rather than a generic one.

Delivery is onsite at your premises, live online, or hybrid, scheduled around your release calendar rather than ours. Batches run 8 to 30 engineers.

Every attendee leaves with recordings, slides, lab repositories and a completion certificate. You receive an attendance and assessment report. Invoicing supports PO and GST.

Talk to us about a private Elasticsearch batch

What you provide vs what we bring

  • You: the room or the call, and the engineers
  • Us: trainer, agenda, labs, assessment, certificates
  • Labs: we guide your team through provisioning their own free-tier cloud environment — the skill goes with them
# the technology

What is Elasticsearch?

Elasticsearch is a distributed search and analytics engine built on Apache Lucene. Documents are indexed as JSON, and behind each field Lucene maintains an inverted index — a map from every analysed term to the documents that contain it. That structure is why a full-text query across hundreds of millions of documents returns in milliseconds, and it is also why the analysis chain that produces those terms is the most consequential design decision in any Elasticsearch deployment.

An index is divided into shards, each shard is an independent Lucene index, and shards are distributed and replicated across the nodes of a cluster. That gives horizontal scale and availability, but it also fixes the constraints engineers have to work within: primary shard count is set at creation, cluster state and shard allocation drive most operational incidents, and shard sizing is the difference between a fast cluster and one spending its life on garbage collection.

Queries are expressed in the JSON Query DSL. The critical distinction is between query context, which scores documents by relevance using BM25, and filter context, which answers a yes-or-no question and is cacheable. On top of search sits the aggregation framework — metric aggregations that compute, bucket aggregations that group, and nested combinations of both — which turns Elasticsearch into an analytics engine over the same data it searches. Elasticsearch is the storage and query layer of the Elastic Stack; Logstash and Beats feed it, and Kibana renders it.

Why this skill matters now

Search is no longer a feature bolted onto an application; it is how people expect to interact with any large body of data. Product catalogues, document stores, log platforms, security data lakes and observability back ends all end up needing the same capability — full-text relevance, structured filtering and aggregation over the same corpus — and Elasticsearch is the engine most organisations reach for.

That breadth is exactly why the skill is in demand and why superficial familiarity is not enough. The same cluster serves an application team that cares about relevance tuning and an operations team that cares about ingest rate and shard count, and both sets of decisions land on the same mapping. Teams that treat Elasticsearch as a document database discover the cost late: mappings that cannot be changed without reindexing, shards sized by accident, and queries that scored badly because the analyser was never considered.

The operational half is where organisations hire. Understanding cluster state, allocation, index lifecycle management, snapshot and restore, and how to size shards for a stated retention window is what separates an Elasticsearch deployment that grows quietly from one that produces an incident every quarter.

Elasticsearch training
# outcomes

What your team can do afterwards

Explain how search works underneath — inverted indexes, Lucene segments, analysis chains and BM25 relevance scoring
Run and inspect a cluster: node roles, shards and replicas, cluster health, allocation explain and the cat APIs
Perform full document lifecycle operations through the REST API, including partial updates, versioning and bulk indexing from files
Design mappings deliberately — field types, multi-fields, dynamic templates — and know which changes require a reindex
Configure analysis: built-in and custom analysers, tokenizers, character and token filters, and test them with the _analyze API
Write Query DSL fluently across query and filter context: match, match_phrase, multi_match, term, range, bool, and boosting
Build metric, bucketing and multi-level nested aggregations, including cardinality, filters and pipeline aggregations
Operate a cluster in production: shard sizing, index lifecycle management, snapshot and restore, reindex, and performance tuning
# curriculum

9 modules. Live demos in a real lab, not slides.

01How search actually worksLive & Interactive5 hrs · 2 assignments · 1 capstone

The theory that makes everything afterwards obvious rather than magical. A brief history of search, what a search engine has to do that a database does not, the inverted index as a data structure, and Lucene as the open-source library underneath. Then where Elasticsearch fits, and the workloads for which it is the wrong store.

Topics: A brief history of search and what problem it solves · How search works: tokenisation, terms and postings · The inverted index as a data structure · Lucene: segments, immutability and merging · Introducing Elasticsearch: what it adds over Lucene · Elasticsearch compared with relational databases and document stores · The Elastic Stack: Elasticsearch, Logstash, Beats, Kibana · Where Elasticsearch is the wrong choice

  • Assignments: (1) Build a tiny inverted index by hand from five sentences; (2) Describe one workload Elasticsearch suits and one it does not, with reasons
  • Capstone: Produce an architecture note placing Elasticsearch against an existing data store for a stated use case
02Installing, running and inspecting a clusterLive & Interactive5 hrs · 2 assignments · 1 capstone

A cluster you can see inside. Installation from archive, package and container, the configuration files that matter, node roles and discovery, then the diagnostic surface: cluster health, the cat APIs, node stats, and what green, yellow and red actually mean.

Topics: Installing and setting up Elasticsearch: archive, package, Docker · elasticsearch.yml, jvm.options and heap sizing · Node roles: master, data, ingest, coordinating · Cluster formation, discovery and quorum · Basic concepts: cluster, node, index, document, shard, replica · Monitoring the health of the cluster: _cluster/health and its fields · The cat APIs for human-readable diagnostics · Introducing cURL and the REST API conventions · Reading node stats and identifying pressure

  • Assignments: (1) Stand up a three-node cluster and force it into yellow, then green; (2) Use the cat APIs to answer five questions about shard placement
  • Capstone: Build the multi-node lab cluster you keep for the rest of the course, configured from files
03Indices, documents and the CRUD pathLive & Interactive5 hrs · 2 assignments · 1 capstone

The document lifecycle in full. Creating indices with settings, adding documents with and without explicit IDs, retrieving whole and partial documents with source filtering, full and partial updates, the versioning and optimistic-concurrency model, deletion, and bulk operations including loading a large JSON file.

Topics: Creating indices: settings, shard and replica counts · Adding documents to an index; auto-generated vs explicit IDs · Retrieving whole and partial documents; _source filtering · Updating whole documents and partial updates via _update · Scripted updates and upserts · Versioning, sequence numbers and optimistic concurrency control · Deleting documents and deleting indices · Delete-by-query and update-by-query · Performing bulk operations on documents · Bulk indexing from a JSON file and handling partial failures · Index aliases and why you should always query one

  • Assignments: (1) Bulk index a large dataset and handle the failed items correctly; (2) Use aliases to swap a live index without changing any client
  • Capstone: Load a real dataset into a well-named index behind an alias, with a documented reindex path
04Mapping and analysisLive & Interactive5 hrs · 2 assignments · 1 capstone

The two decisions you cannot easily undo. Mapping: dynamic versus explicit, field data types, text versus keyword and the multi-field pattern, dynamic templates, and which changes force a reindex. Analysis: the analyser chain of character filters, tokenizer and token filters, the built-in analysers, custom analysers, and testing everything with _analyze.

Topics: Dynamic mapping and its dangers · Explicit mappings and field data types · text vs keyword, and the multi-field pattern · Numeric, date, boolean, object and nested types · Dynamic templates and index templates · Which mapping changes require a reindex · The analysis chain: character filters, tokenizer, token filters · Built-in analysers: standard, simple, whitespace, keyword, language analysers · Custom analysers: stemming, stopwords, synonyms, ASCII folding · Testing with the _analyze API · search_analyzer vs analyzer, and why they can differ · Normalizers for keyword fields

  • Assignments: (1) Build a custom analyser with synonyms and stemming and prove it with _analyze; (2) Diagnose a query returning nothing because of an analyser mismatch
  • Capstone: Design and apply an explicit mapping plus custom analysis for a real dataset, and justify every field type
05Searching with the Query DSLLive & Interactive5 hrs · 2 assignments · 1 capstone

The query language in depth. URI search versus request-body search, the crucial split between query context and filter context, full-text queries, term-level queries, and how relevance is actually computed. Then compound queries with bool, boosting, and the explain API for when a result ranks somewhere surprising.

Topics: Search using query parameters vs the request body · Query context and filter context: scoring versus filtering, and caching · Setting up realistic data for query practice · Source filtering, pagination, sorting and search_after · Full-text queries: match, match_phrase, multi_match, query_string · Relevance: TF/IDF and the BM25 algorithm · Queries with common terms, fuzziness and minimum_should_match · Term-level queries: term, terms, range, exists, prefix, wildcard · Boolean compound queries: must, should, filter, must_not · The boost parameter and function_score · Searching in the filter context for structured criteria · The _explain and _validate APIs · Highlighting and suggesters

  • Assignments: (1) Answer ten search requirements in the Query DSL against real data; (2) Use _explain to diagnose why the wrong document ranks first
  • Capstone: Build a complete search implementation for a dataset, with relevance tuning defended by explain output
06AggregationsLive & Interactive5 hrs · 2 assignments · 1 capstone

Elasticsearch as an analytics engine. The aggregation families and how they compose, metric aggregations for computation, the cardinality aggregation and its approximation trade-off, bucketing aggregations for grouping, multi-level nesting, and the filter and filters aggregations for slicing one result set several ways at once.

Topics: Types of aggregation: metric, bucket, pipeline, matrix · Implementing metric aggregations: avg, sum, min, max, stats, extended_stats · Percentiles and percentile ranks · The cardinality aggregation and HyperLogLog approximation · Bucketing aggregations: terms, range, date_histogram, histogram · Terms aggregation accuracy, size and doc_count_error · Multi-level nested aggregations · The filter and filters bucketing aggregations · Aggregations on nested and parent-child documents · Pipeline aggregations: derivative, moving_avg, bucket_selector · Combining queries and aggregations in one request · Aggregation performance and memory pressure

  • Assignments: (1) Answer five analytical questions with nested aggregations in a single request; (2) Demonstrate terms aggregation inaccuracy and then correct it
  • Capstone: Build an analytics response that powers a full report from one aggregation request
07Sharding, cluster mechanics and data modellingLive & Interactive5 hrs · 2 assignments · 1 capstone

How the distributed part behaves, and how document design interacts with it. Shard allocation and routing, what happens on a search request across shards, the coordinating node's role, replicas and read scaling — then modelling choices: flat documents, nested types, join fields, denormalisation, and the time-series index pattern.

Topics: Shards, replicas and how a search is executed across them · Routing: default hashing and custom routing keys · The coordinating node, query phase and fetch phase · Shard sizing: rules of thumb and how to measure your own · Allocation, rebalancing and allocation awareness · Diagnosing unassigned shards with _cluster/allocation/explain · Data modelling: denormalisation versus nested versus join fields · Nested documents and their query cost · Time-based indices, data streams and rollover · Index templates and component templates · Choosing a primary shard count you will not regret

  • Assignments: (1) Diagnose and resolve a set of deliberately unassigned shards; (2) Model one relational dataset three ways and compare query cost
  • Capstone: Design an index and shard strategy for a stated volume, growth rate and retention window
08Operating a production clusterLive & Interactive5 hrs · 2 assignments · 1 capstone

Keeping it healthy over time. Index lifecycle management across hot, warm, cold and delete phases, snapshot and restore to object storage, reindexing without downtime, rolling upgrades, backup strategy, security basics, and the performance tuning levers for both indexing and search.

Topics: Index lifecycle management: hot, warm, cold, frozen, delete · Rollover, shrink and force-merge · Snapshot and restore: repositories, policies and partial restores · Reindex API and zero-downtime reindexing behind an alias · Rolling upgrades and version compatibility · Security: TLS, authentication, role-based access and field-level security · Indexing performance: bulk sizing, refresh interval, translog settings · Search performance: filters, caching, doc values and profiling with _profile · JVM heap, garbage collection and circuit breakers · Monitoring the cluster and what to alert on · Common production incidents and their signatures

  • Assignments: (1) Configure an ILM policy for a stated retention requirement and prove a rollover; (2) Reindex a live index behind an alias with no client changes
  • Capstone: Deliver an operational runbook for a cluster: ILM, snapshots, upgrade path, alerts and incident signatures
09Ingest, integration and the wider stackLive & Interactive5 hrs · 2 assignments · 1 capstone

How data gets in, and what sits around Elasticsearch. Ingest pipelines and processors inside the cluster, Logstash and Beats as external ingest paths, the language clients, and the Elastic Stack context — including where Kibana takes over as the query and visualisation surface, and how OpenSearch diverged.

Topics: Ingest pipelines: processors, simulate API and on-failure handling · Ingest node versus Logstash: choosing where to transform · Logstash: inputs, filters and outputs at a working level · Beats: Filebeat, Metricbeat and the module system · Language clients: Java, Python, JavaScript, Go · Bulk helpers and client-side retry behaviour · Elasticsearch and Kibana: where the boundary sits · Elasticsearch, OpenSearch and the fork: what actually differs · Runtime fields and schema-on-read · Cross-cluster search and replication basics

  • Assignments: (1) Write an ingest pipeline with grok, date and on-failure processors and test it with _simulate; (2) Load the same data via Logstash and via an ingest pipeline and compare
  • Capstone: Deliver an end-to-end ingest path from raw source to searchable, mapped documents with error handling

Need this mapped to your stack?

We rebuild the agenda around the tools you actually run.

Request a custom agenda
# hands-on

Labs and capstones your engineers actually build

LAB · ANALYSIS

Why your search returns nothing

Diagnose four searches that fail for analyser reasons — case, stemming, synonyms and keyword versus text — then build a custom analyser that fixes all four.

analysismapping_analyze
LAB · QUERY DSL

Ten requirements, one query language

Translate ten written search requirements into Query DSL using query and filter context correctly, then use _explain to justify the top result of each.

query dslboolrelevance
LAB · AGGREGATIONS

A whole report in one request

Build multi-level nested aggregations with filters, cardinality and date_histogram that answer five analytical questions in a single call.

aggregationscardinalitynesting
LAB · SHARDS

Unassigned shards and how to read them

Break allocation deliberately, then use cluster health, cat APIs and allocation explain to diagnose and resolve every unassigned shard.

shardsallocationcluster health
LAB · LIFECYCLE

Reindex a live index with nobody noticing

Change a mapping that cannot be changed in place: build the new index, reindex behind an alias, and cut over with no client configuration change.

reindexaliasesilm
CAPSTONE · SEARCH APPLICATION

Design a searchable corpus end to end

Take a raw dataset through ingest pipeline, explicit mapping, custom analysis, tuned relevance and an aggregation-driven report, with an ILM and snapshot policy.

capstonemappingrelevance
# ecosystem

The tools Elasticsearch sits next to

Kibana
Logstash
Beats
Apache Lucene
OpenSearch
Kafka
Fluentd
Docker
Kubernetes
Grafana
Java
AWS

Who this is for

  • Backend developers adding search or relevance to an application
  • Platform and SRE teams operating Elasticsearch as shared infrastructure
  • Data engineers building ingest pipelines into an Elastic Stack
  • DevOps engineers running the storage layer under a logging or observability platform
  • Security engineers whose detection data lives in Elasticsearch indices
  • Architects choosing between Elasticsearch, OpenSearch and a database with search bolted on

Pre-requisites

  • Comfortable on a Linux command line — services, ports, files, memory and disk basics
  • Able to read and write JSON, and to use curl or an equivalent HTTP client
  • Understanding of HTTP methods and status codes
  • Some database or query-language experience, in any technology
  • A host or VM with at least 8 GB of RAM, or a free-tier cloud account, for a multi-node lab
# pricing

Straightforward pricing

Every plan includes 1 year of full LMS access — not just this course, the entire DevOpsSchool LMS: 20+ courses, 50+ tools, videos, quizzes, assignments and projects.

Self-paced video

₹833/mo

Billed yearly at ₹9,996

Enroll now

1-on-1 mentorship

₹99,999

Full program, private instructor

Enroll 1-on-1

Corporate / private batch

8–30 engineers · custom agenda · onsite or online · PO and GST invoicing

Get a custom quote

Refunds. If we cancel or postpone a cohort, you get a full refund within 15 days. There is no money-back guarantee otherwise.

Terms. Course material remains licensed to the attendee. Read the terms.

Your data. We don't share it with third parties. Privacy policy.

Every attendee gets a verifiable certificate

  • Issued per attendee on completion
  • Verifiable at devopsschool.com/certificates
  • Hard copy available on request
  • Corporate batches receive an attendance and assessment report
DevOpsSchool

Elasticsearch Training

Certificate of completion

# feedback

What engineers say

4.4 / 5 from 26 reviews on Trustpilot.

★★★★★
My experience with the AIOps training was positive. The course covered important topics in a structured way, and Rajesh Kumar explained the concepts patiently. I found the practical aspects particularly helpful because they made the technical content easier to understand.
AARTI KUMARI · Trustpilot
★★★★★
I was looking to improve my understanding of AIOps, and this training helped me achieve that goal. Rajesh Kumar explained the subject in a structured and practical manner. The sessions on different AIOps concepts were informative.
Sonali Tiwari · Trustpilot
★★★★★
I recently did a SRE Session with Rajesh Kumar from DevOps School and the session was great. Right from 1st day till day 15, we had a very interactive session. Rajesh clarified our doubts and the tool demos were excellent without any hiccups. He simplified the concepts while sticking to the content with a fine balance between theory and practice. Am convinced he is one of the best trainers for SRE & DevOps concepts.
chandrasekaran j · Trustpilot
★★★★★
The Rundeck developer session was excellent and highly engaging. I appreciated how well the session was structured, with the theoretical concepts explained clearly and in simple terms. What stood out most to me was the demo — it was both informative and enjoyable. I especially liked how Rajesh walked us through not only the happy path but also the sad path, showcasing common issues and sharing practical troubleshooting tips.
Raimy Roy · Trustpilot
★★★★★
Rajesh's experience and knowledge are exceptional and we learnt invaluable practical knowledge which we can apply in our production environment. Incredibly friendly and gave us a fantastic insight both in-depth and at a high level of the Rundeck product.
Fire Titan · Trustpilot
★★★★★
Great learning experience from a very knowledgeable instructor with well-prepared course notes. The lab exercises on AWS instance work well to learn the hands-on side of the course.
Ando Gg · Trustpilot
# comparison

Why a named practitioner beats a marketplace listing

What mattersYouTube + blogsGeneric online courseFreelance marketplaceDevOpsSchool
Named practitionerNoRarelyVaries per bookingYes — same trainer each time
Production experienceUnknownUnknownUnverified20 years, named employers
Custom agendaNoNoSometimesBuilt from your stack
Onsite deliveryNoNoSometimesYes
Lab environmentNoneSandbox that expiresVariesYour own cloud — skill goes with you
AssessmentNoneQuizRarelyAssignments + capstone per module
Per-attendee certificatesNoSometimesRarelyYes
Corporate invoicingNoLimitedVariesPO and GST
Post-training supportNoneForum, time-limitedNoneLifetime forum access
# questions

Frequently asked

Can the agenda be customised for our stack?
Yes — that is the normal case for a private batch. We start with a discovery call, look at whether your use case is application search, logging or analytics, and rebuild the module list around it. Examples then use your data and your mappings.
Do you deliver onsite?
Yes. Private batches run onsite at your premises, live online, or hybrid. You provide the room and the engineers; we bring the trainer, agenda, labs, assessment and certificates.
What lab environment do we need?
Attendees provision their own environment — free-tier AWS, Azure or GCP, or local VMs with at least 8 GB of RAM — and we walk them through it. We deliberately do not hand out temporary sandboxes, because the environment they build is the one they keep.
How is this different from your Kibana course?
This course is about the engine: indexing, mapping, analysis, the Query DSL, aggregations and cluster operations, worked through the REST API. The Kibana course is about the visualisation and query experience on top — Discover, KQL, Lens, dashboards and alerting. Teams that own the cluster take this one.
How long does a private Elasticsearch batch take?
Typically four days. Search fundamentals, CRUD, mapping and analysis, and the Query DSL fit in three; adding aggregations depth, shard strategy, production operations and ingest makes four.
What size are batches?
Private corporate batches run 8 to 30 engineers. Public Live & Interactive cohorts are capped at 10 so everyone gets time with the trainer.
Do attendees get a certificate?
Yes — every attendee receives a completion certificate, verifiable at devopsschool.com/certificates. Corporate batches also receive an attendance and assessment report.
Does this apply to OpenSearch as well?
Largely yes. The inverted index, mapping, analysis, Query DSL and aggregation material is common to both, and we call out the divergences explicitly — licensing, security features, ILM naming and the newer Elastic-only capabilities.
We use Elasticsearch only as a log store. Is this relevant?
Very. Log platforms are where shard sizing, index lifecycle management, mapping explosions and ingest pipeline design cause the most damage, and all four are covered directly. We can weight the agenda toward time-series indices and away from relevance tuning.
Do you cover Logstash and Beats?
At a working level in the final module — enough to build an ingest path and choose between ingest pipelines, Logstash and Beats processors. A full Logstash curriculum, including plugin development and pipeline scaling, is a separate track.
What is your refund position?
If we cancel or postpone a cohort, you receive a full refund within 15 days. There is no general money-back guarantee, and GST and gateway fees are not refunded.

Still deciding?

Tell us the team, the stack and the timeline. You'll get a straight answer, not a sales sequence.

Talk to an advisor
# ready when you are

Book a Elasticsearch trainer — or ask a question first.

  • No spam, no drip sequence
  • Syllabus in 60 seconds
  • A human reply within one business day

Prefer to call or email?

More ways to reach us on the contact page.

Talk to an advisorRequest a quote