search

TheHive-Project / TheHive

TheHive: a Scalable, Open Source and Free Security Incident Response Platform
https://thehive-project.org
GNU Affero General Public License v3.0
3.28k stars 604 forks source link

[Question] Opensearch like index engine instead Elasticsearch #2468

Open romarito90 opened 11 months ago

romarito90 commented 11 months ago

Request Type

Hello my question is

Can I use Opensearch or any other tool like index engine instead Elasticsearch?

Work Environment

Question Answer
OS version (server) RedHat 8.8
Dedicated RAM 32 GB
vCPU 16
TheHive version / 4.1
Package Type From source
Database Cassandra
Index type Lucene
Attachments storage Local
Browser type & version Firefox

Question

Can I use Opensearch or any other tool like index engine instead Elasticsearch or Lucene?

I ask this question because if I want upgrade to Thehive5, It only uses Elasticsearch like index engine and Lucece is obsolete in Thehive5

Abhijeet-kadance commented 11 months ago

OpenSearch is a project that was created by elastic search search project as a open source project. It provides the same functionalities as of the elastic search and much more, like role-based access control for fields and asynchronous search and more fixed issues. Also if your opt for SQL database which you are not now, but it provide SQL Support. Although it uses Apache Leucine search library.

I would recommend to go for OpenSearch for more features or stay with Elastic search either

romarito90 commented 11 months ago

OpenSearch is a project that was created by elastic search search project as a open source project. It provides the same functionalities as of the elastic search and much more, like role-based access control for fields and asynchronous search and more fixed issues. Also if your opt for SQL database which you are not now, but it provide SQL Support. Although it uses Apache Leucine search library.

I would recommend to go for OpenSearch for more features or stay with Elastic search either

Hello @Abhijeet-kadance thank you so much for your answer, I'm going to try with opensearch instead Elasticsearch, because Elasticsearch will be soon expensive about their packages and Opensearch is open source and better.