Angelos Kottas, Elastic | AWS re:Invent 2020 Partner Network Day
>> Narrator: From around the globe it's theCUBE, with digital coverage of AWS reinvent 2020 special coverage sponsored by AWS global partner network. >> Hello, and welcome to theCUBE virtual with our special coverage of AWS reinvent 2020 with additional special coverage of APN partner experience. We are theCUBE virtual and I'm your host, Justin Warren. And today I'm joined by Angelos Kottas who is vice president of product marketing at elastic and he comes to us from San Francisco. Angelos , welcome to theCUBE. >> Thank you, Justin. A pleasure to join you. >> Great to have you here. Now. I've been a big fan of elastic for a while have used your products in a variety of circumstances? You're big partners of AWS and have seen quite a bit of change over the last couple of years. We were talking just before we came on air. Maybe you could talk us through what elastic is doing with AWS and a little bit about those changes that you've seen over the last >> Absolutely one period. >> Sounds good Justin. So first of all many people know elastic as the makers of elastic search. One of the most popular open source of search engines and along with elastic search we have Kibana and beats and Logstash and many people know us as the Elk Stack, right? And so clearly we have roots in the open source community and people have used us for custom applications for years and years. One of the key changes over the last few years is that we've realized that many customers were doing some of the same things with elastic. So we said, what if we really focus on end to end experiences for our three core use cases? And so we chose three use cases and built solutions around them. What is enterprise search, right? Which is how do you find information on your website in your application or in your workspace? The second is observability. So think about software development software in every industry. What about dev ops? What about performance? What about consistency and last but not least, especially you know, with some of the current transitions in digital transformation, think about security. Think about your network security, your endpoint security and how you have visibility across your entire IT ecosystem. So we've chosen those three solution areas and put significant engineering into building out that experience. How quickly can we deliver value, how pre-built can the configuration be the integrations be, the workflow, the reporting and the dashboards around those use cases. The last piece, which is very relevant for reinvent is the transition to cloud, right? So we still offer a downloadable software and many of our customers and users download the elastic stack and deploy it on-prem and hybrid cloud environments. But one of the fastest growing deployment models is in the public cloud. And of course, elastic cloud on AWS is one of our major routes to market, happy to meet many of our customers where they are, which is on AWS. >> Oh it's great to be able to have that choice I think that people can download the software try and get it, get comfortable with it but then people often find that actually running software yourself, there's quite a lot of work involved in doing that. I know that I, I've experienced that myself. Just little things like maintenance and so on. So it sounds like you're actually taking care of a lot of that for customers if they move to the cloud service. But is there anything else special about the cloud service that customers might not be that aware of? >> Well, I mean, choice is a big part of it and so it's not just do I choose cloud it's wearing cloud. So we've actually, we now run elastic cloud in over 40 regions around the world. So we can be close to you in terms of latency, and in terms of performance, in terms of data sovereignty we can be local to your environment. The other aspect it's not just how we simplify deploying elastic. You know, clearly we architect it we install it, deploy and upgraded for you. But also we have focused quite a bit on integrating cloud data sources. So with AWS, as an example, we look at all of the applications and data sources that you host on AWS. And we think about how do we get those data streams how do we get that data directly integrated into elastic. One final piece, actually which I forget sometimes it's not the technical side. It's the business side is the commercial integration, right? So we are, you know, very happy to to be listed on the AWS marketplace. We've made it easy for you to find, deploy and actually build through your AWS commercial agreements via the marketplace integration. >> Right, so easy to get started and to start using it and search is certainly something that elastic is famous for. But you mentioned observability there, a bit of a question I have around observability is, is it that just a fancy way of saying monitoring? There seems to be this, this buzzword around the place. So what do you mean when you say observability? >> So one of the key foundational principles of the elastic observability solution is that, you know you want a unified data database a unified place to store all that data. So it is stretching across logs metrics, application traces it's bringing together a common platform that lets you look at different aspects of observability. So whether you're doing end to end application traces or whether you're just collecting infrastructure logs and looking at performance metrics it's kind of across the board, even looking at things in our most recent release that just came out last week, you know expanding on user experience, monitoring and synthetics. So you can optimize web interactions and web experiences, for example. >> Right. Okay. So there's a bunch of different types of data that are involved there. I know traditionally people would silo those off into a specific customized thing just for that particular type of workload. What is it about elastic that means that you can put all of these in one place? >> Yeah. You know, one of early catchphrases for what does elastic do? What do we focus on? The value we deliver is speed, scale and relevance. And so one of the things that is famous about the elastic way of doing things is the way in which we index data on ingest and so that you can get search queries that return within milliseconds and so that performance characteristics. A second one is scale. And this is actually really key, not just for observability but right next to observability, you get security as well. We like to say, if you're going to observe you might as well protect as well. So when you expand to that universe you have not just hundreds of devices you might have thousands or tens of thousands of devices that you are ingesting information whether it's operational data, whether it's security data. So scale becomes extremely significant. How can you scale horizontally and vertically and maintain that performance even when you are in a fortune 500 scale infrastructure The last piece is relevance. And so, you know that data it's not just about knowing what to look for. It's about using things like machine learning and anomaly detection to uncover unusual patterns of behavior and proactively alerting and making that visible through notifications and through alerts that can actually integrate not just with your elastic operations but actually with third party software. Maybe you want to trigger a service now ticket or a, you know, a Slack integration and all of that is part of the elastic platform as well. >> Right? Okay. So by putting everything kind of in one place that is around what you're talking about. So we have enterprise search and then to be able to find things we're collecting all of the data that we need to find things. And then you touched on security at the beginning and we're starting to talk around security there. So I'm keen to move on to that >> (chuckles) >> By looking at all of these, these different, these signals we can hopefully then manage some of security which I know is very much front of mind for everyone over the last year. Cyber security has very much come to the forefront of everyone's thinking. >> Absolutely. And you know, we've been on the network side of security for some time. So we've had our SIM solution, you know security information event monitoring, but we made a very strategic acquisition a little over a year ago. We saw that a critical piece of visibility is also the end point. And so we partnered with end game and eventually we acquired end game to create end to end visibility on that security. So it is being able to connect, you know the path of data from your servers and network devices all the way to the end points. And an example of the power of this unified architecture is the new elastication that we introduced in beta a couple of months ago. We said, what if we had a single deployment that both does endpoint protection and does malware scanning of your endpoint devices while also ingesting data into your observability systems. And so that's kind of the power of the platform the ability to use common infrastructure common integrations, so that every use case you adopt on top of elastic, it sort of multiplies the value you're getting from using elastic as an infrastructure player. >> Alright that's a good combining a couple of different things into the one tool that you can use. I know sys who I'd spoken to are quite concerned about the proliferation of tools that they have in their environment, it seems that they've bought lots of different things but a lot of them are kind of sitting in a drawer, not really being used. And partly, it's just, we we have so many different ways of dealing with these issues. None of it's really flushed out or sorry has been fully fleshed out that we definitely know this is the one true way to solve this. So what are you hearing from customers as they start to use these security functions? What are they telling you about the way that they're managing security in their environments? >> Well, you know, we think about a few different personas in the security market, right? We think about threat hunters, for example who are looking to identify threats, we're looking at the operations team that do the cleanup that do the you know, the resolution of security threats. And we also, so there's a, you know, there's two competing terms in the security market. We have security operations in the observability world. We have dev ops, right? And, and developer, you know, the continue of developer and deployment into a dev ops role. And so we're starting to see this concept of DevSecOps, right? What if there is a unified set it's not all things to all people and that's an important thing, right? We're not trying to be, your single security vendor for all IT security needs, but instead we're saying, what if you had a security operations analyst, a thrent Hunter an executive, a CSO who's looking for, you know an overall level of threat or compliance to policy and you can bring those experiences together through the elastic security solution. >> Right? So it sounds like you you're trying to allow people to work in the way that they need to providing them the tools that suit their particular circumstance. >> That's right. That's right. I mean, in terms of how do you define success? You look at metrics like meantime to resolution, you know can we reduce the meantime to resolution or you look at law collection and how much more efficiently can you collect logs? You look at asset monitoring and what percentage of your IT infrastructure you actually have unified visibility into, you know we have one great cloud customer OALEKS group. They are a popular online marketplace, you know and they quoted to us that they had a 1900% increase in law collection, right. In terms of scope of what they are collecting logs on they reduce that MTTR by 30% for security incidents so dramatically streamlined and shortened the exposure. And then they increased asset monitoring by 35% across cloud, as well as on-prem. And I think that's the other piece is that, you know whether you deploy your security in the cloud or on-prem you are looking to secure your hybrid environment. And so being able to take data feeds from your SAS partners from your infrastructure running on AWS as well as from those endpoint devices. >> Well, it sounds like there's plenty of scope of interesting things for people to come and have a look at it, at elastic. So, Angelos, thank you so much for joining us here, please. Thank you to my guests Angelos Kottas, vice president of product marketing at elastic. You've been watching theCUBE virtual and our coverage of AWS reinvent 2020 with special coverage of APN partner experience. Make sure you check out all our coverage on your desktop laptop or on your phone, wherever you are. I've been your host, Justin Warren. And I look forward to seeing you again soon. (upbeat music)
SUMMARY :
Narrator: From around the globe and he comes to us from San Francisco. A pleasure to join you. of change over the last couple of years. one period. of the same things with elastic. of that for customers if they So we are, you know, very happy to So what do you mean when of the elastic observability that you can put all and all of that is part of of the data that we need to find things. of mind for everyone over the last year. So it is being able to connect, you know into the one tool that you can use. And we also, so there's a, you know, So it sounds like you meantime to resolution, you know of interesting things for people to come
SENTIMENT ANALYSIS :
ENTITIES
Entity | Category | Confidence |
---|---|---|
Justin Warren | PERSON | 0.99+ |
Angelos Kottas | PERSON | 0.99+ |
Justin | PERSON | 0.99+ |
San Francisco | LOCATION | 0.99+ |
Angelos | PERSON | 0.99+ |
AWS | ORGANIZATION | 0.99+ |
thousands | QUANTITY | 0.99+ |
35% | QUANTITY | 0.99+ |
30% | QUANTITY | 0.99+ |
last week | DATE | 0.99+ |
1900% | QUANTITY | 0.99+ |
one | QUANTITY | 0.99+ |
One | QUANTITY | 0.98+ |
both | QUANTITY | 0.98+ |
second | QUANTITY | 0.98+ |
three core use cases | QUANTITY | 0.98+ |
last year | DATE | 0.98+ |
three use cases | QUANTITY | 0.98+ |
one tool | QUANTITY | 0.98+ |
one place | QUANTITY | 0.98+ |
OALEKS | ORGANIZATION | 0.97+ |
One final piece | QUANTITY | 0.97+ |
over 40 regions | QUANTITY | 0.96+ |
single | QUANTITY | 0.96+ |
two competing terms | QUANTITY | 0.96+ |
three solution | QUANTITY | 0.95+ |
hundreds of devices | QUANTITY | 0.95+ |
second one | QUANTITY | 0.94+ |
today | DATE | 0.93+ |
SAS | ORGANIZATION | 0.93+ |
Hunter | PERSON | 0.93+ |
single deployment | QUANTITY | 0.93+ |
devices | QUANTITY | 0.91+ |
tens of thousands | QUANTITY | 0.91+ |
elastic | ORGANIZATION | 0.91+ |
couple of months ago | DATE | 0.89+ |
a year ago | DATE | 0.89+ |
first | QUANTITY | 0.87+ |
500 | QUANTITY | 0.87+ |
Invent 2020 Partner Network Day | EVENT | 0.87+ |
Logstash | TITLE | 0.85+ |
Slack | TITLE | 0.83+ |
APN | ORGANIZATION | 0.81+ |
Kibana | TITLE | 0.8+ |
over | DATE | 0.76+ |
years | QUANTITY | 0.74+ |
last couple of years | DATE | 0.74+ |
theCUBE virtual | COMMERCIAL_ITEM | 0.72+ |
Elastic | ORGANIZATION | 0.71+ |
last few years | DATE | 0.69+ |
2020 | TITLE | 0.62+ |
reinvent 2020 | TITLE | 0.58+ |
milliseconds | QUANTITY | 0.58+ |
Elk Stack | TITLE | 0.58+ |
beats | ORGANIZATION | 0.56+ |
re: | EVENT | 0.55+ |
DevSecOps | TITLE | 0.52+ |
couple | QUANTITY | 0.49+ |
theCUBE | TITLE | 0.48+ |
reinvent | EVENT | 0.37+ |