November 2025 Summaries

The Elastic DevRel team's November 2025 newsletter highlights the release of Elastic 9.2, introducing significant updates such as agentic workflows in Kibana, AI-assisted log pipelines, and a new on-disk vector index to enhance data processing capabilities. The update also includes quality-of-life improvements in Discover, along with the Elastic Agent Builder, which allows users to create task-oriented agents using a native, standards-based approach. The newsletter showcases the Streams feature for AI-assisted log organization and the DiskBBQ solution for efficient vector search, reducing RAM requirements. Additionally, it offers insights into various training opportunities, blogs, and videos on topics like context engineering and agentic AI, and announces the return of the Elastic{ON} Tour, a global conference series starting in January 2026. The newsletter encourages community participation in upcoming events and emphasizes that the release and timing of features are at Elastic's discretion.

Data sovereignty is crucial for global defense organizations, as it ensures sensitive information remains under a nation’s jurisdiction, which is vital for strategic autonomy and security. This principle is fundamental for maintaining secure operations and effective collaboration with international partners, despite challenges like fragmented standards and legacy systems. A data mesh approach, combined with open source technologies and Zero Trust frameworks, can enhance security and operational agility by ensuring data remains accessible yet protected. Additionally, AI plays a significant role in managing and safeguarding data, with Elastic offering solutions that promote interoperability, strategic autonomy, and compliance with data sovereignty regulations, enabling defense teams to act independently and efficiently.

Elasticsearch plays a pivotal role in grounding large language models (LLMs) within the Microsoft Azure AI Foundry Agent Service, ensuring agents generate accurate and trustworthy responses based on proprietary enterprise data. By integrating Elasticsearch, developers can connect AI agents to verified, context-rich information, enhancing their reliability beyond generic LLM training knowledge. The Microsoft Azure AI Foundry Agent Service, built on a robust framework, provides a platform for building and managing multi-agent systems utilizing knowledge bases and tools accessed through the Model Context Protocol (MCP) and the Agent-to-Agent (A2A) protocol. This integration allows for sophisticated workflows where Elasticsearch serves both as a retrieval tool and a collaborative agent, enhancing data retrieval and orchestration capabilities. The partnership between Elasticsearch and Microsoft Azure AI Foundry ensures trust, accuracy, and speed, enabling enterprises to implement comprehensive agent strategies that maximize the utility of both platforms.

Public sector organizations are leveraging Elastic's comprehensive data platform to address fraud detection challenges by utilizing its native features like detection rules, anomaly detection jobs, and Attack Discovery. These tools help identify known fraud patterns, uncover unusual activities, and reveal complex, coordinated behaviors that are difficult to anticipate. During the pandemic, the critical need for proactive fraud detection became evident when the U.S. Department of Labor estimated that fraud accounted for a significant percentage of unemployment insurance benefits. Elastic's platform allows for the creation of custom detection rules and machine learning jobs tailored to specific use cases, providing a holistic fraud detection framework. This approach is particularly beneficial for smaller state, local, and educational agencies already using Elastic for other purposes, as it can help consolidate tools, reduce technical debt, and increase return on investment. As fraud becomes more sophisticated with the rise of generative AI, Elastic's platform offers a flexible and scalable solution for detecting, preventing, and responding to fraudulent activities.

Elastic has been recognized as a Leader in the IDC MarketScape: Worldwide Observability Platforms 2025 Vendor Assessment, highlighting its strengths in open-standards architecture, scalable infrastructure, and business-centric observability. The company's platform ingests OpenTelemetry data and correlates technical performance with user experience and business metrics, providing a comprehensive view of system health and performance. Elastic's AI-driven Streams feature revolutionizes log management by automatically parsing and structuring data, allowing Site Reliability Engineering (SRE) teams to identify significant events and resolve issues swiftly. Furthermore, Elastic's commitment to innovation is evident in features like the Elastic AI Assistant and Elastic Agent Builder, which enhance observability through AI-driven insights and customizable data handling. The platform ensures secure, efficient, and cost-effective operations, making it a valuable tool for organizations aiming for proactive, intelligent system management.

For over two decades, the US Intelligence Community and Department of Defense have relied on outdated Host Based Security Systems for basic endpoint security, which are now insufficient for integrated cross-domain endpoint detection and response. Elastic offers a modernized solution with its unified endpoint and extended detection and response capabilities, drawing on expertise from its acquisition of Endgame in 2019. Elastic's platform is designed to scale across various environments, including Linux and air-gapped networks, and integrates seamlessly with its AI-powered security analytics. Elastic provides comprehensive security with features like advanced malware defenses, policy enforcement, and compliance with federal standards, operating efficiently in hybrid and disconnected networks. Elastic's platform is recognized for its efficacy in independent tests and assessments, including high prevention rates and rapid response capabilities, positioning it as a leader in the industry. The company emphasizes open security practices, AI integration, and a unified approach to endpoint protection, aiming to enhance the security posture of defense and intelligence agencies against evolving threats.

Elastic has been awarded the 2025 Microsoft Software Development Company (SDC) LATAM Partner of the Year and recognized as a finalist for Microsoft Americas, marking the fourth consecutive year it has received top honors at the Microsoft Partner of the Year Awards. This recognition highlights the strength of Elastic's partnership with Microsoft, emphasizing their shared commitment to customer success through scalable, secure, and cost-effective AI applications. Elastic's integration with Microsoft Azure AI Services, including Azure OpenAI and Azure AI Foundry, enables organizations to accelerate their AI capabilities in areas such as search, observability, and security. This collaboration has led to the development of advanced enterprise solutions, such as hybrid search experiences and AI-driven security, which are accessible through the Azure Marketplace. Companies like Stack Overflow, Radio-Canada, and DocuSign have benefited from these innovations, experiencing significant improvements in search performance and operational efficiency. Elastic's presence at Microsoft Ignite 2025 underscores its ongoing commitment to innovation and customer engagement within the Microsoft ecosystem.

Elastic has been recognized as a Leader in the IDC MarketScape: Worldwide General-Purpose Knowledge Discovery 2025 Vendor Assessment, highlighting its innovative integration of search, analytics, and AI within a unified platform. The platform, centered around Elasticsearch, enables organizations to process structured, semi-structured, and unstructured data, offering capabilities like conversational search, retrieval augmented generation, and AI agent workflows. Elastic's open, AI-native architecture supports integration with large language models and allows for custom model deployment, ensuring flexibility without vendor lock-in. Key differentiators include its proven business impact, leadership in relevance, and developer-empowered innovation, supported by a robust open-source community. Recent advancements, such as the acquisition of Jina AI and the introduction of Elastic Agent Builder and Elastic Inference Service, further enhance its capabilities in AI-driven search and analytics. Elastic's strategic partnerships and commitment to eliminating data silos underscore its mission to help organizations unlock the potential of their data securely and at scale.

Version 8.19.7 of the Elastic Stack has been released, with the company recommending an upgrade from the previous version, 8.19.6. For comprehensive details on the resolved issues and the full list of changes for each product included in this new version, users are advised to consult the release notes.

Version 9.2.1 of the Elastic Stack was released on November 11, 2025, with recommendations for users to upgrade from previous versions, particularly 9.2.0, to benefit from the latest fixes and changes. For comprehensive details on the issues addressed and the specific updates for each product included in this release, users are advised to consult the official release notes.

Elastic Stack version 9.1.7 has been released, and users are encouraged to upgrade to this latest version over the previous 9.1.6 release. The update addresses various issues and includes changes across the different products within the stack. Detailed information about the fixes and modifications can be found in the release notes.

KPMG Technology Consulting has successfully utilized Elastic Security to enhance the security infrastructure of its clients by reducing storage costs, increasing visibility, and minimizing false positives. By migrating from legacy security information and event management (SIEM) platforms to Elastic Security, KPMG has accelerated project timelines by 20%–40%, thanks to Elastic's Automatic Migration and Elastic-authored rules. This transition has allowed clients to leverage Elastic’s multi-tiered cloud storage, which offers a tenfold increase in storage capacity at a quarter of the previous cost. The advanced features of Elastic, such as AI components and Elasticsearch Query Language (ES|QL), have enabled clients to strengthen their security defenses, streamline data management, and maintain operational efficiency. Notable achievements include a significant expansion in data storage capabilities with a 75% reduction in storage costs and improved threat detection and response times through Elastic's machine learning-driven anomaly detection. The partnership between KPMG and Elastic continues to evolve, with a focus on innovation and delivering advanced AI-driven security solutions, enabling clients to process vast amounts of data efficiently and securely.

At Money20/20 USA 2025, a pivotal inflection point for fintech was highlighted, emphasizing the integration of trusted data, explainable AI, and resilient infrastructure as the foundation of the industry's next chapter. The event underscored the transition from experimentation to execution, focusing on how to responsibly operationalize AI at scale, with AI becoming an essential component of financial infrastructure for tasks such as fraud detection and customer personalization. The rise of stablecoins, exemplified by Western Union's announcement of a new stablecoin on Solana, signaled their movement from the periphery to mainstream financial operations, enhancing real-time cross-border transactions. Trust infrastructure was identified as a competitive advantage, as financial ecosystems become more decentralized and intelligent, necessitating robust security and observability. Dubbed "Fintech Spring," the event marked a renewed optimism in the sector, prioritizing collaboration and sustainable growth over rapid, disruptive innovation. The future of finance, grounded in unified data and AI, was not just predicted but actively being built, with trust and visibility as non-negotiable elements.