---
title: "Elasticsearch | Grafana Labs"
description: "The Elasticsearch data source for logs and search."
---

> For a curated documentation index, see [llms.txt](/llms.txt). For the complete documentation index, see [llms-full.txt](/llms-full.txt).

# Elasticsearch: Full-text search and log analytics

**What it’s for:** Logs with complex search needs including security analytics, audit logging, and full-text search.

## Good to know

- Query language: Lucene query syntax
- Indexes the full content of every log, which enables full-text search across everything
- That full indexing uses more storage, memory, and CPU than label-based stores like Loki, and the cluster takes more work to size and maintain.

## Best for

- Complex log search requirements
- Security analytics (security information and event management, or SIEM)
- Existing Elasticsearch installations

* * *

## Documentation

View the full documentation.

[Elasticsearch data source](https://grafana.com/docs/grafana/latest/datasources/elasticsearch/)