shouldiuse.io

Categories

VERDICT

OpenSearch Review

Depends

Should I use OpenSearch?

OpenSearch is a community-driven, Apache 2.0-licensed open source search and analytics suite that makes it easy to ingest, search, visualize, and analyze data. - opensearch.org

· 1 month ago

Buy it if you run high-volume log analytics or want a self-hosted, open-source Elasticsearch alternative. Skip it for simple app search — managed tiers get expensive and it is more ops than small teams need.

Confidence

Medium. Based on 30+ public sources including Reddit, G2, HN, AWS docs, vendor pages, and security trackers.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support qualityNo support evidence in sources
  • Security posture

Pricing

$0

Self-hosted

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes
DigitalOcean managedfrom $19/mo
AWS ServerlessOCU-based; small workloads often $350+/mo

Best for

  • High-volume log analytics
  • Teams wanting an open-source Elasticsearch alternative
  • AWS-centric search workloads
  • Security analytics / SIEM builders

Not for

  • Small apps needing simple site search — badly overkill
  • Teams with no ops bandwidth to run clusters
  • Budget buyers on AWS Serverless with spiky, small workloads
  • Latency-critical search where Elastic claims a 40–140% speed edge

Gotchas - check before you buy

high

AWS Serverless bills a 2-OCU minimum around the clock; small workloads report ~$350+/month

high

Security plugin ships demo certificates — replace them before production

medium

Scanners kept flagging Log4j CVEs even after upgrading to 3.6.0

medium

G2 reviewers note hosted OpenSearch can cost more than competitors

Pros and cons

Pros

  • Handles very high ingest; users report well over 100K events/min
  • Truly open source, Apache 2.0, Linux Foundation governed
  • Full suite: search, dashboards, security analytics, built-in ML
  • G2 reviewers consistently praise ease of use and scalability

Cons

  • Elastic benchmarks claim Elasticsearch outperforms OpenSearch by 40%–140%
  • Some users say features feel half-baked versus Elasticsearch
  • Managed hosting widely called expensive
  • Steady CVE stream across core and dashboards

Sources & method

- 12 sources - Active open-source project with published CVEs and a clear disclosure process; recurring Log4j scanner flags and a recent DoS and SSRF issue, both patched.

official x3review x6security x2news x1
  • CVE-2025-9624 — Denial of Service, Vulnerability allows attackers to cause denial of service in OpenSearch.
  • CVE-2026-18952 — SSRF in Security Analytics, Server-side request forgery vulnerability in OpenSearch Security Analytics.
  • Recurring Log4j scanner flags, Clusters on 3.6.0 still flagged for Log4j vulnerability CVE-2026-34478 by scanners.

Key stats

  • Value for money: 2/5

    Rating

  • $0

    Starting price

  • 12

    Sources

  • Analyzed

  • Value for money: 2/5. Managed costs draw repeated user complaints
  • Ease of use: 4/5. G2 users praise ease of use
  • Feature depth: 5/5. Search, analytics, dashboards, security, ML in one suite
  • Support quality. No support evidence in sources
  • Security posture: 3/5. Active CVE flow, transparent patching process
  • $0 Core license Apache 2.0, self-hosted
  • $19/mo Managed price floor DigitalOcean single node
  • 14,100 Companies using it per TheirStack data
  • Linux Foundation Governance AWS donated it in Sept 2024

Pricing

Self-hosted

$0

  • Apache 2.0, full feature set
  • You run and scale the cluster

DigitalOcean managed

from $19/mo

  • Single-node start
  • Managed ops

AWS Serverless

OCU-based; small workloads often $350+/mo

  • Pay per OCU-hour
  • Storage ~$0.02/GB-month

Security

Active open-source project with published CVEs and a clear disclosure process; recurring Log4j scanner flags and a recent DoS and SSRF issue, both patched.

  • CVE-2025-9624 — Denial of ServiceVulnerability allows attackers to cause denial of service in OpenSearch.11
  • CVE-2026-18952 — SSRF in Security AnalyticsServer-side request forgery vulnerability in OpenSearch Security Analytics.
  • Recurring Log4j scanner flagsClusters on 3.6.0 still flagged for Log4j vulnerability CVE-2026-34478 by scanners.12

What users say

Users praise its scale and ease of use but frequently complain about managed-hosting costs and polish versus Elasticsearch.

“opensearch can handle way more than 100K per min”
Reddit, r/aws
“Everything in OpenSearch just feels more half-bak”
Reddit, r/elasticsearch
“OpenSearch is notoriously expensive.”
Hacker News

Companies that use it

  • LINE
  • Adaptavist
Full analysis

Based on 30+ public sources including Reddit, G2, HN, AWS docs, vendor pages, and security trackers.

Powerful open-source search/analytics for high-volume workloads — overkill and pricey for simple search needs.

Methodology

Based on 30+ public sources including Reddit, G2, HN, AWS docs, vendor pages, and security trackers.

Read how a report is made.

Sources

  1. What's your experience using OpenSearch? (Reddit)reddit.com
    review
  2. ES, i'm done. Anyone try OpenSearch? (Reddit)reddit.com
    review
  3. OpenSearch is notoriously expensive (Hacker News)news.ycombinator.com
    review
  4. OpenSearch Reviews — G2g2.com
    review
  5. 10 best OpenSearch alternatives (daily.dev)daily.dev
    review
  6. AWS OpenSearch Pricing and Review 2026 (CubeAPM)cubeapm.com
    review
  7. OpenSearch official siteopensearch.org
    official
  8. OpenSearch vs Elasticsearch (Elastic)elastic.co
    official
  9. DigitalOcean Managed OpenSearch Pricingdocs.digitalocean.com
    official
  10. Linux Foundation Announces OpenSearch Software Foundationlinuxfoundation.org
    news
  11. CVE-2025-9624 (NVD)nvd.nist.gov
    security
  12. OpenSearch 3.6.0 Log4j flag (forum)forum.opensearch.org
    security

Add this review to your site

This check for OpenSearch says Depends.

Put the badge on your site.

Visitors see the independent review.

The link points here, and search engines follow it.

This is the badge visitors see on your site.

Depends OpenSearch Independent review on Should I Use It

Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.