Ingest application logs and search message text, tags, and time ranges quickly.
Operators need dashboards and alerts over the indexed data.
Which data store is most appropriate?
Use Amazon OpenSearch Service for distributed full-text indexes, aggregations, dashboards, and log analysis.
Detailed explanation
Relational queries can search text but are not the primary choice for high-rate log indexing.
Relational queries can search text but are not the primary choice for high-rate log indexing.
Deep Archive is for infrequent long-term storage, not immediate full-text search.
Deep Archive is for infrequent long-term storage, not immediate full-text search.
OpenSearch provides indexed full-text search, aggregations, dashboards, and alerting.
OpenSearch provides indexed full-text search, aggregations, dashboards, and alerting.
SQS delivers messages and does not index historical logs for search.
SQS delivers messages and does not index historical logs for search.
Check official documentation
Compare the following points with the official documentation.
Amazon OpenSearch Serviceのインデックス、検索、Dashboards、ログ分析の公式説明を確認する。
What to confirm
検索インデックスとリレーショナル・アーカイブ・キューの違いを説明できる。
Key points
- OpenSearch
- Full-text search
- Index
- Log analytics
Notes
- Environment: AWS公式DEA-C01試験ガイドと各サービスの公式ドキュメントの確認
- Confirm current AWS service behavior in the official DEA-C01 documentation.
Foundation review
Hot and archive layers
Keep frequently searched data in an index and move older data to economical storage.
Index lifecycle
Field mappings, shards, replicas, retention, and access control affect the search system.