- Home
- Telemetry Pipeline Software
- Amazon OpenSearch Ingestion
Amazon OpenSearch Ingestion
What it is
Amazon OpenSearch Ingestion is a managed, serverless collector that streams logs, metrics, and traces to OpenSearch Service domains and OpenSearch Serverless collections. Its pipelines can filter, enrich, transform, normalize, aggregate, and route information before analysis or visualization. A pipeline combines a source with optional ordered processors and one or more sinks; a sink may point to another pipeline. Supported inputs include structured and unstructured material, text, numerical data, and geospatial data. Users define pipeline configuration in YAML and create pipelines through the AWS Console or AWS CLI. AWS manages software installation, patching, version upgrades, monitoring, and repair, while ingestion workloads scale automatically. Capacity controls let users set minimum and maximum OCU levels or pause a pipeline; paused pipelines consume no OCUs. Billing is hourly with per-minute granularity for allocated ingestion OCUs, and one OCU provides 15 GB of RAM and 2 vCPU. Connections can use VPC access through PrivateLink or the public internet. Built-in processors can redact or obscure sensitive information before delivery, and conditional routing can help meet data residency needs. The product page states an availability SLA of 99.9%.
For and against
For
- Collects logs, metrics, and traces in real time.
- Pipelines can transform, enrich, and route data.
- Paused pipelines consume no OCUs.
- Supports private connectivity through PrivateLink.
Against
- No free plan is listed.
- Billing applies to allocated ingestion OCUs.
- Pipeline configuration is defined in YAML.
- AWS describes security as a shared responsibility.
The verdict
Amazon OpenSearch Ingestion provides configurable pipelines and managed scaling for data headed to OpenSearch destinations. Prospective users should account for OCU-based billing and AWS's shared-responsibility security model.
Who it suits
Amazon OpenSearch Ingestion suits teams sending logs, metrics, or traces into OpenSearch destinations for further analysis. It may fit organizations that want AWS-managed pipeline operations and controls for capacity, connectivity, and data processing.
Plans and prices
Pay-as-you-go
1 OCU = 15 GB RAM and 2 vCPU · configure minimum and maximum OCUs per pipeline · paused pipelines consume no OCUs
Read 8 Oct 2026 · aws.amazon.com
On the record
- Availability
- The product page states an availability SLA of 99.9%.aws.amazon.com · read 8 Oct 2026
- AWS origin
- AWS says it launched in 2006; its about page describes customers ranging from startups and enterprises to nonprofits and governments.aws.amazon.com · read 8 Oct 2026
- Configuration
- Users define pipeline configuration in YAML and can create pipelines through the AWS Console or AWS CLI.aws.amazon.com · read 8 Oct 2026
- Cost controls
- Users can set minimum and maximum OCU capacity per pipeline and pause a pipeline; paused pipelines consume no OCUs.aws.amazon.com · read 8 Oct 2026
- Data processing
- Pipelines can filter, enrich, transform, normalize, aggregate, and route data before downstream analysis and visualization.aws.amazon.com · read 8 Oct 2026
- Data protection
- Built-in processors can redact or obfuscate sensitive information before it reaches a destination, and conditional routing can help meet data residency requirements.aws.amazon.com · read 8 Oct 2026
- Data types
- It supports structured, unstructured, textual, numerical, and geospatial data, including logs, metrics, and traces.aws.amazon.com · read 8 Oct 2026
- Integrations
- The service delivers data to OpenSearch domains and Serverless collections, and the AWS page names CyberArk, Calyptia, and Confluent as customers and partners.aws.amazon.com · read 8 Oct 2026
- Network security
- Pipelines can use VPC access through PrivateLink for private connectivity or public access over the internet.aws.amazon.com · read 8 Oct 2026
- Pipeline structure
- A pipeline uses a source, optional ordered processors, and one or more sinks, and sinks can include another pipeline.aws.amazon.com · read 8 Oct 2026
- Purpose
- A fully managed, serverless data collector streams real-time logs, metrics, and traces to OpenSearch Service domains and OpenSearch Serverless collections.docs.aws.amazon.com · read 8 Oct 2026
- Scaling and operations
- The service automatically scales ingestion workloads and AWS manages software installation, patching, version upgrades, and 24x7 monitoring and repair.aws.amazon.com · read 8 Oct 2026
- Security model
- AWS describes security as a shared responsibility and documents VPC access, cross-account ingestion, IAM, CloudTrail logging, and PrivateLink controls.docs.aws.amazon.com · read 8 Oct 2026
- Supported Data Prepper
- The developer guide says OpenSearch Ingestion supports Data Prepper 2.x and currently provisions pipelines with version 2.7.docs.aws.amazon.com · read 8 Oct 2026
