OpenSearch: Open-Source Search and Analytics Suite

# Install OpenSearch
docker run -p 9200:9200 -p 9600:9600 \
  -e "discovery.type=single-node" \
  opensearchproject/opensearch:latest

// Cluster configuration
{
  "cluster": {
    "name": "my-opensearch-cluster"
  },
  "node": {
    "name": "node-1"
  }
}

# Create index
curl -X PUT "localhost:9200/products" \
  -H 'Content-Type: application/json' \
  -d '{
    "settings": {
      "number_of_shards": 3,
      "number_of_replicas": 2
    },
    "mappings": {
      "properties": {
        "name": { "type": "text" },
        "price": { "type": "float" },
        "category": { "type": "keyword" }
      }
    }
  }'

// Create index pattern
{
  "attributes": {
    "title": "products*",
    "timeFieldName": "created_at"
  }
}

// Create visualization
{
  "type": "line",
  "title": "Sales Over Time",
  "params": {
    "index_pattern": "products",
    "time_field": "created_at",
    "metrics": [{ "type": "sum", "field": "price" }]
  }
}

# Enable security plugin
opensearch-security-admin.sh \
  -cd /usr/share/opensearch/plugins/opensearch-security/securityconfig \
  -icl \
  -nhnv \
  -cacert /usr/share/opensearch/config/root-ca.pem \
  -cert /usr/share/opensearch/config/admin.pem \
  -key /usr/share/opensearch/config/admin-key.pem

-- Query using SQL
SELECT category, AVG(price) as avg_price
FROM products
WHERE created_at >= '2025-01-01'
GROUP BY category
ORDER BY avg_price DESC

# Execute SQL
curl -X POST "localhost:9200/_plugins/_sql" \
  -H 'Content-Type: application/json' \
  -d '{
    "query": "SELECT * FROM products WHERE price > 100"
  }'

# OpenSearch is largely compatible with Elasticsearch 7.x
# Most queries work without modification

# Reindex from Elasticsearch
curl -X POST "localhost:9200/_reindex" \
  -H 'Content-Type: application/json' \
  -d '{
    "source": {
      "remote": {
        "host": "https://old-elasticsearch:9200"
      },
      "index": "products"
    },
    "dest": {
      "index": "products"
    }
  }'