The ELK stack, which stands for Elastic Search, Logstash, and Kibana, is a set of services used for log file aggregation and management. Recently, Amazon spun off forks of ElasticSearch and Kibana called OpenSearch and OpenSearch Dashboards after Elastic changed their licensing.

ElasticSearch (or OpenSearch) typically runs on port 9200 and provides full-text search capabilities by indexing documents. Logstash is a preprocessing pipeline that transforms data before storing it in ElasticSearch or OpenSearch. Kibana (or OpenSearch Dashboards) is a visualization layer that allows users to create dashboards and other visualizations of the data in ElasticSearch or OpenSearch.

ElasticSearch has a detailed API that can be found at here. Most of this documentation is directly compatible with OpenSearch.

Creating Custom Mappings in OpenSearch integrated with Graylog