Amazon OpenSearch Ingestion
docs.aws.amazon.com
What it is
Amazon OpenSearch Ingestion is a managed, serverless service that streams logs, metrics, and traces to OpenSearch Service domains or OpenSearch Serverless collections. Each pipeline has a source, optional ordered processors, and one or more sinks, including another pipeline as a sink. Processing can filter, enrich, transform, normalize, aggregate, and route structured or unstructured data, including textual, numerical, and geospatial content. AWS automatically scales ingestion workloads and manages installation, patching, version upgrades, continuous monitoring, and repair. Users define YAML pipelines through the AWS Console or CLI, set minimum and maximum ingestion OCU capacity, or pause a pipeline; paused pipelines consume no OCUs. Billing is hourly with per-minute granularity for allocated OCUs, with one OCU providing 15 GB RAM and 2 vCPU. Private connectivity is available through VPC access and PrivateLink, or pipelines can use the public internet. Redaction, obfuscation, conditional routing, and a stated 99.9% availability SLA are included.
Spec sheet
- Purpose
- A fully managed, serverless data collector streams real-time logs, metrics, and traces to OpenSearch Service domains and OpenSearch Serverless collections.Read 8 Oct 2026 · docs.aws.amazon.com
- Integrations
- The service delivers data to OpenSearch domains and Serverless collections, and the AWS page names CyberArk, Calyptia, and Confluent as customers and partners.Read 8 Oct 2026 · aws.amazon.com
- Availability
- The product page states an availability SLA of 99.9%.Read 8 Oct 2026 · aws.amazon.com
- AWS origin
- AWS says it launched in 2006; its about page describes customers ranging from startups and enterprises to nonprofits and governments.Read 8 Oct 2026 · aws.amazon.com
- Configuration
- Users define pipeline configuration in YAML and can create pipelines through the AWS Console or AWS CLI.Read 8 Oct 2026 · aws.amazon.com
- Cost controls
- Users can set minimum and maximum OCU capacity per pipeline and pause a pipeline; paused pipelines consume no OCUs.Read 8 Oct 2026 · aws.amazon.com
- Data processing
- Pipelines can filter, enrich, transform, normalize, aggregate, and route data before downstream analysis and visualization.Read 8 Oct 2026 · aws.amazon.com
- Data protection
- Built-in processors can redact or obfuscate sensitive information before it reaches a destination, and conditional routing can help meet data residency requirements.Read 8 Oct 2026 · aws.amazon.com
- Data types
- It supports structured, unstructured, textual, numerical, and geospatial data, including logs, metrics, and traces.Read 8 Oct 2026 · aws.amazon.com
- Network security
- Pipelines can use VPC access through PrivateLink for private connectivity or public access over the internet.Read 8 Oct 2026 · aws.amazon.com
- Pipeline structure
- A pipeline uses a source, optional ordered processors, and one or more sinks, and sinks can include another pipeline.Read 8 Oct 2026 · aws.amazon.com
- Scaling and operations
- The service automatically scales ingestion workloads and AWS manages software installation, patching, version upgrades, and 24x7 monitoring and repair.Read 8 Oct 2026 · aws.amazon.com
- Security model
- AWS describes security as a shared responsibility and documents VPC access, cross-account ingestion, IAM, CloudTrail logging, and PrivateLink controls.Read 8 Oct 2026 · docs.aws.amazon.com
- Supported Data Prepper
- The developer guide says OpenSearch Ingestion supports Data Prepper 2.x and currently provisions pipelines with version 2.7.Read 8 Oct 2026 · docs.aws.amazon.com
Plans and prices
Strong points and limits
Strong points
- Managed serverless ingestion
- Supports logs, metrics, and traces
- Filtering, enrichment, transformation, and routing
- Automatic scaling and AWS operations management
- Pipelines can pause without OCU consumption
Limits
- Paid service with no free plan
- OCU usage is billed hourly
- Supports Data Prepper 2.x, currently version 2.7
Who it suits
It suits teams collecting and preparing logs, metrics, traces, and other data for OpenSearch destinations. It is relevant when managed scaling, pipeline transformations, private connectivity, or capacity controls are required.
Verdict
OpenSearch Ingestion provides configurable, managed pipelines for real-time data delivery and processing. Buyers should account for OCU-based billing and choose between private VPC connectivity and public access.
Where Specifiction places it
- Telemetry Pipeline Software#9 of 288.2