Elastic security operations assistant using Amazon Bedrock (Anthropic Claude 3)
Elastic built the Elastic AI Assistant to help security operations teams with alert triage and investigation, summarize environments, convert queries into Elastic syntax, and answer questions over large bodies of security log data using retrieval-augmented generation with Elasticsearch Relevance Engine on AWS. Users can select Anthropic Claude 3 models via Amazon Bedrock, and Elastic emphasizes privacy, security, scalability, and private connectivity while helping customers reduce incident detection and mitigation time.
- Organization
- Elastic
- Industry
- Tech & Comms
- Location
- United States
- Published
- July 2026
Reported outcomes
Strategic outcomes
Why do we believe this deployment?Customer identity, provider attribution, maturity, and source checks
- Customer
- Elastic
- Provider
- AWS
- Maturity
- Exploring
- Linked source
- AWS Customer Stories
Elastic customers use private connectivity and model evaluation capabilities while selecting the best model for the task
Primary read
Use case focus
Showing 3 of 3
- 1Security operations
- 2Conversational assistants
- 3Threat detection
- Security teams needed to understand and triage large volumes of alerts and security logs more quickly while maintaining privacy and security controls.
- Users unfamiliar with Elastic syntax needed help writing queries and reporting on security issues.
- Elastic used Amazon Bedrock with Anthropic Claude 3 models to power the Elastic AI Assistant.
- The assistant uses RAG with Elasticsearch Relevance Engine to fetch company data, enrich prompts and responses, summarize environments, and convert queries into Elastic syntax.
- Elastic customers use private connectivity and model evaluation capabilities while selecting the best model for the task.
- Customers save hours identifying, remediating, and reporting on security issues.
- Average time to respond is reduced and incident management is improved.
- Analysts can write reports and generate queries more quickly.
Architecture
Elastic uses Amazon Bedrock to access Anthropic Claude 3 models in its Elastic AI Assistant. The assistant uses retrieval-augmented generation with Elasticsearch Relevance Engine to enrich prompts and responses with company data, supports security alert triage and investigation, converts queries into Elastic syntax, and uses AWS private connectivity for access to supported AWS services.
Sources & evidence1
- Customer explicitly identified
- Deployment status explicitly supported
- Primary source available
- Technical implementation details available
AI-generated summary. Verify important details with the linked sources before relying on this case.
Explore related AI use cases
Was this useful?
Community
Comments
No published comments yet.