Key points

• OpenSearch Service indexes events and logs for low-latency search, aggregation, and operational dashboards.
• Searchable data must be ingested and indexed; an S3 archive remains a separate retention concern.

Best-known use cases

• Index and search operational logs for rapid troubleshooting.
• Build near-real-time dashboards over searchable event data.

What candidates often confuse it with

• OpenSearch serves indexed search and near-real-time analysis; Athena queries logs in S3 without maintaining a search index.

Key takeaway

Choose OpenSearch Service when operators need fast search and dashboards over indexed event data.

Relevant exam tasks

• D3.3 — Task 3.3: Maintain and monitor data pipelines
• 3.3.8 — Analyze logs with AWS services (for example, Athena, Amazon EMR, Amazon OpenSearch Service, CloudWatch Logs Insights, big data application logs).
• D4.4 — Task 4.4: Prepare logs for audit
• 4.4.4 — Analyze logs by using AWS services (for example, Athena, CloudWatch Logs Insights, Amazon OpenSearch Service).

Learn more

• DEA-C01 in-scope services
• DEA-C01 Domain 3: Data Operations and Support
• DEA-C01 Domain 4: Data Security and Governance