1. Project Overview

KnowSearch is a zero-intrusion, multi-tenant Elasticsearch GUI management platform designed for Elasticsearch developers and operations engineers, built around clusters and indexes. Proven by Didi's PB-scale massive index data workloads and refined through hands-on operation of over 1,000 financial-grade ES clusters, it provides a visible, manageable, and controllable service ecosystem built around Elasticsearch.

2. Open Source License

The author has not yet specified an open-source license.

3. Screenshots

4. Feature Overview

A zero-intrusion, multi-tenant Elasticsearch GUI management platform designed for Elasticsearch developers and operations engineers, built around clusters and indexes.

• Built a self-service ecosystem for ES users
• Self-service cluster and index resource application and management
• Low-barrier data modeling
• Flexible data exploration with DSL/SQL
• Self-service troubleshooting based on DSL query templates
• Built a scenario-based operations service ecosystem for ES maintenance
• Proactive cluster issue detection based on Dashboard
• Rapid diagnosis of frequently occurring issues using cluster dashboards
• Cluster management supports centralized management of all existing clusters running versions 5.X and above, with batch support for frequently performed cluster and index changes
• Built on the native ES gateway, providing zero-intrusion, plugin-based capabilities for query/write rate limiting, permission verification, cross-cluster access, and DSL query template analysis and management

5. Tech Stack

KnowSearch Features

Didi extensively uses ES to power fundamental search services across business scenarios such as log exploration and security analysis, near-real-time transaction data retrieval, and enterprise SKU search and recommendations. Built on open-source Elasticsearch, it provides enterprise features including rapid offline index importing, cross-cluster replication, and index template services. The platform offers the following features:

• Zero-intrusion, unified management of multiple mainstream Elasticsearch versions, including 5.X, 6.X, 7.X, and 8.X, with centralized multi-cluster management
• Proactive inspection of 30+ stability and performance risk points across clusters, nodes, and indexes, with unified presentation through Dashboard
• Exploration of 200+ metrics across clusters, nodes, and indexes, year-over-year and period-over-period trend analysis, and scenario-based metric filtering to facilitate efficient issue diagnosis
• Monitoring and analysis of 30+ user write and query gateway metrics from application, index, query template, and ClientNode perspectives, including period-over-period and year-over-year comparisons
• Dynamic cluster configuration management, integrated Sense commands for scenario-based operations, SearchProfiler cluster slow-query analysis, and GUI integration for quick cluster commands
• GUI-based batch execution of frequently used operations, including index Mapping/Setting/alias management, RollOver/Shrink/Split/FroceMerge, and read/write access control