cisagov/Malcolm v5.0.0

Malcolm v5.0.0

on GitHub

Malcolm v5.0.0 is a major release which addresses idaholab#54, transition from ElasticSearch to OpenSearch

v4.0.1...v5.0.0

Malcolm has switched to the OpenSearch project as the basis of its search and analytics capabilities, mainly for two reasons:

1. Elastic.co's decision to no longer release Elasticsearch and Kibana under an open source license
2. Capabilities available under OpenSearch (and previously under Open Distro for Elasticsearch) that are only available with paid "premium" Elastic.co subscriptions (machine learning anomaly detection, alerting, reporting, etc.)

As the Malcolm project uses semantic versioning when choosing version numbers, this backwards-compatibility breaking change is the reason for bumping the major version number from 4 to 5. It is not recommended to attempt an upgrade from a previous release; a fresh install is required.

Malcolm and Hedgehog Linux may be obtained by pulling or building the Docker images and/or building the ISO installer images as described in the documentation. Unofficial ISO installer images for Malcolm and Hedgehog Linux are not hosted on GitHub, but may be downloaded from https://malcolm.fyi/download/.

Historical context for the events and reasoning behind this change:

• Elastic announces license change

  • Amazon NOT OK
  • Doubling Down on Open
  • Doubling Down on Open, Part II
  • Elastic License v2
  • FAQ on 2021 License Change
    • Does this mean that Elasticsearch and Kibana are no longer Open Source? Yes. Neither the Elastic License nor SSPL have been approved by the OSI, so to prevent confusion, we no longer refer to Elasticsearch or Kibana as open source.
  • old "open source" tier ("Apache 2.0: Now and always" 🙄) goes away
  • The SSPL is not an open source license

• OpenSearch fork:

  • Stepping up for a truly open source Elasticsearch
  • Introducing OpenSearch
  • Truly Doubling Down on Open Source @ logz.io
  • FAQ

• Third-party blogs, etc.

  • Elasticsearch does not belong to Elastic
  • Elasticearch and Kibana are now business risks
  • Is Elasticsearch no longer open source software?
  • The Implications of Elasticsearch and Kibana License Change
  • Let's talk about the Elastic license change
  • Elastic is going closed-source. Where does that leave MSSPs?