OpenSearch Mastery (Senior → Principal)

Operate

• Start from workload type: product search, log analytics, security analytics, or mixed.
• Treat mappings, analyzers, shards, retention, and cluster topology as architectural decisions.
• Separate relevance needs from ingest-heavy observability defaults.
• Optimize for predictable operations and recoverability, not demo queries.

Default Standards

• Important fields should have explicit mappings.
• Shard count is an operational budget.
• Relevance changes must be evaluated, not guessed.
• Retention and ILM/ISM must match business value.
• Search clusters and logging clusters should not be treated as identical by default.

References