Comment by bhattchaitanya

The query capabilities of elastic is subpar compared to Splunk and not feasible for us. Elasticsearxh does not support JOINS which is a huge trade off for us