Elastic Announces General Availability of Cross-Project Search for Querying Across Serverless Projects Without Moving Data

Elastic announced the general availability of cross-project search for Elastic Cloud Serverless. The feature lets security analysts, SREs and application engineers query data across multiple serverless projects, regions, cloud providers and project types without moving or duplicating data. The release aims to provide unified search while preserving separate-project data architectures and avoiding centralized-data operational overhead.

Analysis

CPS addresses a real architectural friction in distributed observability and security deployments: customers can preserve data residency, tenant isolation and workload segmentation while improving analyst query reach. The economic benefit to ESTC is indirect—lowering deployment complexity should improve serverless attach and reduce expansion friction—but it does not itself establish incremental consumption, pricing power or competitive displacement. Near-term equity impact is therefore likely limited unless management quantifies serverless consumption growth, cross-project query usage, or conversion from self-managed/managed clusters.

The more important competitive implication is in security operations. Elastic can position a federated search layer against Splunk/Cisco (CSCO), Datadog (DDOG) and Microsoft Sentinel (MSFT), particularly for multinational enterprises where centralizing telemetry creates governance and egress-cost objections. However, federated querying can shift compute costs to the query layer; if customers perceive latency, cross-cloud egress, or unpredictable consumption bills, the feature could impair gross-margin mix or constrain adoption rather than deepen workload penetration.

Over the next 1-3 months, watch for CPS inclusion in large enterprise renewals and any commentary that serverless is gaining share of Elastic Cloud bookings. The 6-18 month upside case is improved net retention from security/observability consolidation, but that requires cross-project search to become a workflow standard rather than a feature checkbox. A meaningful downside signal would be serverless growth failing to accelerate while cloud gross margin compresses, implying the product is adding infrastructure cost without materially lifting consumption.

Key Decisions for Investors

• No standalone directional trade on this release; maintain ESTC as a watch item until usage or commercial metrics validate the feature. Reassess after the next earnings call for disclosed serverless consumption, cloud net retention, or large-enterprise security wins.
• For existing ESTC longs, retain exposure only if Elastic Cloud growth and non-GAAP gross margin remain consistent with prior trajectory; reduce if management identifies elevated cross-cloud infrastructure or egress costs without an offsetting consumption uplift.
• Monitor ESTC relative to DDOG and CSCO over the next 1-3 months: sustained ESTC outperformance accompanied by evidence of security/observability consolidation would support a long ESTC / short DDOG pair, but do not initiate absent customer-adoption evidence.
• Set an earnings alert for serverless pricing or margin commentary. A disclosed increase in query-related infrastructure expense, or lack of serverless adoption metrics, falsifies the thesis that CPS improves monetizable platform stickiness.