More study resources

About this exam

The Elastic Certified Engineer (ECE) is Elastic's professional certification for practitioners who build and operate solutions on Elasticsearch. Elastic introduced the credential in 2018, describing it as "a rigorous, performance-based exam that challenges people on a full range of Elasticsearch skills across operations, development, and more." Rather than testing recall, the exam presents real-world scenarios: candidates must complete a series of challenging, hands-on tasks within three hours, all performed on a collection of Elasticsearch clusters. As the first certified engineer put it, "The exam was not an examination of knowledge, but of how well you can implement Elasticsearch as a solution."

The credential suits search engineers, consultants, system architects, and administrators who already work daily with the Elastic Stack and want external validation - certified engineers report that it signals expertise to clients and employers. Sessions are remote-proctored with webcam monitoring, and candidates describe the supervision as strict.

Preparation is hands-on. Certified engineers typically combine Elastic's official documentation with structured training (Elasticsearch Engineer I and II are commonly cited), then build and configure their own clusters to practise index and cluster management, search, aggregation, Watcher, and machine learning. Studying real use cases - not just individual features - is the recurring advice, because the exam asks you to combine functions to solve a problem.

This page is independent study material and is not affiliated with or endorsed by Elastic. Always confirm current exam logistics on Elastic's official certification page.

What you'll study

Common questions

About Elastic Certified Engineer preparation

What is the format of the Elastic Certified Engineer exam?

It is performance-based. Elastic describes it as a rigorous, performance-based exam covering a full range of Elasticsearch skills across operations, development, and more. You do not answer multiple-choice items; you complete hands-on tasks directly against live clusters, and your work is assessed on whether the requested outcome was actually achieved.

How long do I have to complete the exam?

Three hours. Elastic states that candidates must complete a series of challenging, real-world, hands-on tasks within three hours, all performed on a collection of Elasticsearch clusters. Because the workload is scenario-driven rather than item-driven, budget your time early and move on from a task that is consuming disproportionate effort.

Is it a knowledge test or a practical test?

Practical. Hiroshi Yoshioka, the first person certified, said the exam was not an examination of knowledge but of how well you can implement Elasticsearch as a solution. You are given a use case and asked whether you can solve the problem by combining the different functions of Elasticsearch.

Which Elasticsearch areas does the exam cover?

Elastic frames it as a full range of Elasticsearch skills across operations and development. Certified engineers describe preparing around index and cluster management, search, aggregation, Watcher, and machine learning, alongside data processing and ingestion tooling. Treat operations and development as equally weighted in your study plan rather than specialising in one.

How should I order my preparation?

A commonly reported path: start with Kibana visualisations, move to data processing and inputs with Logstash, then deepen into Elasticsearch itself - search, aggregation, Watcher, and machine learning - and finally re-read the official documentation on index and cluster management. Structured training such as Elasticsearch Engineer I and II is frequently cited as the point where gaps became obvious.

How difficult is the exam in practice?

Certified engineers consistently describe it as hard. One CTO who passed called it "not easy"; another said the certification lets you tackle issues you do not necessarily see in everyday work. The difficulty comes less from obscure features than from needing to select and combine the right functions quickly under time pressure.

What is the most common way candidates fail?

Knowing features in isolation but not being able to combine them to solve a stated use case. Candidates who only read documentation and never build clusters tend to struggle. Practise end-to-end scenarios - ingest data, model it, query it, aggregate it, alert on it - so that choosing the right tool under time pressure becomes routine.

Is the exam proctored?

Yes, remotely with webcam monitoring. The first certified engineer noted that monitoring via web camera during the examination was more severe than expected, with the proctor paying attention to slight movements of the eyes and mouth. Assume a quiet, private room, a working camera, and no interruptions or second screens.

How much does it cost, and what is the retake policy or validity period?

Those details are not stated in the Elastic blog posts this page is based on, so we do not publish figures that may be out of date. Fees, retake rules, and recertification or validity terms are set by Elastic and change over time - check Elastic's official certification page before booking.

Is the Elastic Certified Analyst the same certification?

No. Elastic Certified Analyst is a separate, newer credential designed for data analysts who have mastered analysing and observing time-series data using Kibana. It is a distinct certification aimed at a different role, not a revision of the Elastic Certified Engineer exam, and the two should not be confused when planning your study path.