TechPrufer
Get started
Elastic
Elastic logoElastic · Feature trail

MOSA Compliance for Data and Analytics

2 posts · Sep 2026

What this trail covers

Elastic's platform supports the DoD's Modular Open Systems Approach (MOSA) by providing a severable data and analytics module that integrates with existing systems. Key aspects include leveraging OpenTelemetry for ingestion, OCSF/STIX/TAXII for security content, REST/JSON APIs for query and management, standard identity protocols (SAML, OIDC, PKI), S3 API for storage snapshots, and Kubernetes orchestration via Elastic Cloud on Kubernetes. The platform's open-source roots (Apache Lucene, AGPL v3). This post details how federal agencies can leverage Elastic to meet CISA's Logging Reference Architecture (LRA) requirements for OMB M-26-14, focusing on schema-first architecture with Elastic Common Schema (ECS), searchable data directly from object storage, policy enforcement points, and AI integration for logging operations and analysis. It emphasizes measurable normalization and data quality views, and the ability to keep data searchable directly from object storage.

All Elastic trails
  1. CISA Logging Reference Architecture for OMB M-26-14: A Federal Agency Action PlanThis post details how federal agencies can leverage Elastic to meet CISA's Logging Reference Architecture (LRA) requirements for OMB M-26-14. It highlights the importance of a schema-first architecture using Elastic Common Schema (ECS) for measurable normalization and data quality. It also emphasizes keeping data searchable directly from object storage, implementing policy enforcement points, and integrating AI for logging operations and analysis. The post provides actionable advice for agencies to build their logging plans, focusing on these five areas: schema-first architecture, searchable data from object storage, policy enforcement points, producing logs for external authorities, and AI integration.
  2. Open by design: How Elastic supports MOSA, the DoD's Modular Open Systems ApproachThis post details how Elastic's data and analytics platform supports the DoD's Modular Open Systems Approach (MOSA) by emphasizing severability, standard interfaces, and flexible deployment. It highlights the use of OpenTelemetry for ingestion, OCSF/STIX/TAXII for security content, REST/JSON APIs for query/management, standard identity protocols (SAML, OIDC, PKI), S3 API for snapshots, and Kubernetes orchestration via ECK. The post also discusses the AGPL v3 license option for Elasticsearch and Kibana, reinforcing the commitment to open source and competition. It maps Elastic's capabilities against MOSA's five tenets: modularity, openness, scalability, flexibility, and reusability, positioning Elastic as a data and analytics module that can be integrated and removed without impacting upstream data producers.