Wingetlywingetly
← All apps

Elasticsearch

by Elasticv7.16.3

Last updated

Elasticsearch is a distributed, RESTful search and analytics engine

Visit homepage

Install with winget

$ winget install --id Elastic.Elasticsearch --exact --version 7.16.3

Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.

Silent install command for Elasticsearch

Elasticsearch uses MSI (WiX). The silent install switches are /quiet /norestart.

One-line silent install (x64)
msiexec.exe /i elasticsearch-7.16.3.msi /quiet /norestart

See the full silent install reference for Elasticsearch →

Built by Pckgr

For Intune admins

Stop chasing app updates. Pckgr patches them for you.

Automated application patching for Microsoft Intune. Pckgr keeps a curated library of 1,000+ apps continuously up-to-date in your tenant via Microsoft Graph - no manual repackaging, no chasing vendor sites.

Start free 30-day trial

No credit card required.

About

Elasticsearch is the distributed, RESTful search and analytics engine at the heart of the Elastic Stack.

You can use Elasticsearch to store, search, and manage data for:

• Logs

• Metrics

• A search backend

• Application monitoring

• Endpoint security

and more!

Installers · v7.16.3

ArchitectureTypeScopeInstallDownload
x64MSI
WiX
-Direct

Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.

Security

25 known CVEs via NVD

  • medium5.4Patched in wingetCVE-2026-78607affects before 8.19.19, 9.3.8, 9.4.4Sep 1, 2026

    Missing Authorization (CWE-862) in the Elasticsearch custom inference service can lead to information disclosure via Privilege Abuse (CAPEC-122). A user holding only inference execution privileges could cause outbound inference traffic to be directed to a destination of their ch...

    Vendor advisory
  • medium5.9Patched in wingetCVE-2026-78605affects before 8.19.20, 9.4.5Sep 1, 2026

    Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') (CWE-444) in Elasticsearch can lead to information disclosure via HTTP Request Smuggling (CAPEC-33). Under specific proxy deployment configurations, a network attacker could obtain confidential responses int...

    Vendor advisory
  • high8.8Patched in wingetCVE-2026-72649affects before 8.19.20, 9.4.5Sep 1, 2026

    Deserialization of Untrusted Data (CWE-502) in the Elasticsearch machine learning component can lead to remote code execution via Object Injection (CAPEC-586). A specially crafted trained model artifact could cause attacker-controlled logic to execute with a materially broader s...

    Vendor advisory
  • medium4.9Patched in wingetCVE-2026-56143affects before 8.19.20, 9.3.0Sep 1, 2026

    Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130). A user with elevated privileges can submit a specially crafted request that causes excessive memory consumption, which may render...

    Vendor advisory
  • medium6.5Fix in v7.17.24CVE-2026-49090affects before 7.17.24, 8.15.0Jul 1, 2026

    Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user can submit a specially crafted bulk request that causes sustained high CPU consumption, which can render the affected node una...

    Vendor advisory
  • medium4.9Patched in wingetCVE-2026-56149affects before 8.19.17, 9.3.6, 9.4.3Jul 1, 2026

    Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130). A user with elevated privileges can submit a specially crafted machine learning request that causes excessive memory consumption,...

    Vendor advisory
  • medium6.5Patched in wingetCVE-2026-56148affects before 8.19.17, 9.3.6, 9.4.3Jul 1, 2026

    Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user can submit a specially crafted query that causes excessive resource consumption while the request is processed, which may render the affe...

    Vendor advisory
  • medium4.9Fix in v8.19.8CVE-2025-68390affects before 8.19.8, 9.1.8, 9.2.2Dec 18, 2025

    Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow an authenticated user with snapshot restore privileges to cause Excessive Allocation (CAPEC-130) of memory and a denial of service (DoS) via crafted HTTP request.

    Vendor advisory
Showing 8 of 25. Source: NVD, updated 4h ago. Patch status is best-effort: NVD's fix version is compared against the latest version in winget, but the two version formats don't always align. Confirm with the vendor advisory before treating any specific build as safe.

See a CVE that affects your fleet? Push the patched version to Intune in one click with Pckgr - automated patching is the only way to keep up.

Related apps

  • Beats winlogbeatElastic
    Elastic.Winlogbeatv9.5.4

    Fetches and ships Windows Event logs

  • Beats packetbeatElastic
    Elastic.Packetbeatv9.5.4

    Monitors the network and applications by sniffing packets

  • Beats metricbeatElastic
    Elastic.Metricbeatv9.5.4

    Fetches sets of metrics from the operating system and services

  • Beats heartbeatElastic
    Elastic.Heartbeatv9.5.4

    Ping remote services for availability

  • Beats filebeatElastic
    Elastic.Filebeatv9.5.4

    Tails and ships log files

  • Beats functionbeatElastic
    Elastic.Functionbeatv8.17.3

    Ship cloud data with serverless infrastructure.

More from Elastic or browse search-engine.

Frequently asked questions

How do I install Elasticsearch on Windows?
Open Windows Terminal, PowerShell, or Command Prompt and run: winget install --id Elastic.Elasticsearch --exact --version 7.16.3. winget downloads the installer from Elastic and runs it. Requires Windows 10 (1809+) or Windows 11.
How do I install Elasticsearch silently for unattended deployment?
Add --silent and accept the agreements upfront: winget install --id Elastic.Elasticsearch --exact 7.16.3 --silent --accept-package-agreements --accept-source-agreements. This is the variant Intune, Configuration Manager, and other deployment tools should use.
What are the silent install switches for Elasticsearch?
Elasticsearch uses MSI (WiX). Run the downloaded installer with: msiexec.exe /i elasticsearch-7.16.3.msi /quiet /norestart. The silent switches are /quiet /norestart.
How do I uninstall Elasticsearch via winget?
Run: winget uninstall --id Elastic.Elasticsearch --exact. Add --silent for unattended uninstalls. winget will use the registered uninstaller from Elasticsearch's Apps & Features entry.
Is Elasticsearch free?
Elasticsearch is distributed under Dual licensed under the Elastic License and the Server Side Public License. Refer to the publisher (https://www.elastic.co/downloads/elasticsearch) for the full license terms - Wingetly itself does not charge for installation.
Does Elasticsearch work on Windows 10?
Yes, as long as your Windows 10 build supports winget (1809 or newer). winget ships with App Installer on Windows 10/11 and pulls Elasticsearch directly from the publisher.
How do I keep Elasticsearch up to date?
Run winget upgrade --id Elastic.Elasticsearch --exact, or winget upgrade --all to update everything winget tracks. We index 10 versions of Elasticsearch from microsoft/winget-pkgs.

Recent versions

  • 7.16.3latest
  • 7.16.2
  • 7.15.1
  • 7.14.2
  • 7.14.1
  • 7.14.0
  • 7.13.4
  • 7.13.3
  • 7.13.2
  • 7.13.1