---
title: OpenSearch domains should have the latest software update installed
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: >-
  Docs > Datadog Security > OOTB Rules > OpenSearch domains should have the
  latest software update installed
---

> For the complete documentation index, see [llms.txt](https://docs.datadoghq.com/llms.txt).

# OpenSearch domains should have the latest software update installed
 
## Description{% #description %}

This control checks whether an Amazon OpenSearch Service domain has the latest service software update installed. The control passes when AWS reports no available update and the update status is `COMPLETED` or `NOT_ELIGIBLE`. Pending, eligible, and in-progress updates fail. Engine upgrades are evaluated separately from these service software patches.

## Remediation{% #remediation %}

To identify and install the latest software updates for your Amazon OpenSearch Service domains, refer to the [Updating an Amazon OpenSearch Service Domain](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/upgrade-domains.html) section of the Amazon OpenSearch Service Developer Guide.