Good afternoon, and welcome to the Elastic Third Quarter Fiscal 2021 Earnings Conference Call. All participants will be in a listen-only mode. [Operator Instructions] After today’s presentation, there will be an opportunity to ask questions. [Operator Instructions] Please note, this event is being recorded. I would now like to turn the conference over to Anthony Luscri, Vice President, Investor Relations. Please go ahead.

Thank you. Good afternoon and thank you for joining us on today's conference call to discuss Elastic's third quarter fiscal 2021 financial results. On the call, we have Shay Banon, Founder and Chief Executive Officer; and Janesh Moorjani, Chief Financial Officer. Following their prepared remarks, we will take questions. Our press release was issued today after the close of market and is posted on our website. Slides which accompany this webcast can be viewed in conjunction with live remarks and can also be downloaded at the conclusion of the webcast on the Elastic Investor Relations website, ir.elastic.co. Our discussion will include forward-looking statements, which may include predictions, estimates, or expectations regarding the impact of the COVID-19 pandemic and other information. These forward-looking statements are based on factors currently known to us, speak only as of the date of this call and are subject to risks and uncertainties that could cause actual results to differ materially. We disclaim any obligation to update or revise these forward-looking statements unless required by law. Please refer to the risks and uncertainties included in the press release that we issued earlier today, included in the slides accompanying this webcast and those more fully described in our filings with the Securities and Exchange Commission. We will also discuss certain non-GAAP financial measures. Disclosures regarding these non-GAAP measures, including reconciliations with the most comparable GAAP measures, can be found in the press release and slides. The webcast replay of this call will be available for the next 60 days on our company website under the Investor Relations link. Our fourth quarter fiscal 2021 quiet period begins at the close of business, Friday, April 16, 2021. We'd also like to inform you that we will be participating in the Truist Securities Technology, Internet & Services Conference on March 10 and Berenberg Cyber Security & DevOps Conference on March 12. With that, I'll turn it over to Shay.

Thank you, Anthony. I'm happy to share some highlights from Q3 with you today. It has been a busy start to the year and I’m very proud of everything that we've accomplished this quarter. I’m truly humbled to see the rapid innovation of our solutions, growth in our cloud business and our deepened customer relationship as we scale our go-to-market strategy, the continued optimism and resilience of our employees, customers, partners, and community during this trying time are truly an inspiration. We had a great quarter and once again, we showed strong execution against an ongoing mixed demand environment. In Q3, revenue grew 39% year-over-year, and we saw continued robust customer acquisition and expansion metrics. We ended the quarter with more than 13,800 subscription customers, including over 670 with an annual contract value of more than $100,000. I'm proud of the team and the results and innovations we delivered in Q3. Now I'd like to share more about those innovations with you. At Elastic, every minor release has a major impact. We aim to consistently launch new features every eight to 10 weeks. Our strategy is to build three powerful solutions, enterprise search, observability, and security into a single technology stack. This enables our customers to easily deploy any solution as the needs of their businesses evolve. We recently announced a change to our licensing model, moving our Apache 2 licensed source code in Elasticsearch and Kibana to be dual licensed under the Elastic License v2 and the Server Side Public License, giving users the choice of which license to apply. We also simplified the Elastic License and made it substantially more permissive keeping to our principles of openness, transparency and collaboration. Since introducing the Elastic License, three years ago, we've continued to widen our feature differentiation and have built…

Thanks, Shay and thanks again to everyone for joining us. Q3 was another excellent quarter for Elastic. We once again, delivered strong performance on all our key growth and profitability metrics. Total revenue for the quarter was $157.1 million growing 39% year-over-year. We are very pleased with our performance, which reflects continued execution against our large market opportunity. During the third quarter, the demand environment remained generally similar to the first half of the year. As expected, we saw some headwinds from COVID-19 related to overall spending and slightly longer sale cycles as compared to pre-pandemic levels offset by tailwinds in cloud and adoption of our solutions. Our execution against this backdrop remained consistently strong. Subscription revenue totaled $147.2 million comprising 94% of total revenue. Within subscriptions, revenue from Elastic Cloud was again strong at $44.9 million, growing 79% year-over-year, as customers continue to express a preference for our cloud offerings, as they grow their workloads in the cloud. We saw strength in both our annual SaaS business, as well as our monthly SaaS business. We have rich feature advantages over other cloud offerings and could continue to invest in expanding our reach and our partnerships. Looking ahead, we remain confident that Elastic Cloud will continue to deliver faster year-over-year growth than our overall business. Professional services revenue was $9.9 million growing 10% year-over-year. As I’ve said before, services revenue can fluctuate across quarters depending on the timing of projects and delivery. Moving on to calculated billings. Calculated billings in Q3 grew 41% year-over-year to $173.2 million. Looking ahead, although we don’t formally guide the calculated billings, I will point out that Q4 presents a tough comparison given we had a strong quarter last year. At the end of Q3, total deferred revenue was $334 million, up 59% year-over-year. Remaining…

We will now begin the question-and-answer session. [Operator Instructions] Our first question comes from Brent Thill with Jefferies. Please go ahead.

Good afternoon. Shay, just as it relates to the pricing changes, I'm curious if you could give us your overview. And there's been a lot of questions among your investors about the tailwind and headwind, what this is – what you're seeing short-term and in the long-term effect from your perspective. And for Janesh, if you can just maybe comment the license piece, obviously growing slower, but the SaaS component growing quick, I think that's the shift you want to see, but can you just talk about the dynamic you saw in licensed versus SaaS on the quarter and kind of how you're balancing that going forward? Thanks.

Sure. I'll start. Hi Brent, thanks for the question. When it comes to our subscriptions over the last few years, we introduced an enterprise subscription tier and it started off with having a significant value added in our orchestration capabilities that we allow then gave to self-manage customers to be able to go and run it themselves, whether it's a our own built-in orchestration systems or our Kubernetes integration. When we joined forces with Endgame, we also added to the enterprise subscription to our endpoint product in Elastic and Endgame support. And now with searchable snapshots and the cold and frozen fear that we believe provide significant value to our customers even more by the ability to be coupled compute full storage, as I mentioned, and the ability to really drive down the cost per gigabyte at the expense of speed and we placed under the enterprise subscription. We thought it's a good opportunity to update and to reflect the enterprise subscription price point to reflect all the additional value that we ended up adding over the year and which is quite a bit. So that's the story behind the change, very happy about it. The reaction, as I mentioned on the discrete for own searchable snapshots and the excitement about the ability to have a single technology stand that provides both these, resonating really well with our customer base and the ability to add more data and store data longer at Elastic, and then have a toggle between fast and slightly more expensive on the storage side or slower and have more scale and flexibility, that something that our customers love being able to have access to over the next few quarters. When it's come through it's a fact over short-term or long-term. We think that over the long-term these values that we put will end up providing a tailwind, starting from endpoint – obviously, endpoint security being put into the enterprise subscription, and then now with searchable snapshots and everything that comes with it. But that's going to be gradual and take time. So we don't expect any immediate tailwind until as results of it.

And Brent, just to follow-up on the question about the self-managed business nothing specific to highlight there beyond you touched on the key issue already, which was that, we've seen customers continue to express a preference for cloud, particularly in light of everything happening in the context of the pandemic. And as we've said before, our growth in SaaS will generally mirror those customer preferences and where their work sources reside. So that's what we've seen and SaaS will continue to grow faster than the business overall, specifically within the self-managed business, if I disaggregate that, and look just at the license fees, to be honest, that's as – we've said before that's not really a number we focus on, because we focus primarily on the overall subscription and we just sell ACV. And that license numbers, as a little bit of an artifact of accounting and there's a number of different factors that can affect that. So there's nothing in particular that I would call out there. It's really the continued emphasis on cloud that we see our customer are continuing to drive and our market opportunity as well enough, penetration rates are still low. So I think we have plenty of room to grow on both the self-managed as well as SaaS side. And we're investing towards that.

Thank you.

The next question is from Tyler Radke with Citi. Please go ahead.

Thanks for taking my questions. Shay, I wanted to ask you about the licensing change that was announced recently, and I think there's been some debate out there in the open source community on whether this licensing changes is favorable for the Elastic community. And I guess, for those that those developers and members of the community that are concerned that this is kind of moving away from open source. I guess what do you say to them? And what's kind of your confidence level that you can continue to sustain a really robust community and make sure that your community members are satisfied with the licensing change?

Yes, of course. So, first of all, we announced the licensing change in the vast reaction from our customer and our user base was to be perfectly fine with it. One of the reasons for it, by the way, is that over the last three years, since we introduced our Elastic license the vast majority of our user base north of a 90% have been downloading and using our distribution that already uses the Elastic license. And they've been happy with it and excited about the significant innovation that we’re driven into that proprietary tier that is governed by our elastic license. And those innovations include both busy things like same Elastic chain or observability to Suite or APM or app search and workplace search, as well as smaller more inherent features into our stack. And those users are perfectly fine with the change. It was a non-event for them, and we actually provided them with more options by giving them a choice between both the Elastic License v2 and another one with SSPL as well, that more would be adopted or created. That's the vast majority of the customer base that we have, almost there are some that care a lot about the pureness of an open source license of one or another. But the vast majority of our community are totally happy with our products, our innovation, and I'm very confident about our ability to go and continue to deliver value for this community and the customer set.

Great. And then if I could sneak in a follow-up either for Janesh or are you again, Shay, if I just look at the customers spending more than $100K with you, the growth in that number it's come down a little bit through this year, presumably because of the pandemic, but just wanted to get your thoughts about how we should think about kind of the larger deal activity, particularly as you're heading into your seasonally strongest Q4 here. And I know that's been a focus for you in terms of expansions within larger customers? Thanks.

Yes. Tyler, I’m happy to take that. So, as I look at the customer additions that we had in Q3, whether it’s the total customer account or the customers more than a 100K ACV, we were actually quite pleased with the performance there. To your point, the number of net adds in those – both of those numbers has been consistent with the prior few quarters and in line with what we’ve experienced during the pandemic. So, there’s no surprises on that front for us. I think it actually played out quite nicely. And I think looking ahead to Q4, it’s obviously early to your point, we’ve got a fair amount of business to get done, and it’s our seasonally largest quarter and March and April and April in particular tends to be a very busy month. But the good news for us is that the sales team has continued to work really well over the course of this past year, as you’ve seen strong execution for the first three quarters and just overall disciplined execution. So, we feel pretty good about the outlook that we’ve provided here for Q4. There’s still a lot to get done. So, it’s early days and there’s obviously still all of the effects of the pandemic out there that we deal with, but also some significant structural deal wins that we’ve talked about with preferences for customers shifting towards our solution. Shay touched on a number of those examples. I thought, I think those all end up being catalyst for us. So, as I think about Q4, all of these things are baked into the outlooks that I provided and we’re confident in our outlook for the year.

Thank you.

The next question is from Raimo Lenschow with Barclays. Please go ahead.

Hey, thanks for taking my question and congrats from me. I want to start with one bigger picture question Shay. you were in beta now for schema on read; I was talking to would be more schema on write, schema on read has been more, something that a number of competitor of yours kind of associated with. What does it mean? Is this just like a small add-on thing, or do I need to think slightly more bigger picture about the changes coming that way? And then have one follow-up.

Yes. of course, I can answer it. First of all, we’re very excited about schema on read. We – we’re search people. So, schema on write is what we wake up in the morning and think about, because we want to return response in milliseconds, and the fact that we index everything by default and provide snapper results is what we pride ourselves and that’s an extremely difficult technical challenge to have. And I think we’re one of the only companies out there that provided as a data company, if that makes sense. Over the last couple of years, we worked and explored in trying to support schema on read next to schema on write, in a way that it still works and behaves like our schema on write, except that it’s smaller. And I’m extremely happy with the team being able to provide this core capability into our stack. The way that I think it’s going to manifest itself is by providing more flexibility and more ease of use when it comes to onboarding new types of data sets before you know exactly how the data is structured. And also, when it comes to people that really wants to control how much data they end up storing in schema on read versus schema on write. This is a stack level or like our technology stack level features, so it’s more core and we’ve implemented it at a foundational level. And now, the next step is for all of our solutions think about like the security solution or observability solution and our enterprise search solutions to start to take care of make use of these features in its own curated workflows. I think over the upcoming few quarters, these feature will end up reflecting itself in various areas. And I hope that our users would be very happy about it, because we will be one of the only platform data platforms out there that provides both schema on write and schema on read with a toggle of a button. And that’s exciting, very exciting to me.

Yes, exactly. Yes. That should be very exciting. And then one follow-up for Janesh, it’s like, if you think about the environment over the last year and then potentially kind of improvements going forward, there’s obviously several vectors that you need to think about in terms of like number of deals, deal size, closure rates, et cetera, from what you can see so far, has any of those changed over the last year? And as we kind of think about recovery going forward, where do you think it will start kind of manifesting itself first? Thank you.

Yes. it’s a great question, Raimo and I wish I had the economic crystal ball to answer that question well enough. I can tell you that so far what we’ve seen and the way Q3 played out was very similar to the prior quarters. We’ve not seen any significant shift. We’ve not seen any significant changes or trends. I think if I had to point to maybe one trend, where things start to open up a little bit more in the economy is when economy started to come back a little bit more, I think that’s where you’d be started to see a little bit more activity, which is really as expected. If I think about it in terms of verticals, the same COVID impacted verticals continued to be impacted. We did do some pretty good deals in those verticals as well, but I think it’s too early to call it a trend or a recovery in those areas. If I think about it from a segment lens, again, it was pretty much straight down the middle of the fairway for us in terms of comparing it to prior quarters. SMB continued to be resilient, not as strong as pre-pandemic levels, but very much in line with what we’ve seen here over the course of fiscal 2021 during the pandemic. So I think, looking ahead, it’ll be, we’re quite watchful as we look at all these different inputs. One of the good things for us is we are balanced across geography, and segments and verticals. So, as we see signs of recovery, then we obviously, factor that into our thinking in our model. But as I think about fiscal 2022, to me, it seems likely the economic recovery will be much more gradual.

Okay, perfect. Thank you.

The next question is from Brad Reback with Stifel. Please go ahead.

Great. Thanks very much. Shay, as you look at usage on the SaaS platform, what has surprised you the most, how people are using the product and maybe, how has that sort of modified your future development?

And of course, I – maybe, I answer it in multiple ways. I think I don’t know if it’s a surprise by things to call out that we saw that meant more for our customers. The first one is just the time that we provide them support across multiple cloud vendors. We see more and more customers and users, especially in larger enterprises that like the fact that we provide a seamless experience across cloud vendors whether it’s Google Cloud, AWS or Microsoft, and we’re also taking the extra steps to natively integrate with each one of them, whether it’s billing, whether it’s around security, whether it’s around shipping relevant data sources and things along those lines. And I’d like to call out one of the more highly requested features that we had that we’ve shipped in last quarter – in the quarter, which is the – our cross cluster search and cross cluster replication. That’s pretty unique, if you think about it – if you think about what we do as data, because data has gravity to it and a logging solution or an application that produces logging that produces a significant amount of data. You would want to deploy us next to that application. So, if you have a trading application, you would want to – in London, you would want to deploy it in London. And then if there’s one in Hong Kong or New York, then you would want to deploy next to that in various regions, on even in the same cloud provider. And we provided the ability to cross search across these deployments without having to move the data around, which ended up being very expensive. And obviously, it takes a lot a lot of time. And that was one of the more highly requested features in our cloud, which to me speaks about the fact that almost all the companies out there today are now multi-regional, whether it’s for high availability or for a sovereignty or privacy, or many other reasons and several companies out there as well are multi-cloud, and the fact that we give them the choice to store the data where they want, and then we’ll go and do the hard work of searching across all of it very efficiently. That’s something that resonates really well with our customers.

That’s great. Thank you very much.

The next question is from Kash Rangan with Goldman Sachs. Please go ahead.

Hi, guys. congrats on the quarter. One question for you – each of you Janesh and Shay; one for you, Janesh, if you could just talk about the investments you’re going to be making, what time will you be commencing these investments? Is it a sales and marketing or a combination of sales and marketing research and development, granted that you’ve got a really, really productive sales model. I’m curious what are you looking to achieve? And I know you did say that you’ll be accelerating your investments. I suppose that would mean that that should lead to acceleration growth as well, but just want to clarify that the investment timing and the payoff timing, what exactly are you looking for there? And one for your Shay, it doesn’t look like when you, maybe, it’s just a bit of a comment that is applicable to the hyperscalers. You’ve seen generally somewhat of a U-shape, maybe even a V-shape recovery among the public clouds and even some of the larger companies that are ServiceNow have been talking about a recovery, right. It feels like in your space, it seems to be stretched out a little bit more. I’m just curious if you can just add a little bit more color on why it is taken a little bit longer in your segment of the software industry, granted that your value propositions property you’ve been making all these changes, which are great. Just curious why is it taking a little bit longer in this segment versus the broader segment of software? Thank you so much.

Hey, Kash. So maybe, I’ll answer the first part, the investments that they’re intending to make really, that’s based on the strength we’ve seen so far this year. And so we are accelerating our investments that we’ll start in Q4 itself and extend into fiscal 2022. And really, the goal for us is to address the large long-term opportunity that we see ahead of us is to get out ahead of the pandemic and invest in anticipation of driving that growth. in terms of where the investments will be, it will be across all functions. So clearly, investments in the sales organization on the marketing side as well, but also, in the engineering teams and R&D as well as in the G&A functions needed to support all of that that growth and scale of the business. So, as you think about the nature of those investments, some of those can be a little bit more short-term oriented, but many of them are in fact, long-term oriented, investments in R&D, investments in some of the sales motions that we need to continue to scale. I think those will return – will create returns in the longer term. but clearly, there’s an intent to drive some level of return in fiscal 2022 as well. So, we lay all of that out for you in more detail when we come back on the next call and lay out our guidance for the year, but I’d say, it’s a multi-year horizon form of investment. And what gives us the confidence in that is just the signs that we see from our customers that their spending priorities continue to shift towards areas, where we are very well positioned. So, despite the headwinds we might face from the pandemic in the near-term, we think it’s important for us to invest through the cycle, so that when we all come out of this on the other side, we will be very well positioned to capture the opportunity. I’ll – Shay, do you want to take the other part of the question?

Yes. I’ll take it. So, in terms of what we see when it comes to the recovery, I’ll just start with saying that I’m very happy and proud of the team’s execution in this context. And we delivered strong results in the last few quarters and we’ve overachieved and that’s a testament to, I think the value that we’re creating to our customer base first and foremost, but also just to the resiliency and execution of our company as a whole, and in the team members that we have there. When [ph] come to the shape of the recovery, it’s hard for me to say, if it’s going to be U-shape, V-shape or a linear extrapolation or something along those lines, what I will say is that we do see the effects of the pandemic. They’re still out there. People are still working from home. Our sales cycles are slightly longer. It takes a bit more work and it requires, I don’t know, another approval in the chain of command of approvals for a spend, we managed to go in and get them, but it’s definitely not as it was before the pandemic hit. And there’s more scrutiny around spend. At the same time, we are seeing cases, where there’s customers and our user base is more eager and excited about moving to cloud. But I mentioned in the previous call, our customers tend to move to the cloud as their workload ended up moving to the cloud, because they’re the ones that generate data and they care about deploying elastic next to their workloads. And as long as they’re not moving their actual workloads to the cloud that generates the data, whether it’s security data in SIM, or whether it’s observability data like logging, then they’ll end up preferring to run it on-prem or in a self-managed way. And in that case, I’m encouraged by the fact that we can still go to these customers and tell them, hey, like, you can still deploy next to your workloads now and self-manage. And then when you moved to the cloud, we’ll be there for you, regardless of whichever cloud vendor you choose or region and we can actually go and support a hybrid deployment while you’re at it.

Got it. So, there’s probably a lag, that’s probably a good thing. It gives you good visibility, very quickly, any changes in the competitive environment, pretty stable or any minor fluctuations you see there, and that’s it for me. Thank you so much.

Sure. We haven’t seen any change from a competitive environment versus previous quarters from our perspective and we feel very good about our strength in the observability story and we’re ramping up and within the same market, we’re facing extremely fast to get to a point, where our same product is mature and can take on feature-by-feature replacements of other popular seen vendors and we’re excited about the progress of folding and put security into our stack. And that’s going to be – that’s going to take a few more quarters. but other than that no, we haven’t seen any change from a competitive perspective.

Thank you so much, Shay and Janesh.

Sure.

The next question is from Matt Hedberg with RBC Capital Markets. Please go ahead.

Hi, guys. Thanks for taking my questions. Shay, I wanted to ask, go back to the SSPL, it sounds like no real change to the community or partners, but a couple of days after you made the announcement, AWS had a blog post indicating they were going to fork the code. I’m curious, what has the reaction been from sort of the broader user base to that? And did – does it mean at some point that, there could still be even a tighter relationship with AWS some point, I’m just sort of curious on the status of that.

Yes, of course. So, I would change our license and just to clarify. We change the license to be dual license with both SSPL and the elastic license. Each one basically serves a different camp that cares about different aspects of in the licensing ecosystem, if you will. And we got great reaction far Elastic license V2, by the way, which we simplified while still maintaining the protections. When it comes to the announcement of fork, we’ve been dealing with Amazon efforts in creating a fork, not creating a fork, Open Distro, and try to take elasticsearch and we start to be in control of its distribution channels and I’ve been very happy with our ability to go and control it, and being able to go and provide more value and more differentiation to proprietary features that already exist now, right. It’s like, yes, in the past three years, we work very hard to add significant amount of proprietary differentiation and get to a point, where any type of changes will not matter that much, because I think our users just will go to their feet and have been voting with their feet when it comes to using our product. when it comes to looking forward, nothing is off the table from my perspective. to me, this license change have been drawing a line in the sand when it comes to saying, hey, like that level of what we believe to be brand and trademark abuse, and we’re going to courts around it and things along those lines. we’re changing the license to draw a stronger line in the sand, but at the same time are very happy to work with Amazon. If they decide to do, to work with us, we are only working with their marketplace teams and other functions, and we will be happy to work with them. It just needs to be on their mutual terms, if that makes sense.

Got it. That makes sense. That’s super-helpful. And then I guess, enterprise search, you guys, we’ve been talking about this for a long time, partners seem really, really excited about that. I guess Shay, where are we in sort of the maturation of enterprise search in terms of sort of wiring up additional API integrations. I know you talked about adding box and Jira Cloud and Confluence Cloud, but you’re just sort of curious on where we’re at there and what are you most excited about in terms of the usage of enterprise search?

Yes. of course, there’s a few things that I’m excited about. The first part is a Workplace Search, which is a relatively new product. And if you think about, probably every company in the world today, the companies became more virtual, they generate more data in the digital mechanisms, they chat more, send more emails, write more documents versus face-to-face meetings. And all of that is amazing IP that you just want to put at the hands of every single employee in the company and have it be searchable, obviously with the right controls and privacy controls and things on those lines. And that’s something that we’ve done at the last week. And I’m happy to be able to provide that to all of our customer base. That’s the thing that makes me excited about Workplace Search specifically. It’s a new product. We’re still working very hard to centralize it build, as you said, more connectors, get to a point, where other users and customers can build their own connectors for their own data sets. So, it’s just early phases of it, but we built this product as a distributed company for the needs of a distributed company. And I think that’s being realized by a whole set of companies out there that are now suddenly found themselves working in a decentralized fashion. I think the other part is App Search, which we’ve invested out, but we – the main focus was to get to a point, where we can shoot Workplace Search. And to me, App Search is about how quickly and how easily can you add a search box to your website or to your application and we’ve made some investments there and we announced the date, the web caller. So, we’ll go and call a website or anything along those lines when it comes to providing more data. So you can search over versus using “like Real Elasticsearch” which tends to require more developer time and more interactions and more roll up your sleeves and go and build something to add a search box to your website. And that part makes me excited because it means that, our products become easier to use more plug and play and more easier to adopt to across the IT ecosystem versus just developers, if you will.

Makes a lot of sense. Congrats on the quarter, guys.

Thank you very much.

The next is from Ittai Kidron from Oppenheimer. Please go ahead.

Thanks. Hey guys, a great quarter Shay, maybe we could start with you, if you could double click a little bit on the cloud business. How much of it by the way is done at the enterprise price tier versus in other price tiers? And with the change of licensing, have you seen any carryover from AWS Elasticsearch. Have you seen any people move away from that service into yours?

Yes. Happy to answer. So I’d start with the enterprise subscription tier. So the enterprise subscription tier is relatively new and when we introduce it at the last week, the biggest reason why someone would end up engaging with us on the enterprise subscription tier was actually for self-managed customers, because we took our cloud product, package it and allow users to run it themselves, in case they couldn't run in the cloud for various reasons, they haven't migrated yet to the cloud or something like that. So that's what we call Elastic Cloud Enterprise and now Elastic Cloud on Kubernetes. So for a pretty long period of time, the biggest value proposition in our enterprise subscription tier was actually just for self-manage. When we joined forces with Endgame, we added endpoint security, the Elastic Endgame – endpoint security into the enterprise subscription. And we’re working very hard obviously to fall all the endpoint capabilities into our stack, obviously that heavily applies to our cloud customers in this case. And now with searchable snapshots that's even going to be even stronger, especially with the GA-ed of our cold tier and the frozen tier that truly decouples storage from compute that will come in the next few quarters. So all of the feature set and the capabilities and the value in the enterprise subscription tier that applies to our cloud customers have been relatively recent, especially with searchable snapshot. So until now we haven't really seen a larger adoption of it due to it, which is perfectly expected. But I think that we will start to see more and more adoption of wider passive solutions here for our cloud customers moving forward.

Okay. And as far as the AWS carryover?

Yes, of course. So we see users migrating from AWS to Elastic, especially, since we provided a more advanced capabilities like private link and others, or if they want to go and start to deploy on other cloud providers. And thanks to the differentiation of our feature set. I mean the size of it is always tricky to capture because you don't always know because our adoption cycle for this is mostly around self-service, just someone coming in and we start to create an account and start to migrate. So we –it's trickier on our end at least to try to go and quantify it.

Got it. And then as a follow-up Janesh on the expansion rate last quarter, you've talked about it dropping a little bit. It sounds like if I'm interpreting your commentary correct, that it was perhaps stable this quarter. So maybe you can give us some color on that. And also in the context of the fourth quarter or tough compare, how should we think about that expansion rate in respect to that comment.

Yes Ittai, happy to touch on that. I'll maybe just add one other thought on AWS as well, right, in terms of the comment that Shay made. I think we see some of those customers coming to us – coming to the Elastic Cloud from AWS because of the richness of the features, we've always seen that. I think the impact of the licensing changes will provide a little bit of a tailwind, but I think it plays out over the medium to long-term there. And then in terms of the net expansion rate, the yes, I think it’s categorizing it as stable as the right way to think about it, it usually does bounce around by a couple of points here or there, and it remained essentially modestly above 130%, so very consistent with the last quarter. And if I think about that in terms of Q4 and how that might play out, look, I think depending on how the business unfolds in Q4, all of our customer metrics across new and renewals and expansions will just mirror that overall performance. So I'm not discreetly modeling a specific percentage myself at this stage. But overall, as we've talked about on this call, we feel really good about the relevance of our solutions, the alignment to customer priorities and the opportunity ahead of us. So we’ll execute here in the next couple of months and then come back and share more with you in 90 days time.

Very good. Good luck guys.

The next question is from Mark Murphy with J.P. Morgan. Please go ahead.

Thank you very much. Shay, I'm curious how Elastic and your customers process to the solar wind security bridge, and whether you're seeing any incremental opportunities there to capitalize on that? And also on the topic of security, just how was your visibility into doing some of the wholesale replacements of incumbent SIEMs out there in the marketplace?

Yes. I'll start with solar winds, we haven't seen – first of all, we saw an increase in attention to security generally between our – within our customer base and our user base. So solar wind definitely put security, conscious people into the forefront, and they're trying to think about, okay, how do we make sure that this doesn't happen to us. And we have various answers to that question, some features that we develop that actually applied directly to the solar winds bridge to the ability to gather all of the data that is generated by supply chains to make sure that you try to find a nominalism. And that's something that we do really well as a company and as a security product. But we haven't seen like any tailwind of someone going and suddenly buying our security products left and right, or something like that, it's more of a thoughtful implementation and try to make sure that the aspects of solar wind is being addressed by customers that end up adopting us for security use cases. When it comes to wholesale replacement with GA-ed our SIEM solution and I'll have a call out to our – to the Endgame team to join us in the existing team that we have the End game team and the team have done an amazing job in pulling forward a future and releasing it sooner. We probably have a couple of more quarters to get to a point where we feel like the product can stand our wholesale replacement, if that makes sense have an existing incumbent, when it comes to feature-by-feature comparison. So today we see obviously adoption of our SIEM product, but it's more around, hey, we're going to use the features as used today, but we're also betting about the fact that we're going to be there for our customers in two quarters or three with the full set of features, that's where we stand. When it comes to actual replacements, the reason for closed winds are the usual one that you would expect from efficiency, speed to give answers to a threat hunters out there to applicability of our solution. The fact that we have worked really hard to fold the endpoint security and sales and working on that, our vision when it comes to security and how much we try to address the biggest story and actually go and provide outcomes to customers versus trying to mark a feature here and there in security.

Thank you, sir. And Janesh, as a quick follow-up, I was looking at your total cost and expenses, I think they've only grown about 19% year-to-date, it's very nice discipline, you've had the solid margin expansion, and you're now signaling, you're going to ramp it up in fiscal 2022. I'm wondering about any sense of magnitude for instance, could you accelerate that closer to say 25% or 30% cost and expense growth into fiscal 2022, just anything to help us understand the magnitude of that comment.

Yes, Mark. So in terms of the investments we made this year, we consciously were a bit slower in our fiscal Q1, and then we've started to increase in Q2 and in Q3 as well. So you look at the sequential increase in spending in the last couple of quarters, it's sort of been in that $10 million to $15 million range, and you can then get into the implied expense guidance embedded in the Q4 numbers. And if I think about the school 22, as I said earlier in the call, the way we're currently thinking about it is that the off margin will probably be a few points lower than fiscal 2021. And then we break that out a little bit more discreetly in terms of errors, investments and so forth as we work through our planning process.

Thank you very much.

This concludes our question-and-answer session. I'd like to turn the conference back over to Shay Banon for any closing remarks.

Thank you. And thank you for joining us today. We’re very pleased with our third quarter results and the main focus on addressing the large and exciting market opportunity ahead of us.

The conference has now concluded. Thank you for attending today’s presentation. You may now disconnect.