Efficient and Ease of Use

You can get insights from terabyte-scale data in milliseconds. In addition, you can use the visualized platform for data display and analysis.

Flexible and Scalable

You can request resources as needed and perform capacity expansion online with zero service interruption.

Custom Word Dictionary

Custom word dictionaries are supported. You can modify the word dictionary without the need of restarting the instance.

Easy O&M

CSS is a fully-managed, out-of-the-box service. You can start using it with several clicks, instead of managing clusters.

High Reliability

You can choose to trigger snapshots manually or on a periodic basis for backup and restore snapshots to the current or other clusters. Snapshots of a cluster can be restored to another cluster to implement cluster data migration.

• Automatic backup using snapshots

CSS provides the backup function. You can enable the automatic backup function on the CSS management console and set the backup period based on the actual requirements.

Automatic backup is to back up the index data of a cluster. Index backup is implemented by creating cluster snapshots. For backup of the first time, you are advised to back up all index data.

CSS allows you to store the snapshot data of Elasticsearch instances to OBS, thereby achieving cross-region backup with the cross-region replication function of OBS.

For details, see Index Backup and Restoration.

• Restoring data using snapshots

If data loss occurs or you want to retrieve data of a certain period, click Restore in the Operation column in the Snapshots area to restore the backup index data to the specified cluster by using existing snapshots. For details, see Index Backup and Restoration.

• Zero service interruptions under specification changes

CSS supports cluster capacity expansion, disk capacity expansion, and word dictionary updates. Services are not interrupted during the expansion or update.

High Security

CSS ensures secure running of data and services from the following aspects:

• Network isolation

  The network is divided into two planes, service plane and management plane. The two planes are deployed and isolated physically to ensure the security of the service and management networks.

  • Service plane: refers to the network plane of the cluster. It provides service channels for users and delivers data definition, index, and search capabilities.
  • Management plane: refers to the management console. It is used to manage CSS.
  • VPC security groups or isolated networks ensure the security of hosts.
• Access control
  • Using the network access control list (ACL), you can permit or deny the network traffic entering and exiting the subnets.
  • Internal security infrastructure (including the network firewall, intrusion detection system, and protection system) can monitor all network traffic that enters or exits the VPC through the IPsec VPN.
  • User authentication and index-level authentication are supported. CSS also supports interconnection with third-party user management systems.
• Data security
  • In CSS, the multi-replica mechanism is used to ensure user data security.
  • Communication between the client and server can be encrypted using SSL.
• Operation audit

  Cloud Trace Service (CTS) can be used to perform auditing on key logs and operations.