Updated on 2023-12-05 GMT+08:00

Adding a Cloud ES Data Source

This section describes how to add a Cloud ES data source.

Constraints

When you add a cloud ES asset, the created CSS cluster must be a CSS cluster that has not enabled HTTPS authentication.

Prerequisites

Procedure

  1. Log in to the management console.
  2. Click in the upper left corner of the management console and select a region or project.
  3. In the navigation pane on the left, click and choose Security & Compliance > Data Security Center.
  4. In the navigation pane, choose Asset Management > Assets, and click the Big Data tab. The big data asset list is displayed.

    Figure 1 Accessing Elasticsearch assets

  5. In the upper left corner of the Elasticsearch asset list, click Adding a Cloud ES Data Source.
  6. In the displayed dialog box, set parameters. For details, see Table 1.

    Figure 2 Adding a cloud ES data source
    Table 1 Cloud ES data source parameters

    Parameter

    Description

    Example Value

    Asset

    Enter an asset name containing 4 to 255 characters.

    DSCESTest

    Big Data Type

    Select CSS (ElasticSearch) from the drop-down list box.

    --

    ElasticSearch cluster

    Select an ElasticSearch cluster from the drop-down list box.

    --

    Version

    Version number corresponding to the big data type

    5.x

    Database Server Address

    Select the IP address of the Cloud ES data source server from the drop-down list.

    192.168.0.233

    Port

    Enter the port number of the ES data source server.

    9200

    Index

    Enter the index corresponding to the Cloud ES data source.

    --

    Username

    Enter the username for accessing the ES server.

    --

    Password

    Enter the password for accessing the ES server.

    --

  7. Click OK. The Cloud ES data source is added.

    After the cloud ES data source is added, its connectivity status is Checking. In this case, DSC tests the connectivity to the data source with your username and password.
    • If the connectivity status is Succeeded, DSC can access the added data source.
    • If the connectivity status is Failed, DSC cannot access the added data source. Click Details to view the failure cause and enter the correct username and password for accessing the added ES data source.

Related Operations

  • Editing and deleting assets
    • In the Elasticsearch asset list, click Edit in the Operation column of the target asset to modify the asset information.
    • In the Elasticsearch asset list, click Delete in the Operation column of the target asset to delete the asset.

      Deleted assets cannot be restored. The deletion operation will also delete the asset-related task templates, task results, and reports. Exercise caution when performing this operation.

  • Creating an identification task

    In the Elasticsearch asset list, click Create Identification Task in the Operation column of the target asset. The identification task list is displayed. For details about how to create an identification task, see Creating an Identification Task.