Adding a Self-Built ES Data Source

Prerequisites

• DSC has been allowed to access big data assets. For details, see Allowing or Disallowing Access to Cloud Assets.
• The type, version, host, and index of the self-built ES big data asset have been obtained. There are available IP addresses in the subnet of the self-built ES big data asset.

Procedure

1. Log in to the management console.
2. Click in the upper left corner and select a region or project.
3. In the navigation pane on the left, click and choose Security & Compliance > Data Security Center.
4. In the navigation pane, choose Asset Management > Assets, and click the Big Data tab. The big data asset list is displayed.
   Figure 1 Accessing Elasticsearch assets
   

5. In the upper left corner of the Elasticsearch asset list, click Add a Self-built ES Data Source.
6. In the displayed dialog box, configure parameters for adding a self-built ES data source. For details, see Table 1.
   Figure 2 Adding a self-built ES data source
   

   Table 1 Parameters for adding a self-built ES data source

   Parameter	Description	Example Value
   Asset	Enter an asset name containing 4 to 255 characters.	DSCESTestSelf
   Region	Region where the account is used for login	-
   ECS	Select an Elasticsearch instance.	--
   Big Data Type	Select Elasticsearch.	Elasticsearch
   Security Group	Select an existing security group from the drop-down list box.	default
   Version	Select the version corresponding to the self-built ES data source version.	5.x
   Database Server Address	Enter the IP address of the self-built Elasticsearch data source server.	192.168.0.233
   Port	Enter the port number of the self-built Elasticsearch data source server.	9200
   Index	Enter the index corresponding to the self-built ES data source.	--
   Username	Enter the username for accessing the self-built Elasticsearch data source server.	--
   Password	Enter the password for accessing the self-built Elasticsearch data source server.	--

7. Click OK. The self-built Elasticsearch data source is added.
   After the self-built ES data source is added, its connectivity status is Checking. In this case, DSC tests the connectivity to the data source with your username and password.

   • If the connectivity status is Succeeded, DSC can access the added data source.
   • If the connectivity status is Failed, DSC cannot access the added data source. Click Details to view the failure cause and enter the correct username and password for accessing the added ES data source.

Related Operations

• Editing and deleting assets
  • In the Elasticsearch asset list, click Edit in the Operation column of the target asset to modify the asset information.
  • In the Elasticsearch asset list, click Delete in the Operation column of the target asset to delete the asset.
    

    Deleted assets cannot be restored. The deletion operation will also delete the asset-related task templates, task results, and reports. Exercise caution when performing this operation.

• Creating an identification task

  In the Elasticsearch asset list, click Create Identification Task in the Operation column of the target asset. The identification task list is displayed. For details about how to create an identification task, see Creating an Identification Task.