/
Elastic Configuration

Elastic Configuration

Dec 02, 2016

  • MDM

  • Limiting log access based on zone is a priority requirement. 

  • Still need to create a custom realm so that 

MDM Service Configuration

MDM + Elastic service configuration is required one-time.

Log File

  • Is there a log per zone or one large log file.

  • File location

  • Grok patterns

  • ElasticSearch default superuser username/password needs to be changed

Per Zone Configuration

Users and roles need to be considered on a per zone basis. Notifications need to following naming conventions defined here so that log messages can be properly indexed. 

  • Create user per zone

    • Created via API on POST /zone - should be identical to zone name

    • Updated if zone name is changed


  • Create roles for zone

    • Created via API on POST /zone - should be identical to zone name

    • Update if zone name is changed

    • Set appropriate role/cluster privileges

    • Set appropriate index privileges (indices)


  • Filters added per role