Elasticsearch - ResolveAI

The Elasticsearch Cloud integration can be configured via Elastic’s and Resolve’s UIs.

Self-Hosted Elasticsearch? If you’re running Elasticsearch in your own infrastructure, you’ll need to use the Resolve Satellite. See the Elasticsearch On-Prem setup guide for instructions.

Create a Service Account Token

To access your Elasticsearch environment a service account token is needed. If you don’t already have a service account, please create one: How to create a service account. Once you have a Service Account to use, you can create an API Key with read-only permissions.

Option 1: Create the API Key via the UI [Recommended]

In the Elastic UI, open Stack Management > API Keys
Click on Create API Key
Enter a Name for your key, ex. resolve-api-access
In the Control security privileges section, add this block for permissions:

Permissions

{
  "resolveai-role": {
    "cluster": [
      "cluster:monitor/main",
      "cluster:monitor/stats",
      "cluster:monitor/state"
    ],
    "indices": [
      {
        "names": ["*"],
        "privileges": ["read", "view_index_metadata", "monitor"]
      }
    ]
  }
}

Option 2: Create the API Key via the REST API

Official Documentation: Access and AuthenticationRun the following command. Please ensure that you replace the following properties:

ELASTIC_PASSWORD: This is the password of the elastic user.
ELASTIC_HOSTNAME: This is the FQDN of the Elastic endpoint.

curl -k -X PUT --user [elastic:ELASTIC_PASSWORD] \
--header "Content-Type: application/json" https://[ELASTIC_HOSTNAME]:9200/_security/api_key 
-d '{"name":"resolve-ai-api-access"}

The response will include the encoded token. Please copy it.

Response

{
    "id":"********",
    "name":"resolve-ai-api-access",
    "api_key":"********",
    "encoded":"SkpDbUJaVXXXXXXXXXXXX***************" // This is your token
  }

Note: You must copy the encoded token. You will not be able to retrieve it after creation. Store this token in a secure manner, and do not check into source code. This token will be used in your ResolveAI configuration.

Configure the Elasticsearch Cloud Integration in the UI

Add Connection

Click on “Add Connection”. Add a name for the integration and fill in the configuration details. The required field are:

Url: The endpoint to your Elasticsearch instance (including the port number).
Token: The API Key that was generated in the previous step.

​Create a Service Account Token

​Configure the Elasticsearch Cloud Integration in the UI

Create a Service Account Token

Configure the Elasticsearch Cloud Integration in the UI