Elasticsearch On-Prem

Prerequisite: The Resolve Satellite should be installed in your environment.

Create a Service Account Token

To access your Elasticsearch environment a service account token is needed. If you don’t already have a service account, please create one: How to create a service account. Once you have a Service Account to use, you can create an API Key with read-only permissions.

Option 1: Create the API Key via the UI [Recommended]

In the Elastic UI, open Stack Management > API Keys
Click on Create API Key
Enter a Name for your key, ex. resolve-api-access
In the Control security privileges section, add this block for permissions:

Permissions

{
  "resolveai-role": {
    "cluster": [
      "cluster:monitor/main",
      "cluster:monitor/stats",
      "cluster:monitor/state"
    ],
    "indices": [
      {
        "names": ["*"],
        "privileges": ["read", "view_index_metadata", "monitor"]
      }
    ]
  }
}

Option 2: Create the API Key via the REST API

Official Documentation: Access and AuthenticationRun the following command. Please ensure that you replace the following properties:

ELASTIC_PASSWORD: This is the password of the elastic user.
ELASTIC_HOSTNAME: This is the FQDN of the Elastic endpoint.

curl -k -X PUT --user [elastic:ELASTIC_PASSWORD] \
--header "Content-Type: application/json" https://[ELASTIC_HOSTNAME]:9200/_security/api_key 
-d '{"name":"resolve-ai-api-access"}

The response will include the encoded token. Please copy it.

Response

{
    "id":"********",
    "name":"resolve-ai-api-access",
    "api_key":"********",
    "encoded":"SkpDbUJaVXXXXXXXXXXXX***************" // This is your token
  }

Note: You must copy the encoded token. You will not be able to retrieve it after creation. Store this token in a secure manner, and do not check into source code. This token will be used in your ResolveAI configuration.

Configure the Elasticsearch integration in Resolve Satellite

Below is an example of how to setup the Elasticsearch integration in the satellite with the url property as well as using the k8s secret (potentially backed by an AWS secret manager or another mechanism) for authentication.

Create a Kubernetes secret

Create a Kubernetes secret of the following form. Note that the structure of the secret is important and for a Elasticsearch API Key, it must have the top-level key token: ‘token-value’.

elastic-resolve-access-token.yml

apiVersion: v1
kind: Secret
type: Opaque
metadata:
  name:  elasticsearch-resolve-access-token
stringData:
  token: "<your elasticsearch API Key>"

Security Best Practice: Never store credentials in plaintext in configuration files or source control. Always use Kubernetes secrets and encrypt etcd or use enterprise secret management systems. See Secret Management for detailed guidance.

To apply the secret run

apply secret

kubectl apply -f elasticsearch-resolve-access-token.yml

Configure your Elasticsearch API Key in the Resolve Satellite

Update your helm values override file with the following information (e.g.: resolve-values.yaml)

resolve-values.yaml

integrations:
  elasticsearchIntegration:
    type: elasticsearch
    create: true
    secretName:  "elastic-resolve-access-token"
    connection:
      url: "<your elastic server>"

Install the satellite and apply the values from the yaml file that you have just updated. e.g.: resolve-values.yaml. To find the latest version, visit ResolveAI’s docker hub repository for the helm chart and satellite image.

apply config to satellite and redeploy

helm upgrade --install oci://registry-1.docker.io/resolveaihq/satellite-chart --version <LatestChart> --values resolve-values.yaml --set image.tag=<LatestImage>

Once your satellite is deployed, we will automatically create an integration instance for you.

Verify your integration status in ResolveAI

Login to https://app0.resolve.ai/. Go to the integrations page and and select “Elasticsearch”You should see an automatically created integration based on the provided configuration.

​Create a Service Account Token

​Configure the Elasticsearch integration in Resolve Satellite

Create a Service Account Token

Configure the Elasticsearch integration in Resolve Satellite