Skip to content

Latest commit

 

History

History
243 lines (234 loc) · 4.94 KB

Elasticsearch Index Templates for Talend Logs.md

File metadata and controls

243 lines (234 loc) · 4.94 KB
Raw

Adding user role policies and index templates for Talend Remote Engine logs

We need those user role policies and index templates to assign mappings and rules for our created indexes. Make sure you are running all these commands below in your elasticsearch cluster.

Creating user role policy talendlog_writer for reading, writing and create indexes

POST _xpack/security/role/talendlog_writer
{
  "cluster": ["manage_index_templates","monitor","manage_ingest_pipelines"], 
  "indices": [
    {
      "names": [ "talendlog-*" ], 
      "privileges": ["read","write","create_index"]
    }
  ]
}

Role for ILM (Index Lifecycle Management) talendlog_ilm

POST _xpack/security/role/talendlog_ilm
{
  "cluster": ["manage_ilm"],
  "indices": [
    {
      "names": [ "talendlog-*","shrink-talendlog-*"],
      "privileges": ["write","create_index","manage","manage_ilm"]
    }
  ]
}

Creating talendlog_internal user

POST /_xpack/security/user/talendlog_internal
{
  "password" : "ti9zazkWIVfXgcp2aHm5",
  "roles" : [ "talendlog_writer","talendlog_ilm"],
  "full_name" : "Internal Talendlog User"
}

ILM for deleting talend logs after a period of time.

PUT _ilm/policy/talendlogs_policy   
{
  "policy": {                       
    "phases": {
      "hot": {                      
        "actions": {
          "rollover": {             
            "max_size": "5GB",
            "max_age": "60d"
          }
        }
      },
      "delete": {
        "min_age": "67d",           
        "actions": {
          "delete": {}              
        }
      }
    }
  }
}

Index template for Talend Resuming Logs (talendlog-resuming)

PUT /_template/talendlog-resuming
{
  "index_patterns": ["talendlog-resuming-*"],
  "settings": {
    "number_of_shards": 1,
    "number_of_replicas": 1,
    "index.lifecycle.name": "talendlogs_policy",
    "index.lifecycle.rollover_alias": "talendlogs",
    "index.mapping.coerce": false
  }, 
  "mappings": {
    "properties": {
      "datetime": {
        "type": "date"
      },
      "pid": {
        "type": "keyword"
      },
      "type": {
        "type": "keyword"
      },
      "partName": {
        "type": "text"
      },
      "project": {
        "type": "keyword"
      },
      "jobName": {
        "type": "keyword"
      },
      "context": {
        "type": "keyword"
      },
      "jobVersion": {
        "type": "text"
      },
      "logPriority": {
        "type": "keyword"
      },
      "errorCode": {
        "type": "text"
      },
      "message": {
        "type": "text"
      },
      "duration": {
        "type": "text"
      },
      "result":{
        "type": "keyword"
      }
    }
  }
}

Index template for Talend Studio Logs (talendlog-stdouterr)

PUT /_template/talendlog-stdouterr
{
  "index_patterns": ["talendlog-stdouterr-*"],
  "settings": {
    "number_of_shards": 1,
    "number_of_replicas": 1,
    "index.lifecycle.name": "talendlogs_policy",
    "index.lifecycle.rollover_alias": "talendlogs",
    "index.mapping.coerce": false
  }, 
  "mappings": {
    "properties": {
      "datetime2": {
        "type": "date"
      },
      "pid": {
        "type": "keyword"
      },
      "jobName": {
        "type": "keyword"
      },
      "fileName": {
        "type": "keyword"
      },
      "studioLogs": {
        "type": "text"
      }
    }
  }
}

Index template for Talend Task Logs (talendlog-task)

PUT /_template/talendlog-task
{
  "index_patterns": ["talendlog-task-*"],
  "settings": {
    "number_of_shards": 1,
    "number_of_replicas": 1,
    "index.lifecycle.name": "talendlogs_policy",
    "index.lifecycle.rollover_alias": "talendlogs",
    "index.mapping.coerce": false
  }, 
  "mappings": {
    "properties": {
      "pid": {
        "type": "keyword"
      },
      "datetime": {
        "type": "date"
      },
      "jobName": {
        "type": "keyword"
      },
      "task_id": {
        "type": "keyword"
      },
      "task_execution_id": {
        "type": "keyword"
      },
      "remote_engine_id": {
        "type": "keyword"
      },
      "remote_engine_name": {
        "type": "keyword"
      },
      "workspace_name": {
        "type": "keyword"
      },
      "workspace_id": {
        "type": "keyword"
      },
      "environment_name": {
        "type": "keyword"
      },
      "environment_id": {
        "type": "keyword"
      },
      "environment_version": {
        "type": "keyword"
      },
      "trigger_timestamp": {
        "type": "date"
      },
      "artifact_name": {
        "type": "keyword"
      },
      "artifact_version": {
        "type": "text"
      },
      "task_name": {
        "type": "keyword"
      },
      "task_version": {
        "type": "text"
      },
      "run_type": {
        "type": "text"
      },
      "compatibility_version": {
        "type": "text"
      },
      "count_of_attempts": {
        "type": "text"
      },
      "taskLog": {
        "type": "text"
      }
    }
  }
}

By Matheus Pavanetti - 2021