Manage Access to OpenSearch Cluster

In the GreenNode vDB OpenSearch service, you can access OpenSearch in two ways:

• Log in to OpenSearch Dashboard to manage and analyze data.

• Push logs to OpenSearch Cluster for log storage and processing.

We provide two endpoints with different ports, but share the same Master User account to perform both tasks.

Access OpenSearch Dashboard

To log in to the OpenSearch management interface, use the following information:

• Endpoint: https://your-cluster-name-hcm03.vdb-opensearch.vngcloud.vn

• Port: 443

• Username: master-user

• Password: (The password you set up)

Use a browser to access the URL above and log in with the Master User account.

Push Logs to OpenSearch Cluster

To send logs to the OpenSearch system, use the following information:

• Endpoint: https://your-cluster-name-hcm03.vdb-opensearch.vngcloud.vn

• Port: 9200

• Username: master-user

• Password: (The password you set up)

Note:

• Currently, we only support 1 public endpoint mode, which means by default if you do not set up Allowed CIDRs, anyone with the Master User account information can access the cluster. To limit access, you can configure the allowed IP list (Allow CIDRs) on the cluster following the guide below.

Control access to OpenSearch Dashboard / push logs to OpenSearch Cluster

You can control access... by:

• When initializing an OpenSearch Cluster, in the Network setting section, enter the CIDRs you want to allow access to the Dashboard or push logs. CIDRs can be separated by commas, for example 10.192.168.8/16, 10.192.160.10/24

• When an OpenSearch Cluster has already been initialized, you can edit by going to the detail of a Cluster, in the Connectivity & Security section, select the Edit button at the Allowed CIDRs field for each Dashboard or Receive Logs section

Below is the complete guide, with additional information on how to control OpenSearch access clearly and easily:

Set Up CIDRs When Initializing Cluster

When creating a new OpenSearch Cluster, you can configure CIDRs by:

• In the Network Setting section of the cluster initialization interface, enter the list of CIDRs that you want to grant access to the Dashboard or Receive Logs. CIDRs are separated by commas (,). For example: 10.192.168.8/16, 10.192.160.10/24.

Complete the Cluster creation process, these CIDRs will be applied immediately.

Edit CIDRs After Cluster Has Been Initialized

If you want to change the CIDRs list after the cluster has been initialized:

Step 1: Access the OpenSearch Cluster you want to edit.

Step 2: Go to the Connectivity & Security tab.

Step 3: In the Accessibility section:

• Select Edit at the Dashboard field to edit CIDRs for management interface access.

• Select Edit at the Receive Logs field to edit CIDRs for the log receiving endpoint.

Step 4: Enter new CIDRs in valid format. CIDRs are separated by commas (,). For example: 10.192.168.8/16, 10.192.160.10/24.

Step 5: Press Save to update the changes.