The NAIS platform offers Elastic Search via Aiven.
Get your own¶
As there are few teams that need an Elastic Search instance we use a IaC-repo to provision each instance. Head over to aiven-iac to learn how to get your own instance. To make it easier for you, when creating the instance, we will also create four users with read, write, readwrite and admin access.
Access from Nais-app¶
If you need access from an application, use the following nais.yaml-reference.
When an application requesting an elastic instance is deployed, credentials will be provided as environment variables.
The service URI for Elastic is also available.
If you specify
elastic.access, the credentials will be for the user with those access rights.
The available access levels are: 'admin', 'read', 'write', 'readwrite'
If not specified, the credentials will be for a user with read access.
Access from laptop¶
With Naisdevice you have access to the aiven-prod gateway. This is a JITA (just in time access) gateway, so you need to describe why, but the access is automatically given.
The URL for Kibana is the same as the Elastic instance, but using port 443 (regular https).
We do not offer support on Elastic Search as software, but questions about Aiven and provisioning can be directed to #pig_aiven on Slack.
We recommend that you set up your own alerts so that you can react to problems in your Elastic instance. Aiven uses Telegraf to collect and present metrics, so available metrics can be found in the Telegraf documentation.
We have configured our Prometheus instances in GCP to scrape the Elastic clusters in Aiven, so these metrics should be available in Grafana. New Elastic clusters currently need to be manually added to the Prometheus config, so if you can't find your cluster, please poke us.
Particularly relevant input plugins are:
O'Reilly has a useful article about metrics to watch in an Elastic cluster.
Awesome prometheus alerts is another good source of alerts to look out for.
Some metrics that might be useful to watch, based on above article (We need feedback on this list, as we have no practical experience to lean on):