Elasticsearch Snapshot and Restore to AWS S3 Bucket - Let's Deploy a Host Intrusion Detection System

[@Зеркало-е3о]

As always, simple and clever ! Thank you!

[@vimaladeshmukh4017]

That's a wonderful and very useful video.. One request I have..can you bring the same video for gcp aswell ..like using jenkins job we have to take the backup of snapshots into cloud storage by registering the bucket. Hope u bring it up as early as possible And once again thank you so much for this wonderful video

[@adrianramirez9729]

If I use the OpenSearch Service on AWS (Elasticsearch 7.10) , do I need to install the plug in ?

[@AMITKUMAR-fc8tq]

Hii there, Great explanation, Can you please explain how to store in a specific folder in a S3 bucket. Suppose we create "SnapshotArchive" folder in the "pleasesubscribe" bucket. So how to store snapshot files only in the "SnapshotArchive" folder. Thank you in advance.

[@milank2423]

Hi there, excellent tutorial.. thank you! I tried following the instructions here, and got through most of the parts until 'Verify Repository', which failed because of S3 access issue (AccessDenied, Status code: 403.. Unable to upload object). I re-watched the video, and did not see you creating any IAM or S3 level policies or permissions to allow ElasticSearch's access to S3. Can you please clarify whether such policies are required, and if yes where and how would we define them?

[@taylorwalton_socfortress]

Hey MK, it may be because I was using the root user so I already had the privileges. Try creating a s3 bucket with settings that elastic describes here : www.elastic.co/guide/en/cloud/current/ec-aws-custom-repository.html Hope that helps and thanks for watching!

[@PriThVi_RedDy]

Question is how do we automate this.. how do we login to elasticsearch from kubernetes .. thats the issue I am facing..

[@taylorwalton_socfortress]

Hey Prithvi, I am currently working on a kubernetes deployment video. Once posted I will let you know. Thanks for watching!

[@sadit--world]

How to setuo elastic dashboard like you?

[@taylorwalton_socfortress]

Hey Sumon, what particular dashboard are you referring to? In this video I have not added any dashboards of my own. Everything I interacted with within this video is included with the default install of Kibana and Elasticsearch that I performed here: kzbin.info/www/bejne/l4m5eoKvqbiofaM Hope that helps but let me know if you have any other questions. Thanks for watching!

[@sadit--world]

@@taylorwalton_socfortress There is showing snapshot and restore option where you can add your s3 repository and register your s3 repo. but i did not find snapshot and restore dashboard in my kibana. could you send me the link how to configure like you if possible. thank you for understanding

[@taylorwalton_socfortress]

Hey Sumon, once you get to the Kibana Home page, you should be able to open the Menu, which should look like three vertical bars in the top left of your browser. Scroll down to "Management" and then select "Stack Management". Once opened you should see the "Data" heading on the left side of your screen. Under the "Data" heading select "Snapshot and Restore". I hope that helps.