# Elasticsearch

Elasticsearch is a search engine based on the Lucene library. It provides a distributed, multitenant-capable full-text search engine with an HTTP web interface and schema-free JSON documents.

CloudFabrix RDA provides out of the box integration for Elasticsearch through it's API interface. As part of the integration, it provides an ability to query the data from Elasticsearch indice(s), update or append the data into an Elasticsearch indice. Below Elastichsearch distributions are supported.

* Elasticsearch Commercial & Open-source versions
* Opendistro & Opensearch from AWS versions

**Elasticsearch Permissions:** Below permissions are required as a prerequisite.

* read: To read, search/filter the data from indices
* write: To create, update & append data into indices (optional)

## Adding Elasticsearch as Datasource/Extension in '**RDA**': <a href="#adding-appdynamics-as-datasource" id="adding-appdynamics-as-datasource"></a>

Elasticsearch or any other datasource/extension's configuration is configured in RDA's user interface.  Login into RDA's user interface using a browser.

**https\://\<rda-ip-address>:9998**

Under '**Notebook**', click on '**CFXDX Python 3**' box

![](/files/-McvJao2W2zwuMV05Ek3)

In the '**Notebook**' command box, type **`botadmin()`** and **`alt (or option) + Enter`** to open datasource administration menu.

Click on '**Add**' menu and under **Type** drop down, select **`elasticsearch_v2`**

{% hint style="info" %}
Note: Elasticsearch extension typ&#x65;**`elasticsearch`**&#x69;s deprecated, please us&#x65;**`elasticsearch_v2`**&#x69;nstead.
{% endhint %}

![](/files/-Mkj0aq8IPhOs81NG6px)

* **Type**: Datasource/Extension type. In this context, it is '**elasticsearch\_v2**'
* **name**: Datasource/Extension label which should be unique within the RDA
* **Hostname:** Elasticsearch's IP Address or DNS name
* **URL Prefix:** Use this option when Elasticsearch is behind a load balancer and it has additional path to the root (ex: /elasticsearch) - Optional
* **Username**: Username that has read/write permissions to Elasticsearch indices (optional)
* **Password:** User account's password (optional)
* **HTTP(s) Port:** default is 9200, but can be changed to 443 or to other port
* **Protocol:** API integration over HTTP/HTTPs protocol
* **Timeout(seconds):** HTTP response timeout in seconds, default value is 30 seconds

For the details on Elasticsearch (v2) inventory data collection bots, please refer [**CloudFabrix RDA Bot documentation.**](https://bot-docs.cloudfabrix.io/Bots/elasticsearch_v2/)


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.cloudfabrix.io/rda/cfxdx-datasource-integrations/elasticsearch.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
