doc-exports/docs/css/umn/css_01_0094.html

<a name="css_01_0094"></a><a name="css_01_0094"></a>

<h1 class="topictitle1">Creating an Elasticsearch Cluster in Non-Security Mode</h1>
<div id="body1605065092525"><p id="css_01_0094__en-us_topic_0000001268314497_p1650716241016">This section describes how to create an Elasticsearch cluster in non-security mode.</p>
<div class="section" id="css_01_0094__en-us_topic_0000001268314497_section781857123412"><h4 class="sectiontitle">Procedure</h4><ol id="css_01_0094__en-us_topic_0000001268314497_ol175241191249"><li id="css_01_0094__en-us_topic_0000001268314497_li5509181942419">Log in to the <span id="css_01_0094__en-us_topic_0000001268314497_text115093190244">CSS</span> management console.</li><li id="css_01_0094__en-us_topic_0000001268154521_li6012554340">On the <span class="uicontrol" id="css_01_0094__uicontrol1913295512"><b>Dashboard</b></span> page, click <span class="uicontrol" id="css_01_0094__uicontrol1198297514"><b><span id="css_01_0094__text15910291254">Create Cluster</span></b></span> in the upper right corner. The <strong id="css_01_0094__b129112915510">Create</strong> page is displayed.<p id="css_01_0094__p753285116318">Alternatively, choose <strong id="css_01_0094__b37221323516">Clusters</strong> &gt; <strong id="css_01_0094__b37226321058">Elasticsearch</strong> in the navigation tree on the left. Click <span class="uicontrol" id="css_01_0094__uicontrol137221032952"><b><span id="css_01_0094__text167226321053">Create Cluster</span></b></span> in the upper right corner. The <strong id="css_01_0094__b187223321511">Create</strong> page is displayed.</p>
</li><li id="css_01_0094__en-us_topic_0000001268314497_li1550911962418">Specify <span class="parmname" id="css_01_0094__parmname1292954818545"><b><span id="css_01_0094__text1338749412">Region</span></b></span> and <span class="parmname" id="css_01_0094__parmname103351151175411"><b>AZ</b></span>.
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="css_01_0094__en-us_topic_0000001268594549_table123919163912" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Region and AZ parameters</caption><thead align="left"><tr id="css_01_0094__en-us_topic_0000001268594549_row6240191618912"><th align="left" class="cellrowborder" valign="top" width="23.54%" id="mcps1.3.2.2.3.3.2.3.1.1"><p id="css_01_0094__en-us_topic_0000001268594549_p6240101619913">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="76.46%" id="mcps1.3.2.2.3.3.2.3.1.2"><p id="css_01_0094__en-us_topic_0000001268594549_p1324019161897">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="css_01_0094__en-us_topic_0000001268594549_row1324031620914"><td class="cellrowborder" valign="top" width="23.54%" headers="mcps1.3.2.2.3.3.2.3.1.1 "><p id="css_01_0094__en-us_topic_0000001268594549_p82406161916">Region</p>
</td>
<td class="cellrowborder" valign="top" width="76.46%" headers="mcps1.3.2.2.3.3.2.3.1.2 "><p id="css_01_0094__en-us_topic_0000001268594549_p1371716288100">Select a region for the cluster from the drop-down list on the right. Currently, only <strong id="css_01_0094__b209041538171310">eu-de</strong> and <strong id="css_01_0094__b1990413811310">eu-nl</strong> are supported.</p>
</td>
</tr>
<tr id="css_01_0094__en-us_topic_0000001268594549_row112401161695"><td class="cellrowborder" valign="top" width="23.54%" headers="mcps1.3.2.2.3.3.2.3.1.1 "><p id="css_01_0094__en-us_topic_0000001268594549_p142401416791">AZ</p>
</td>
<td class="cellrowborder" valign="top" width="76.46%" headers="mcps1.3.2.2.3.3.2.3.1.2 "><p id="css_01_0094__en-us_topic_0000001268594549_p132401616890">Select AZs associated with the cluster region.</p>
<p id="css_01_0094__en-us_topic_0000001268594549_p869080899">You can select a maximum of three AZs. For details, see <a href="css_01_0188.html">Deploying a Cross-AZ Cluster</a>.</p>
</td>
</tr>
</tbody>
</table>
</div>
</li><li id="css_01_0094__en-us_topic_0000001268314497_li11509319152412">Configure basic cluster information.
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="css_01_0094__en-us_topic_0000001268594549_table1514341616111" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Basic parameters</caption><thead align="left"><tr id="css_01_0094__en-us_topic_0000001268594549_row10143191614119"><th align="left" class="cellrowborder" valign="top" width="23.48%" id="mcps1.3.2.2.4.1.2.3.1.1"><p id="css_01_0094__en-us_topic_0000001268594549_p181437168110">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="76.52%" id="mcps1.3.2.2.4.1.2.3.1.2"><p id="css_01_0094__en-us_topic_0000001268594549_p171431816161119">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="css_01_0094__en-us_topic_0000001268594549_row714311614114"><td class="cellrowborder" valign="top" width="23.48%" headers="mcps1.3.2.2.4.1.2.3.1.1 "><p id="css_01_0094__en-us_topic_0000001268594549_p181127310148">Version</p>
</td>
<td class="cellrowborder" valign="top" width="76.52%" headers="mcps1.3.2.2.4.1.2.3.1.2 "><p id="css_01_0094__en-us_topic_0000001268594549_p101431316141111">Select a cluster version from the drop-down list box.</p>
</td>
</tr>
<tr id="css_01_0094__en-us_topic_0000001268594549_row31431616181112"><td class="cellrowborder" valign="top" width="23.48%" headers="mcps1.3.2.2.4.1.2.3.1.1 "><p id="css_01_0094__en-us_topic_0000001268594549_p13143516151111">Name</p>
</td>
<td class="cellrowborder" valign="top" width="76.52%" headers="mcps1.3.2.2.4.1.2.3.1.2 "><p id="css_01_0094__en-us_topic_0000001268594549_p914318165115">Cluster name, which contains 4 to 32 characters. Only letters, numbers, hyphens (-), and underscores (_) are allowed and the value must start with a letter.</p>
<div class="note" id="css_01_0094__en-us_topic_0000001268594549_note1364615174019"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="css_01_0094__en-us_topic_0000001268594549_p146469104015">After a cluster is created, you can modify the cluster name as required. Click the name of a cluster to be modified. On the displayed <strong id="css_01_0094__b1750235116535">Basic Information</strong> page, click <span><img id="css_01_0094__en-us_topic_0000001268594549_image153610329132" src="en-us_image_0000001714802393.png"></span> next to the cluster name. After the modification is completed, click <span><img id="css_01_0094__en-us_topic_0000001268594549_image8415159114217" src="en-us_image_0000001667002614.png"></span> to save the modification. If you want to cancel the modification, click <span><img id="css_01_0094__en-us_topic_0000001268594549_image1473403711423" src="en-us_image_0000001714922225.png"></span>.</p>
</div></div>
</td>
</tr>
</tbody>
</table>
</div>
</li><li id="css_01_0094__en-us_topic_0000001268314497_li952461910242">Configure cluster specifications.
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="css_01_0094__en-us_topic_0000001268594549_table950951922414" frame="border" border="1" rules="all"><caption><b>Table 3 </b>Parameter description</caption><thead align="left"><tr id="css_01_0094__en-us_topic_0000001268594549_row14509181918241"><th align="left" class="cellrowborder" valign="top" width="25%" id="mcps1.3.2.2.5.1.2.3.1.1"><p id="css_01_0094__en-us_topic_0000001268594549_p150917199243">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="75%" id="mcps1.3.2.2.5.1.2.3.1.2"><p id="css_01_0094__en-us_topic_0000001268594549_p1350941916247">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="css_01_0094__en-us_topic_0000001268594549_row15509111982410"><td class="cellrowborder" valign="top" width="25%" headers="mcps1.3.2.2.5.1.2.3.1.1 "><p id="css_01_0094__en-us_topic_0000001268594549_p1350910198248">Nodes</p>
</td>
<td class="cellrowborder" valign="top" width="75%" headers="mcps1.3.2.2.5.1.2.3.1.2 "><p id="css_01_0094__en-us_topic_0000001268594549_p2050931982412">Number of nodes in a cluster. Select a number from 1 to 32. You are advised to configure three or more nodes to ensure high availability of the cluster.</p>
<ul id="css_01_0094__en-us_topic_0000001268594549_ul55091419152414"><li id="css_01_0094__en-us_topic_0000001268594549_li4509131932411">If neither a master node nor client node is enabled, the nodes specified by this parameter are used to serve as both the master node and client node. Nodes provide the cluster management, data storage, cluster access, and data analysis functions. To ensure data stability in the cluster, it is recommended that you set this parameter to a value no less than 3.</li><li id="css_01_0094__en-us_topic_0000001268594549_li14509131932414">If only the master node function is enabled, nodes specified by this parameter are used to store data and provide functions of client nodes.</li><li id="css_01_0094__en-us_topic_0000001268594549_li115091019152410">If both the master and client node functions are enabled, the nodes specified by this parameter are only used for storing data.</li><li id="css_01_0094__en-us_topic_0000001268594549_li250444014568">If only the client node function is enabled, nodes specified by this parameter are used to store data and provide functions of the master node.</li></ul>
</td>
</tr>
<tr id="css_01_0094__en-us_topic_0000001268594549_row1150871017413"><td class="cellrowborder" valign="top" width="25%" headers="mcps1.3.2.2.5.1.2.3.1.1 "><p id="css_01_0094__en-us_topic_0000001268594549_p144593569203">CPU Architecture</p>
</td>
<td class="cellrowborder" valign="top" width="75%" headers="mcps1.3.2.2.5.1.2.3.1.2 "><p id="css_01_0094__en-us_topic_0000001268594549_p645915617201">Currently, support <strong id="css_01_0094__b1268746202514">x86</strong>. The supported type is determined by the actual regional environment.</p>
</td>
</tr>
<tr id="css_01_0094__en-us_topic_0000001268594549_row65090196243"><td class="cellrowborder" valign="top" width="25%" headers="mcps1.3.2.2.5.1.2.3.1.1 "><p id="css_01_0094__en-us_topic_0000001268594549_p1250951902416">Node Specifications</p>
</td>
<td class="cellrowborder" valign="top" width="75%" headers="mcps1.3.2.2.5.1.2.3.1.2 "><p id="css_01_0094__en-us_topic_0000001268594549_p10858170124020">Specifications of nodes in a cluster. You can select a specified specification based on your needs. Each cluster supports only one specification.</p>
<p id="css_01_0094__en-us_topic_0000001268594549_p1550911912412">After you select a flavor, the CPU and memory corresponding to the current specification are displayed below the parameter. For example, if you select <strong id="css_01_0094__b6155343251948">css.medium.8</strong>, then <strong id="css_01_0094__b67868396151948">1 vCPUs | 8 GB</strong> will be displayed, indicating that the node flavor you select contains one vCPU and 8 GB memory.</p>
</td>
</tr>
<tr id="css_01_0094__en-us_topic_0000001268594549_row175091919122413"><td class="cellrowborder" valign="top" width="25%" headers="mcps1.3.2.2.5.1.2.3.1.1 "><p id="css_01_0094__en-us_topic_0000001268594549_p650921919248">Node Storage Type</p>
</td>
<td class="cellrowborder" valign="top" width="75%" headers="mcps1.3.2.2.5.1.2.3.1.2 "><p id="css_01_0094__en-us_topic_0000001268594549_p650911918249">In the current version, the following options are available: <strong id="css_01_0094__b14814116113513">Common I/O</strong>, <strong id="css_01_0094__b1081446103518">High I/O</strong>, and <strong id="css_01_0094__b14814106163516">Ultra-high I/O</strong>.</p>
</td>
</tr>
<tr id="css_01_0094__en-us_topic_0000001268594549_row250912197249"><td class="cellrowborder" valign="top" width="25%" headers="mcps1.3.2.2.5.1.2.3.1.1 "><p id="css_01_0094__en-us_topic_0000001268594549_p1950921962418">Node Storage Capacity</p>
</td>
<td class="cellrowborder" valign="top" width="75%" headers="mcps1.3.2.2.5.1.2.3.1.2 "><p id="css_01_0094__en-us_topic_0000001268594549_p16509181952416">Storage space. Its value varies with node specifications.</p>
<p id="css_01_0094__en-us_topic_0000001268594549_p55514143711">The node storage capacity must be a multiple of 20.</p>
</td>
</tr>
<tr id="css_01_0094__en-us_topic_0000001268594549_row6127934194011"><td class="cellrowborder" valign="top" width="25%" headers="mcps1.3.2.2.5.1.2.3.1.1 "><p id="css_01_0094__en-us_topic_0000001268594549_p1470610457401">Disk Encryption</p>
</td>
<td class="cellrowborder" valign="top" width="75%" headers="mcps1.3.2.2.5.1.2.3.1.2 "><p id="css_01_0094__en-us_topic_0000001268594549_p17127834194017">If you select this option, the nodes in the cluster you create will use encrypted EVS disks to protect data. By default, this option is not selected. Note that you cannot modify this setting after the cluster is created. Therefore, exercise caution when performing the setting.</p>
<p id="css_01_0094__en-us_topic_0000001268594549_p0239911125713">After you select this option, you need to select an available key from the <strong id="css_01_0094__b11607121916479">Key Name</strong> drop-down list. If no key is available, click <span class="uicontrol" id="css_01_0094__uicontrol1932561718598"><b>Create/View Key</b></span> to go to the KMS management console and create or modify a key. For details, see <a href="https://docs.otc.t-systems.com/key-management-service/umn/user_guide/key_management/creating_a_key.html" target="_blank" rel="noopener noreferrer">Creating a CMK</a>.</p>
<p id="css_01_0094__en-us_topic_0000001268594549_p2062119166388">Enabling disk encryption has no impact on your operations on a cluster (such as accessing the cluster and importing data to the cluster). However, after you enable disk encryption, operation performance deteriorates by about 10%.</p>
<div class="note" id="css_01_0094__en-us_topic_0000001268594549_note134725562016"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="css_01_0094__en-us_topic_0000001268594549_ul67444552406"><li id="css_01_0094__en-us_topic_0000001268594549_li1758173020115">If the cluster is in the <span class="parmname" id="css_01_0094__parmname161707750151948"><b>Available</b></span> status and the key used for disk encryption is in the <span class="parmname" id="css_01_0094__parmname172235858251948"><b>Pending deletion</b></span> or <span class="parmname" id="css_01_0094__parmname213364863051948"><b>disable</b></span> status or has been deleted after a cluster is created, cluster scale-out is not allowed. However, other operations on the cluster, such as restarting the cluster, creating snapshots, restoring the cluster, and importing data to the cluster are not affected. In addition, this key cannot be used for cluster creation in the future.</li><li id="css_01_0094__en-us_topic_0000001268594549_li1774435534011">After a cluster is created, do not delete the key used by the cluster. Otherwise, the cluster will become unavailable.</li><li id="css_01_0094__en-us_topic_0000001268594549_li1325105810406">You cannot use default master keys whose aliases end with <strong id="css_01_0094__b86746350161">/default</strong> in KMS to encrypt snapshots.</li></ul>
</div></div>
</td>
</tr>
<tr id="css_01_0094__en-us_topic_0000001268594549_row155091119132418"><td class="cellrowborder" valign="top" width="25%" headers="mcps1.3.2.2.5.1.2.3.1.1 "><p id="css_01_0094__en-us_topic_0000001268594549_p125096195242">Master node</p>
</td>
<td class="cellrowborder" valign="top" width="75%" headers="mcps1.3.2.2.5.1.2.3.1.2 "><p id="css_01_0094__en-us_topic_0000001268594549_p10509719182412">The master node manages all nodes in the cluster. If more than 20 nodes are required to store and analyze a large amount of data, you are advised to enable the master node to ensure cluster stability. Otherwise, you are advised to set only the <strong id="css_01_0094__b19437118202316">Nodes</strong> parameter and use the nodes as both master and client nodes.</p>
<p id="css_01_0094__en-us_topic_0000001268594549_p1750971913243">After enabling the master node, specify <span class="parmname" id="css_01_0094__parmname56987843851948"><b>Node Specifications</b></span>, <strong id="css_01_0094__b16744555251948">Nodes</strong>, and <span class="parmname" id="css_01_0094__parmname124492124851948"><b>Node Storage Type</b></span>. The value of <span class="parmname" id="css_01_0094__parmname850494619346"><b>Nodes</b></span> must be an odd number equal to or greater than 3. Up to nine nodes are supported. The value of <strong id="css_01_0094__b2041159122417">Node Storage Capacity</strong> is fixed. You can select a storage type based on your needs.</p>
</td>
</tr>
<tr id="css_01_0094__en-us_topic_0000001268594549_row18509171911243"><td class="cellrowborder" valign="top" width="25%" headers="mcps1.3.2.2.5.1.2.3.1.1 "><p id="css_01_0094__en-us_topic_0000001268594549_p1450911198249">Client node</p>
</td>
<td class="cellrowborder" valign="top" width="75%" headers="mcps1.3.2.2.5.1.2.3.1.2 "><p id="css_01_0094__en-us_topic_0000001268594549_p1550911198241">The client node allows clients to access clusters and analyze data. If more than 20 nodes are required to store and analyze a large amount of data, you are advised to enable the client node to ensure cluster stability. Otherwise, you are advised to set only the <strong id="css_01_0094__b11543645202513">Nodes</strong> parameter and use the nodes as both master and client nodes.</p>
<p id="css_01_0094__en-us_topic_0000001268594549_p6509121992415">After enabling the client node, specify <span class="parmname" id="css_01_0094__parmname131691743122416"><b>Node Specifications</b></span>, <strong id="css_01_0094__b9169143162417">Nodes</strong> and <span class="parmname" id="css_01_0094__parmname517074311246"><b>Node Storage Type</b></span>. The value of <strong id="css_01_0094__b10704315156">Nodes</strong> ranges from 1 to 32. The value of <strong id="css_01_0094__b206915162511">Node Storage Capacity</strong> is fixed. You can select a storage type based on your needs.</p>
</td>
</tr>
<tr id="css_01_0094__en-us_topic_0000001268594549_row12889131219416"><td class="cellrowborder" valign="top" width="25%" headers="mcps1.3.2.2.5.1.2.3.1.1 "><p id="css_01_0094__en-us_topic_0000001268594549_p1389081294118">Cold data node</p>
</td>
<td class="cellrowborder" valign="top" width="75%" headers="mcps1.3.2.2.5.1.2.3.1.2 "><p id="css_01_0094__en-us_topic_0000001268594549_p18902012184113">The cold data node is used to store historical data, for which query responses can be returned in minutes. If you do not quire a quick query response, store historical data on cold data nodes to reduce costs.</p>
<p id="css_01_0094__en-us_topic_0000001268594549_p57631824383">After enabling cold data node, configure <strong id="css_01_0094__b417819297337">Node Specifications</strong>, <strong id="css_01_0094__b883982316619">Nodes</strong>, <strong id="css_01_0094__b144371948173310">Node Storage Type</strong>, and <strong id="css_01_0094__b1131432183414">Node Storage Capacity</strong>. The value of <strong id="css_01_0094__b142835162917">Nodes</strong> ranges from 1 to 32. Select <strong id="css_01_0094__b2011532119323">Node Storage Type</strong> and <strong id="css_01_0094__b18774114123219">Node Storage Capacity</strong> as requirement.</p>
<p id="css_01_0094__en-us_topic_0000001268594549_p1024710511283">After the cold data node is enabled, CSS automatically adds cold and hot tags to related nodes.</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="fignone" id="css_01_0094__en-us_topic_0000001268594549_fig6524919122413"><span class="figcap"><b>Figure 1 </b>Configuring host specifications</span><br><span><img id="css_01_0094__en-us_topic_0000001268594549_image88114464472" src="en-us_image_0000001714922229.png"></span></div>
</li><li id="css_01_0094__en-us_topic_0000001268314497_li13549123951617">Set the enterprise project.<p id="css_01_0094__en-us_topic_0000001268594549_p135517191870"><a name="css_01_0094__en-us_topic_0000001268314497_li13549123951617"></a><a name="en-us_topic_0000001268314497_li13549123951617"></a>When creating a CSS cluster, you can bind an enterprise project to the cluster if you have enabled the enterprise project function. You can select an enterprise project created by the current user from the drop-down list on the right or click <strong id="css_01_0094__b4633112311717">View Project Management</strong> to go to the <strong id="css_01_0094__b1782012388177">Enterprise Project Management</strong> console and create a new project or view existing projects.</p>
</li><li id="css_01_0094__en-us_topic_0000001268314497_li552471911248">Set network specifications of the cluster.
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="css_01_0094__en-us_topic_0000001268314497_table29572519253" frame="border" border="1" rules="all"><caption><b>Table 4 </b>Parameter description</caption><thead align="left"><tr id="css_01_0094__en-us_topic_0000001268314497_row159579512517"><th align="left" class="cellrowborder" valign="top" width="24.47%" id="mcps1.3.2.2.7.1.2.3.1.1"><p id="css_01_0094__en-us_topic_0000001268314497_p2095710562511">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="75.53%" id="mcps1.3.2.2.7.1.2.3.1.2"><p id="css_01_0094__en-us_topic_0000001268314497_p149578519252">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="css_01_0094__en-us_topic_0000001268314497_row1895720513251"><td class="cellrowborder" valign="top" width="24.47%" headers="mcps1.3.2.2.7.1.2.3.1.1 "><p id="css_01_0094__en-us_topic_0000001268314497_p1195718522512">VPC</p>
</td>
<td class="cellrowborder" valign="top" width="75.53%" headers="mcps1.3.2.2.7.1.2.3.1.2 "><p id="css_01_0094__en-us_topic_0000001268314497_p264085512814">A VPC is a secure, isolated, and logical network environment.</p>
<p id="css_01_0094__en-us_topic_0000001268314497_p41161851162810">Select the target VPC. Click <span class="parmname" id="css_01_0094__en-us_topic_0000001268314497_parmname2011675115289"><b>View VPC</b></span> to enter the VPC management console and view the created VPC names and IDs. If no VPCs are available, create one.</p>
<div class="note" id="css_01_0094__en-us_topic_0000001268314497_note114411478188"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="css_01_0094__en-us_topic_0000001268314497_p1344127131818">The VPC must contain CIDRs. Otherwise, cluster creation will fail. By default, a VPC will contain CIDRs.</p>
</div></div>
</td>
</tr>
<tr id="css_01_0094__en-us_topic_0000001268314497_row595765162514"><td class="cellrowborder" valign="top" width="24.47%" headers="mcps1.3.2.2.7.1.2.3.1.1 "><p id="css_01_0094__en-us_topic_0000001268314497_p4957358252">Subnet</p>
</td>
<td class="cellrowborder" valign="top" width="75.53%" headers="mcps1.3.2.2.7.1.2.3.1.2 "><p id="css_01_0094__en-us_topic_0000001268314497_p18101747131315">A subnet provides dedicated network resources that are isolated from other networks, improving network security.</p>
<p id="css_01_0094__en-us_topic_0000001268314497_p269214423135">Select the target subnet. You can access the VPC management console to view the names and IDs of the existing subnets in the VPC.</p>
</td>
</tr>
<tr id="css_01_0094__en-us_topic_0000001268314497_row295715514257"><td class="cellrowborder" valign="top" width="24.47%" headers="mcps1.3.2.2.7.1.2.3.1.1 "><p id="css_01_0094__en-us_topic_0000001268314497_p19571653255">Security Group</p>
</td>
<td class="cellrowborder" valign="top" width="75.53%" headers="mcps1.3.2.2.7.1.2.3.1.2 "><p id="css_01_0094__en-us_topic_0000001268314497_p12957856252">A security group implements access control for ECSs that have the same security protection requirements in a VPC. To view more details about the security group, click <span class="parmname" id="css_01_0094__en-us_topic_0000001268314497_parmname144113710185"><b>View Security Group</b></span>.</p>
<div class="note" id="css_01_0094__en-us_topic_0000001268594549_note1744217181810"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="css_01_0094__en-us_topic_0000001268594549_ul19728838113212"><li id="css_01_0094__en-us_topic_0000001268594549_li187281538133214">For cluster access purposes, ensure that the security group contains port 9200.</li><li id="css_01_0094__en-us_topic_0000001268594549_li107154416215">If your cluster version is 7.6.2 or later, ensure that all the ports used for communication between nodes in the same security group are allowed. If such settings cannot be configured, ensure at least the access to port 9300 is allowed.</li><li id="css_01_0094__en-us_topic_0000001268594549_li16953037175612">After the port 9300 is enabled, if the cluster disk usage is high, delete expired data to release the disk storage space.</li></ul>
</div></div>
</td>
</tr>
<tr id="css_01_0094__en-us_topic_0000001268314497_row1095719532518"><td class="cellrowborder" valign="top" width="24.47%" headers="mcps1.3.2.2.7.1.2.3.1.1 "><p id="css_01_0094__en-us_topic_0000001268314497_p119571151254">Security Mode</p>
</td>
<td class="cellrowborder" valign="top" width="75.53%" headers="mcps1.3.2.2.7.1.2.3.1.2 "><p id="css_01_0094__en-us_topic_0000001268314497_p19743821141412">Security mode is disabled.</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="fignone" id="css_01_0094__en-us_topic_0000001268314497_fig7558102310812"><span class="figcap"><b>Figure 2 </b>Configuring network specifications</span><br><span><img id="css_01_0094__en-us_topic_0000001268314497_image139508551172" src="en-us_image_0000001666842898.png"></span></div>
</li><li id="css_01_0094__en-us_topic_0000001268314497_li19731025361">Click <strong id="css_01_0094__b1617351217193">Next: Configure Advanced Settings</strong>. Configure the automatic snapshot creation and other functions.<ol type="a" id="css_01_0094__en-us_topic_0000001268314497_ol75226423610"><li id="css_01_0094__en-us_topic_0000001268314497_li1566131043615">Configure <strong id="css_01_0094__b922901502619">Cluster Snapshot</strong>. Set basic configuration and snapshot configuration.<p id="css_01_0094__en-us_topic_0000001268594549_p7466151817232">The cluster snapshot function is enabled by default. You can also disable this function as required. To store automatic snapshots in OBS, an agency will be created to access OBS. Additional cost will be incurred if snapshots are stored in standard storage.</p>

<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="css_01_0094__en-us_topic_0000001268594549_table114660304344" frame="border" border="1" rules="all"><caption><b>Table 5 </b>Cluster snapshot parameter</caption><thead align="left"><tr id="css_01_0094__en-us_topic_0000001268594549_row74671830133417"><th align="left" class="cellrowborder" valign="top" width="16.900000000000002%" id="mcps1.3.2.2.8.2.1.3.2.3.1.1"><p id="css_01_0094__en-us_topic_0000001268594549_p2467330133420">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="83.1%" id="mcps1.3.2.2.8.2.1.3.2.3.1.2"><p id="css_01_0094__p482233611467">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="css_01_0094__en-us_topic_0000001268594549_row1646743016348"><td class="cellrowborder" valign="top" width="16.900000000000002%" headers="mcps1.3.2.2.8.2.1.3.2.3.1.1 "><p id="css_01_0094__en-us_topic_0000001268594549_p5467163016341">OBS bucket</p>
</td>
<td class="cellrowborder" valign="top" width="83.1%" headers="mcps1.3.2.2.8.2.1.3.2.3.1.2 "><p id="css_01_0094__en-us_topic_0000001268594549_p2046713013344">Select an OBS bucket for storing snapshots from the drop-down list box. You can also click <strong id="css_01_0094__b4554717182318">Create Bucket</strong> on the right to create an OBS bucket. For details, see <a href="https://docs.otc.t-systems.com/en-us/usermanual/obs/en-us_topic_0045853662.html" target="_blank" rel="noopener noreferrer">Creating a Bucket</a>.</p>
<p id="css_01_0094__en-us_topic_0000001268594549_p169581927104917">The created or existing OBS bucket must meet the following requirements:</p>
<ul id="css_01_0094__en-us_topic_0000001268594549_ul196015276499"><li id="css_01_0094__en-us_topic_0000001268594549_li1496042724916"><span class="parmname" id="css_01_0094__parmname3250204921413"><b>Storage Class</b></span> is <span class="parmvalue" id="css_01_0094__parmvalue19250849171419"><b>Standard</b></span> or <strong id="css_01_0094__b1425064918147">Warm</strong>.</li><li id="css_01_0094__en-us_topic_0000001268594549_li8114122084513"><strong id="css_01_0094__b239136162310">Region</strong> must be the same as that of the created cluster.</li></ul>
</td>
</tr>
<tr id="css_01_0094__en-us_topic_0000001268594549_row10467830183414"><td class="cellrowborder" valign="top" width="16.900000000000002%" headers="mcps1.3.2.2.8.2.1.3.2.3.1.1 "><p id="css_01_0094__en-us_topic_0000001268594549_p146718309347">Backup Path</p>
</td>
<td class="cellrowborder" valign="top" width="83.1%" headers="mcps1.3.2.2.8.2.1.3.2.3.1.2 "><p id="css_01_0094__p8836133614462">Storage path of the snapshot in the OBS bucket.</p>
<div class="p" id="css_01_0094__p1883633634619">The backup path configuration rules are as follows:<ul id="css_01_0094__ul88362036184619"><li id="css_01_0094__li3836203616465">The backup path cannot contain the following characters: \:*?"&lt;&gt;|</li><li id="css_01_0094__li6836836124612">The backup path cannot start with a slash (/).</li><li id="css_01_0094__li128362036194620">The backup path cannot start or end with a period (.).</li><li id="css_01_0094__li18836103634618">The backup path cannot contain more than 1,023 characters.</li></ul>
</div>
</td>
</tr>
<tr id="css_01_0094__en-us_topic_0000001268594549_row94671530153410"><td class="cellrowborder" valign="top" width="16.900000000000002%" headers="mcps1.3.2.2.8.2.1.3.2.3.1.1 "><p id="css_01_0094__en-us_topic_0000001268594549_p13467330103415">IAM Agency</p>
</td>
<td class="cellrowborder" valign="top" width="83.1%" headers="mcps1.3.2.2.8.2.1.3.2.3.1.2 "><p id="css_01_0094__en-us_topic_0000001268594549_p194671630143411">IAM agency authorized by the current account to <span id="css_01_0094__text17170201172613">CSS</span> access or maintain data stored in the OBS bucket. You can also click <strong id="css_01_0094__b5614152016264">Create IAM Agency</strong> on the right to create an IAM agency. For details, see <a href="https://docs.otc.t-systems.com/en-us/usermanual/iam/en-us_topic_0046613147.html" target="_blank" rel="noopener noreferrer">Creating an Agency</a>.</p>
<p id="css_01_0094__en-us_topic_0000001268594549_p15960122764916">The created or existing IAM agency must meet the following requirements:</p>
<ul id="css_01_0094__en-us_topic_0000001268594549_ul29611827194917"><li id="css_01_0094__en-us_topic_0000001268594549_li1896011275492"><span class="parmname" id="css_01_0094__parmname13212154312618"><b>Agency Type</b></span> must be <span class="parmvalue" id="css_01_0094__parmvalue3221143132610"><b>Cloud service</b></span>.</li><li id="css_01_0094__en-us_topic_0000001268594549_li696032784920">Set <strong id="css_01_0094__b67031721152314">Cloud Service</strong> to <strong id="css_01_0094__b7703221142312">CSS</strong>.</li><li id="css_01_0094__en-us_topic_0000001268594549_li7961182754916">The agency must have the <span class="parmname" id="css_01_0094__parmname7407173216236"><b>Tenant Administrator</b></span> permission for the <strong id="css_01_0094__b194071332132313">OBS(S3)</strong> project in <strong id="css_01_0094__b1940816328230">OBS(S3)</strong>.</li></ul>
</td>
</tr>
<tr id="css_01_0094__en-us_topic_0000001268594549_row14801105514545"><td class="cellrowborder" valign="top" width="16.900000000000002%" headers="mcps1.3.2.2.8.2.1.3.2.3.1.1 "><p id="css_01_0094__en-us_topic_0000001268594549_p1380215514540">Snapshot Encryption</p>
</td>
<td class="cellrowborder" valign="top" width="83.1%" headers="mcps1.3.2.2.8.2.1.3.2.3.1.2 "><p id="css_01_0094__en-us_topic_0000001268594549_p2080235545418">Indicates whether to enable the snapshot encryption function. Enabling the snapshot encryption function ensures the security of your snapshot data.</p>
<p id="css_01_0094__en-us_topic_0000001268594549_p05501493581">After the snapshot encryption function is enabled, select a key from the <strong id="css_01_0094__b86711754132514">Key Name</strong> drop-down list. If no key is available, click <strong id="css_01_0094__b14671254132518">Create/View Key</strong> to switch to the KMS management console to create or modify a key. For details, see <a href="https://docs.otc.t-systems.com/key-management-service/umn/user_guide/key_management/creating_a_key.html" target="_blank" rel="noopener noreferrer">Creating a CMK</a>.</p>
<ul id="css_01_0094__en-us_topic_0000001268594549_ul1167151205917"><li id="css_01_0094__en-us_topic_0000001268594549_li156751185916">You cannot use default master keys whose aliases end with <strong id="css_01_0094__b66491159122711">/default</strong> in KMS to encrypt snapshots.</li><li id="css_01_0094__en-us_topic_0000001268594549_li13682119597">If a snapshot has been stored in the OBS bucket, you cannot modify the parameters used for encrypting the snapshot.</li><li id="css_01_0094__en-us_topic_0000001268594549_li18686114593">If the key used for encryption is in the <span class="parmname" id="css_01_0094__parmname18469113462817"><b>Pending deletion</b></span> or <span class="parmname" id="css_01_0094__parmname3478434192813"><b>disable</b></span> status, you cannot perform backup and restoration operations on the cluster. Specifically, you cannot create new snapshots for the cluster, or use existing snapshots to restore clusters. In this case, switch to the KMS management console and change the status of the target key to <strong id="css_01_0094__b38251341182812">enable</strong> so that backup and restore operations are allowed on the cluster.</li><li id="css_01_0094__en-us_topic_0000001268594549_li1068310595">If you delete the key used for encryption, you cannot perform backup and restore operations on the cluster. In addition, you cannot restore the deleted key. Therefore, exercise caution when deleting a key. If the key is deleted or is in the <span class="parmname" id="css_01_0094__parmname445752202815"><b>Pending deletion</b></span> or <span class="parmname" id="css_01_0094__parmname11531252132814"><b>disable</b></span> state, automatic snapshot creation is allowed based on the configured snapshot policy. However, all automatic snapshot creation tasks will fail, and the failed tasks are displayed in the failed task list in the <strong id="css_01_0094__b055105219283">Failed Tasks</strong> dialog box. In such scenario, you are advised to disable the automatic snapshot creation function.</li></ul>
</td>
</tr>
</tbody>
</table>
</div>

<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="css_01_0094__en-us_topic_0000001268594549_table179407117910" frame="border" border="1" rules="all"><caption><b>Table 6 </b>Automatic snapshot creation parameter</caption><thead align="left"><tr id="css_01_0094__en-us_topic_0000001268594549_row1694013111396"><th align="left" class="cellrowborder" valign="top" width="16.900000000000002%" id="mcps1.3.2.2.8.2.1.4.2.3.1.1"><p id="css_01_0094__en-us_topic_0000001268594549_p994001118917">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="83.1%" id="mcps1.3.2.2.8.2.1.4.2.3.1.2"><p id="css_01_0094__en-us_topic_0000001268594549_p159404111593">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="css_01_0094__en-us_topic_0000001268594549_row494351116910"><td class="cellrowborder" valign="top" width="16.900000000000002%" headers="mcps1.3.2.2.8.2.1.4.2.3.1.1 "><p id="css_01_0094__en-us_topic_0000001268594549_p189432011894">Snapshot Name Prefix</p>
</td>
<td class="cellrowborder" valign="top" width="83.1%" headers="mcps1.3.2.2.8.2.1.4.2.3.1.2 "><p id="css_01_0094__en-us_topic_0000001268594549_p1194311117917">The snapshot name prefix contains 1 to 32 characters and must start with a lowercase letter. Only lowercase letters, digits, hyphens (-), and underscores (_) are allowed. A snapshot name consists of a snapshot name prefix and a timestamp, for example, <strong id="css_01_0094__b1883574815334">snapshot-1566921603720</strong>.</p>
</td>
</tr>
<tr id="css_01_0094__en-us_topic_0000001268594549_row69433112092"><td class="cellrowborder" valign="top" width="16.900000000000002%" headers="mcps1.3.2.2.8.2.1.4.2.3.1.1 "><p id="css_01_0094__en-us_topic_0000001268594549_p6943181111912">Time Zone</p>
</td>
<td class="cellrowborder" valign="top" width="83.1%" headers="mcps1.3.2.2.8.2.1.4.2.3.1.2 "><p id="css_01_0094__en-us_topic_0000001268594549_p129431110916">Time zone for the backup time, which cannot be changed. Specify backup started time based on the time zone.</p>
</td>
</tr>
<tr id="css_01_0094__en-us_topic_0000001268594549_row79432111592"><td class="cellrowborder" valign="top" width="16.900000000000002%" headers="mcps1.3.2.2.8.2.1.4.2.3.1.1 "><p id="css_01_0094__en-us_topic_0000001268594549_p9943141118920">Backup Start Time</p>
</td>
<td class="cellrowborder" valign="top" width="83.1%" headers="mcps1.3.2.2.8.2.1.4.2.3.1.2 "><p id="css_01_0094__en-us_topic_0000001268594549_p18943151116919">The time when the backup starts automatically every day. You can specify this parameter only in full hours, for example, 00:00 or 01:00. The value ranges from 00:00 to 23:00. Select a time from the drop-down list.</p>
</td>
</tr>
<tr id="css_01_0094__en-us_topic_0000001268594549_row1594310119917"><td class="cellrowborder" valign="top" width="16.900000000000002%" headers="mcps1.3.2.2.8.2.1.4.2.3.1.1 "><p id="css_01_0094__en-us_topic_0000001268594549_p20943161110914">Retention Period (days)</p>
</td>
<td class="cellrowborder" valign="top" width="83.1%" headers="mcps1.3.2.2.8.2.1.4.2.3.1.2 "><p id="css_01_0094__en-us_topic_0000001268594549_p1094317111692">The number of days that snapshots are retained in the OBS bucket. The value ranges from 1 to 90. You can specify this parameter as required. The system automatically deletes expired snapshots every hour at half past the hour.</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="fignone" id="css_01_0094__en-us_topic_0000001268594549_fig63963484114"><span class="figcap"><b>Figure 3 </b>Setting parameters for automatic snapshot creation</span><br><span><img id="css_01_0094__en-us_topic_0000001268594549_image20396048171111" src="en-us_image_0000001714802397.png"></span></div>
</li><li id="css_01_0094__en-us_topic_0000001268314497_li16584910175512">Configure advanced settings for the cluster.<ul id="css_01_0094__en-us_topic_0000001268314497_ul48111546185419"><li id="css_01_0094__en-us_topic_0000001268314497_li8811174614544"><strong id="css_01_0094__en-us_topic_0000001268314497_b714232174013">Default</strong>: The <strong id="css_01_0094__en-us_topic_0000001268314497_b1114216224018">VPC Endpoint Service</strong>, <strong id="css_01_0094__en-us_topic_0000001268314497_b21421827406">Kibana Public Access</strong>, and <strong id="css_01_0094__en-us_topic_0000001268314497_b12142112194019">Tag</strong> functions are disabled by default. You can manually enable these functions after the cluster is created.</li><li id="css_01_0094__en-us_topic_0000001268314497_li08111646135413"><strong id="css_01_0094__en-us_topic_0000001268314497_b1764948496">Custom</strong>: You can enable the <strong id="css_01_0094__en-us_topic_0000001268314497_b1569513316405">VPC Endpoint Service</strong> and <strong id="css_01_0094__en-us_topic_0000001268314497_b106326355409">Tag</strong> functions as required.</li></ul>

<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="css_01_0094__en-us_topic_0000001268314497_table9584610185516" frame="border" border="1" rules="all"><caption><b>Table 7 </b>Parameters for advanced settings</caption><thead align="left"><tr id="css_01_0094__en-us_topic_0000001268314497_row5584510115517"><th align="left" class="cellrowborder" valign="top" width="28.43%" id="mcps1.3.2.2.8.2.2.2.2.3.1.1"><p id="css_01_0094__en-us_topic_0000001268314497_p45849108552">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="71.57%" id="mcps1.3.2.2.8.2.2.2.2.3.1.2"><p id="css_01_0094__en-us_topic_0000001268314497_p358471015555">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="css_01_0094__en-us_topic_0000001268314497_row10584191019556"><td class="cellrowborder" valign="top" width="28.43%" headers="mcps1.3.2.2.8.2.2.2.2.3.1.1 "><p id="css_01_0094__en-us_topic_0000001268314497_p55846102555">VPC Endpoint Service</p>
</td>
<td class="cellrowborder" valign="top" width="71.57%" headers="mcps1.3.2.2.8.2.2.2.2.3.1.2 "><p id="css_01_0094__en-us_topic_0000001268314497_p155848104553">After enabling this function, you can obtain a private domain name for accessing the cluster in the same VPC. For details, see <a href="css_01_0082.html">Accessing a Cluster Using a VPC Endpoint</a>.</p>
</td>
</tr>
<tr id="css_01_0094__en-us_topic_0000001268314497_row11359261403"><td class="cellrowborder" valign="top" width="28.43%" headers="mcps1.3.2.2.8.2.2.2.2.3.1.1 "><p id="css_01_0094__en-us_topic_0000001268314497_p11361326134013">Kibana Public Access</p>
</td>
<td class="cellrowborder" valign="top" width="71.57%" headers="mcps1.3.2.2.8.2.2.2.2.3.1.2 "><p id="css_01_0094__en-us_topic_0000001268314497_li3233117101p0">Clusters in non-security mode cannot access Kibana through the Internet.</p>
</td>
</tr>
<tr id="css_01_0094__en-us_topic_0000001268314497_row205841410125512"><td class="cellrowborder" valign="top" width="28.43%" headers="mcps1.3.2.2.8.2.2.2.2.3.1.1 "><p id="css_01_0094__en-us_topic_0000001268314497_p16584171010552">Tag</p>
</td>
<td class="cellrowborder" valign="top" width="71.57%" headers="mcps1.3.2.2.8.2.2.2.2.3.1.2 "><p id="css_01_0094__en-us_topic_0000001268314497_p1958412109557">Adding tags to clusters can help you identify and manage your cluster resources. You can customize tags or use tags predefined by Tag Management Service (TMS). For details, see <a href="css_01_0075.html">Managing Tags</a>.</p>
</td>
</tr>
</tbody>
</table>
</div>
</li></ol>
</li><li id="css_01_0094__en-us_topic_0000001268314497_li6431153123618">Click <strong id="css_01_0094__b1658143723016">Next: Confirm</strong>. Check the configuration and click <strong id="css_01_0094__b825916162407">Next</strong> to create a cluster.</li><li id="css_01_0094__en-us_topic_0000001268314497_li85241119112419">Click <span class="uicontrol" id="css_01_0094__uicontrol28721886851948"><b>Back to Cluster List</b></span> to switch to the <strong id="css_01_0094__b80377998351948">Clusters</strong> page. The cluster you created is listed on the displayed page and its status is <span class="parmname" id="css_01_0094__en-us_topic_0000001268314497_parmname160914421110517"><b>Creating</b></span>. If the cluster is successfully created, its status will change to <span class="parmname" id="css_01_0094__en-us_topic_0000001268314497_parmname152252871410517"><b>Available</b></span>.<p id="css_01_0094__en-us_topic_0000001268314497_p6524519192411">If the cluster creation fails, create the cluster again.</p>
</li></ol>
</div>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="css_01_0008.html">Creating an Elasticsearch Cluster</a></div>
</div>
</div>