Skip to main content

Cloud server with OpenSearch

OpenSearch is an open-source search and analytics engine. A cloud server with OpenSearch acts as a collector and visualizer for logs from the Selectel Cloud Platform.

You can configure automatic scheduled backups for your cloud server. You can restore a server volume from a backup.

You can create a cloud server with a pre-installed OpenSearch application. The application runs on a cloud server with a pre-configured Ubuntu 24.04 LTS 64-bit operating system.

Before creating a cloud server with the application, review the software license agreements for the software included in the image.

Minimum resource requirements

Number of vCPUs2
RAM2 GB
Boot volume20 GB
GPU availabilityNot required

Create a cloud server with OpenSearch

For OpenSearch to work, the cloud server must be accessible from the internet. To achieve this, when creating the server, you must create a private subnet and attach a public floating IP address. To configure OpenSearch, you must specify the application settings when creating the server.

After creating a server with OpenSearch, a free TLS certificate from Let’s Encrypt® will be automatically issued for the specified domain. To issue a certificate, you need to add an A record for the domain and specify the server's public floating IP address in the record value. You can add the domain to Selectel DNS hosting (actual).

  1. Create a public floating IP address.

  2. Optional: add an A record for the domain.

  3. Create a service user.

  4. Issue an S3 key to the service user.

  5. Create a cloud server with OpenSearch.

1. Create a public floating IP address

Create a public floating IP address to access the OpenSearch Dashboard web interface.

Use the Create a public floating IP address subsection of the Public floating IP addresses instructions.

2. Optional: add an A record for the domain

Add an A record if you need access to the OpenSearch Dashboard web interface via a domain. Skip this step if you will only access the dashboard via a public floating IP address.

Use the Add a resource record instructions.

Specify:

3. Create a service user

Create a service user, in the permission select the role member or reader and scope Projects. Users can be created by the Account Owner or users with the iam.admin role.

4. Issue an S3 key to the service user

Control panel users can issue S3 keys to themselves, but we recommend creating service users and issuing S3 keys to them.

Only the Account Owner or a user with the iam.admin role can issue S3 keys to other users. A service user cannot obtain an S3 key independently because they do not have access to the control panel — the Account Owner or iam.admin must issue a key to them.

You must create a separate key for each project. You can issue multiple keys for a single project.

  1. In the control panel, in the top menu, click IAM.

  2. Go to the section with the desired user type:

    • Control panel users — for users with access to the control panel;
    • Service users — for users with programmatic access without access to the control panel.
  3. Open the user page → Access tab.

  4. In the S3 keys block, click Add key.

  5. Enter a key name.

  6. Select the project for which the key will work.

  7. Click Generate. Two values will be generated:

    • Access key — Access Key ID, a key identifier;
    • Secret key — Secret Access Key, a secret key.
  8. Click Copy and save the key — it cannot be viewed after closing the window.

5. Create a cloud server with OpenSearch

  1. In the control panel, in the top menu, click Products and select Cloud Servers.

  2. Click Create Server.

  3. Fill in the blocks:

  4. Check the cloud server price.

  5. Click Create.

Name and location

  1. Enter the server name. It will be set as the hostname in the operating system.

  2. Select the location where the server will be created. The list of available server configurations and resource cost depend on the location. You cannot change the location after creating the server.

Source

  1. Open the Applications tab.

  2. Select Cloud Opensearch.

  3. Optional: if you need a different current or archived application version, in the Version field, select the desired version.

  1. Fill in the application parameters:

    4.1. In the Domain zone field, enter the domain for accessing OpenSearch Dashboards that you added in step 2.

    4.2. Enter the email address of the OpenSearch Dashboards administrator. This email will be used to issue SSL certificates.

    4.3. Enter the administrator username to log in to OpenSearch Dashboards. If the parameter is not set, the default value is admin.

    4.4. Enter the administrator password to log in to OpenSearch Dashboards.

    4.5. In the AWS_ACCESS_KEY_ID field, enter the Access key value — the access key for logs that you issued in step 4.

    4.6. In the AWS_SECRET_ACCESS_KEY field, enter the Secret key value — the key for retrieving logs that you issued in step 4.

    4.7. Optional: open the Additional application parameters block and specify the retention period — the number of days the logs will be stored. By default, logs are stored for seven days.

Configuration

Select a configuration from 2 vCPUs, RAM from 2 GB, and boot disk size from 20 GB. For all lines except Shared and Dedicated, two types of server configurations are available:

  • fixed configurations — configurations of lines with different technical specifications, in which the ratio of resources is fixed;
  • custom configurations — configurations in which you can specify any ratio of resources.

Configurations use different processors depending on the line and pool segment. You can customize the selected configuration. After creating the server, you will be able to change the configuration.

  1. Open the tab with the line.

  2. Click Fixed.

  3. Optional: you can customize the configuration if you are creating a server in the ru-6 multi-AZ pool segment or pool segments ru-3b, ru-7a, and ru-7b:

    3.1. Expand the block with the configuration settings description.

    3.2. Optional: select a processor manufacturer. Selecting a manufacturer is not available in all pools.

    3.3. Optional: if you do not want physical processor cores to be assigned to the cloud server vCPUs, uncheck the Dedicated cores checkbox. For more information, see the Dedicated Cores instructions.

    3.4. Optional: if you want to disable Hyper-Threading for a server with dedicated cores, uncheck the Hyper-Threading (SMT) checkbox.

    3.5. Optional: if you are creating a server with dedicated cores and want to place a multi-processor server on a single NUMA node, check the Mandatory placement on a single NUMA node checkbox. A server with 4 vCPUs or more can be placed on a single NUMA node. If the cloud server resources cannot be placed on a single node, it will not be created. For more information, see the Placement on a Single NUMA Node section of the Dedicated Cores instructions.

  4. Select a configuration.

  5. If both local and network disks are available in the selected configuration, select the disk to be used as the boot disk:

    • local disk — check the Local SSD NVMe disk checkbox. A server with a local disk can only be created from images and applications;
    • network disk — do not check the Local SSD NVMe disk checkbox.

    The amount of RAM allocated to the server may be less than specified in the configuration — the operating system kernel reserves part of the RAM depending on the kernel version and distribution. You can check the allocated amount on the server using the sudo dmesg | grep Memory command.

Disks

  1. If you did not check the Local SSD NVMe disk checkbox when customizing the configuration, the first specified network disk will be used as the server boot disk. To configure it:

    1.1. Select the boot network disk type.

    1.2. Specify the network boot disk size in GB or TB. Take into account the network disk limits on maximum size.

    1.3. If you selected the Universal v2 or Fast SSD v2 disk type, specify the total number of read and write operations in IOPS. After creating the disk, you can change the number of IOPS — decrease or increase it. The number of IOPS changes is unlimited.

  2. Optional: add an additional network disk of the server :

    2.1. Click Add.

    2.2. Select the network disk type.

    2.3. Specify the network disk size in GB or TB. Take into account the network disk limits on maximum size.

    2.4. If you selected the Universal v2 or Fast SSD v2 disk type, specify the total number of read and write operations in IOPS. After creating the disk, you can change the number of IOPS — decrease or increase it. The number of IOPS changes is unlimited.

    After creating the server, you will be able to attach new additional disks.

Internet

Configure public access to the server.

The cloud server will be added to the private subnet connected to the cloud router with 1:1 NAT and internet access. Internet access to and from the internet will be carried out via the cloud router. The server will be accessible from the internet via a public floating IP address.

  1. In the Connecting from the internet field, select the Public floating IP address access type.

  2. Select the public floating IP address you created in Step 1.

Private network

A cloud server can be added to an existing or new private subnet.

  1. In the Subnet field, select a private subnet.

  2. Optional: in the IP address field, change the default IP address.

  3. In the Router field, select an existing router or create a new one.

    If the router is not connected to the internet, it will be automatically connected to the internet after the server is created.

Security

Select security groups to filter traffic on server ports. Without security groups, traffic will be blocked. If the block is missing, traffic filtering (port security) is disabled in the server network. With traffic filtering disabled, all traffic will be allowed.

Access

  1. Place a project SSH key on the server for secure connection:

    1.1. If the project SSH key has not been added to the cloud platform, click Add SSH key, enter the key name, paste the public key in OpenSSH format, and click Add.

    1.2. If the project SSH key has been added to the cloud platform, in the SSH key field, select the existing key. The SSH key is only available in the pool where it is placed.

  2. Optional: in the Password for "root" field:

    2.1. Copy the password of the root user — a user with unrestricted permissions for all actions on the system.

    2.2. Save the password in a safe place and do not share it in plain text.

Additional settings

  1. Optional: if you plan to create multiple servers and want to increase infrastructure fault tolerance, add the server to a placement group:

    1.1. To create a new group, in the Placement group field, click Create.

    1.2. Select New group and enter the group name.

    1.3. Select a placement policy on different hosts:

    • desirable — soft-anti-affinity. The system will try to place the servers on different hosts. If there is no suitable host when creating the server, it will be created on the same host;
    • mandatory — anti-affinity. Servers in the group must be located on different hosts. If there is no suitable host when creating the server, the server will not be created.

    1.4. If the group has been created, in the Placement group field, select the placement group.

  2. Optional: to add additional information or filter servers in the list, add server tags. Operating system and configuration tags are added automatically. To add a new tag, in the Tags field, enter the tag.

  3. To add a script that will be executed using the cloud-init agent on the first boot of the operating system, in the Automation block, in the User data field:

    • open the Text tab and paste the script as text;
    • or open the File tab and upload the file with the script.