Using OpenSearch Dashboards with Logs Data Platform

Objective

This guide will help you unleash the full power of OpenSearch Dashboards and craft some beautiful Dashboards from your logs.

Requirements

This is what you need to know to get you started:

• You are already sending logs on a stream you own: see the quick start tutorial
• There is nothing else

After some training you will be able to do this kind of Dashboard:

OVHcloud Control Panel Access

• Direct link: Logs Data Platform
• Navigation path: Identity, Security & Operations > Logs Data Platform > Select the platform concerned

Instructions

Create your Stream Alias

To access your logs from OpenSearch Dashboards, you will need to setup an OpenSearch Alias and link them to your Graylog streams, so here we go:

1. In the Alias tab, click on the Add an alias button
2. Choose a name and define a description for your alias
3. Save the entry by clicking the Save button
4. Once the alias has been created, use the ... menu to the right and select Attach content to the alias option.
5. Define there the graylog streams you want to associate to your alias
6. That's it.

So now Logs Data Platform knows which stream you want to browse. Now let's configure OpenSearch Dashboards and see if it works!

Access your OpenSearch Dashboards instance

To create your OpenSearch Dashboards instance, click on OpenSearch Dashboards tab, click on Add a instance, put a description and click on Order to launch the creation of your instance. Your instance will be created and delivered in approximately 20 minutes.

Use the ... menu to the right and select Access to your OpenSearch Dashboards instance option to be redirected.

Once there, use the right Identity provider to sign in and set on the first page. Click on the Add data button to add sample data you can play with. However if you want to use your own data, you must configure Index Patterns in the stack management page. This page is accessible by clicking on the Manage button next to the "Add data" button. You can also use the "Stack Management" option in the left side menu, displayable by using the top left the sandwich button.

In this configuration page, you can configure as the Index name, the full name of your alias ldp-XXXXX-a-XXXXX, but you can also use wildcards. Choose timestamp for the time field name then click on Discover tab to read your log entries.

You can also explore any OpenSearch index you created on the platform. One OpenSearch Dashboards instance allows you to explore all the data you delivered on Logs Data Platform.

To know what you can do with OpenSearch Dashboards, read the OpenSearch Dashboards documentation

Go further

• Getting Started: Quick Start
• Documentation: Guides
• Community hub: https://community.ovh.com
• Create an account: Try it!