-
Notifications
You must be signed in to change notification settings - Fork 124
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
KB article with opensearch documentation #2572
Conversation
3b196e3
to
616b582
Compare
Issue:
|
The screenshot below show some of the major changes to the user interfaces, such as: | ||
1. The drop down menus have moved from the upper left to the upper right | ||
2. The "Top 5 values" for a field view is now an option to the right of the field, instead of a double-click | ||
3. There are a lot more values gathered for container metrics |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is true, but it's not a user interface change
* If you share the same saved object across multiple orgs, you will need to import it into each of your orgs. | ||
* Better handling of large log messages. Both Kibana/ELK and OpenSearch have a 32kb limit on message size. The older system dropped such messages from Kibana (although they were still retained in cold storage), the newer system keeps the first 32kb and discards the rest | ||
* Truncated messages are tagged with `_messagetrimmed`. | ||
* Extremely large log messages (over 1Gb) are trimmed and tagged `_logtrimmed` -- such message are probably indicative of a coding error in your application. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I thought 1Gb sounded high, so I must have mis-heard Jason. Fixing...
* Definitions of saved searches and visualizations are now isolated by OpenSearch tenants that correspond to Cloud.gov organizations. | ||
* You no longer need to worry about choosing a globally unique name. | ||
* If you share the same saved object across multiple orgs, you will need to import it into each of your orgs. | ||
* Better handling of large log messages. Both Kibana/ELK and OpenSearch have a 32kb limit on message size. The older system dropped such messages from Kibana (although they were still retained in cold storage), the newer system keeps the first 32kb and discards the rest |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Currently we're only truncating JSON messages that are over 32KB, but we probably should do it for all messages
Perfect, thanks Co-authored-by: Mark Boyd <[email protected]> Signed-off-by: Peter Burkholder <[email protected]>
|
||
--- | ||
|
||
## What's Changing in December 2024 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Since the title of the post ("Migrating to the OpenSearch Dashboard for Cloud.gov log") renders as second-level heading, for semantics it could make sense to render these as third level headings and so on, but not a blocking suggestion
Changes proposed in this pull request:
Security Considerations
Safe. Documents how to use a customer-facing service, without going into sensitive implementation details.