Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Top 3 Scenarios Where Managing Multiple Clusters with One OpenSearch Dashboard is a Life Saver #2829

Merged
merged 25 commits into from
May 21, 2024
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
25 commits
Select commit Hold shift + click to select a range
ca9e248
add blog for mds experience in dashboards
BionIT May 1, 2024
075a1f1
address vale errors
BionIT May 15, 2024
e3600f7
address Vale error again
BionIT May 15, 2024
eb177c4
update document
BionIT May 16, 2024
a689529
Update _posts/2024-05-16-Top-3-Scenarios-Where-Managing-Multiple-Clus…
BionIT May 16, 2024
7b4af7d
Update _posts/2024-05-16-Top-3-Scenarios-Where-Managing-Multiple-Clus…
BionIT May 16, 2024
1377cf8
Update _posts/2024-05-16-Top-3-Scenarios-Where-Managing-Multiple-Clus…
BionIT May 16, 2024
276854c
Update _posts/2024-05-16-Top-3-Scenarios-Where-Managing-Multiple-Clus…
BionIT May 16, 2024
75b4ec9
Update _posts/2024-05-16-Top-3-Scenarios-Where-Managing-Multiple-Clus…
BionIT May 16, 2024
30c78d4
Update _posts/2024-05-16-Top-3-Scenarios-Where-Managing-Multiple-Clus…
BionIT May 16, 2024
d6fd17d
Update _posts/2024-05-16-Top-3-Scenarios-Where-Managing-Multiple-Clus…
BionIT May 16, 2024
c33716e
Update _posts/2024-05-16-Top-3-Scenarios-Where-Managing-Multiple-Clus…
BionIT May 16, 2024
f489df2
Update _posts/2024-05-16-Top-3-Scenarios-Where-Managing-Multiple-Clus…
BionIT May 16, 2024
47abf7c
Update _posts/2024-05-16-Top-3-Scenarios-Where-Managing-Multiple-Clus…
BionIT May 16, 2024
5255661
Update _posts/2024-05-16-Top-3-Scenarios-Where-Managing-Multiple-Clus…
BionIT May 16, 2024
0c819b6
Update _posts/2024-05-16-Top-3-Scenarios-Where-Managing-Multiple-Clus…
BionIT May 16, 2024
8408306
Update _posts/2024-05-16-Top-3-Scenarios-Where-Managing-Multiple-Clus…
BionIT May 16, 2024
59b8a5a
Update _posts/2024-05-16-Top-3-Scenarios-Where-Managing-Multiple-Clus…
BionIT May 16, 2024
ca874b2
Update _posts/2024-05-16-Top-3-Scenarios-Where-Managing-Multiple-Clus…
BionIT May 16, 2024
6315477
Update _posts/2024-05-16-Top-3-Scenarios-Where-Managing-Multiple-Clus…
BionIT May 16, 2024
54d5e28
Update _posts/2024-05-16-Top-3-Scenarios-Where-Managing-Multiple-Clus…
BionIT May 16, 2024
8e89945
address comments
BionIT May 16, 2024
4137fd4
Update _posts/2024-05-16-Top-3-Scenarios-Where-Managing-Multiple-Clus…
BionIT May 16, 2024
b68b289
format compare search results
BionIT May 16, 2024
790f470
lifesaver becomes one word, date changes to 21st to move it to the to…
nateynateynate May 21, 2024
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
@@ -0,0 +1,96 @@
---
layout: post
title: "Top 3 scenarios in which managing multiple clusters with one OpenSearch Dashboards instance is a lifesaver"
authors:
- nluyu
date: 2024-05-21
categories:
- feature
meta_keyword: OpenSearch multiple data source, OpenSearch Dashboards
meta_description: This blog provides a quick glance at the accumulated features of multi-data sources from version 2.4 to 2.14 and how these features empower your productivity with unified experience.
---

OpenSearch Dashboards, the visualization tool for your OpenSearch data, offers the multiple data sources feature. This feature enables you to consolidate and visualize data from various OpenSearch clusters within a unified dashboard. By integrating disparate sources into a single view, the multiple data sources feature streamlines data analysis workflows, eliminates the need for complex data consolidation processes, and enhances productivity. With the ability to connect to and visualize data from multiple OpenSearch clusters, you can unlock new levels of observability, governance, and data-driven decision-making.

The multiple data sources feature is available in OpenSearch versions 2.4 and later. The feature supports authentication types (AWS Signature Version 4, basic authentication), Vega visualizations, and data management features (importing of saved objects). With OpenSearch 2.14, we have expanded multiple data sources support for nine dashboard features (index management, machine learning [ML], search relevance, anomaly detection, maps, security, notifications, Query Workbench, and trace analytics) and certain visualizations (time-series visual builder [TSVB] and region map). If you are managing an environment with multiple clusters and use one cluster more often than the others, you now have the ability to set a default cluster that can be referenced by all Dashboards features.

This blog post explains the top three scenarios in which you might want to enable one OpenSearch Dashboards instance to manage data from multiple data sources.

## Scenario 1: Unified analytics across distributed data sources
For enterprises with data scattered across various clusters, users previously had to establish temporary ingestion pipelines to consolidate data into a central repository for analysis. However, with the introduction of support for multiple data sources, OpenSearch Dashboards now allows users to query and visualize data from multiple sources within a single dashboard. This feature supports a range of visualization types, like Vega, TSVB, Region Map, and index-pattern-based visualizations, providing a comprehensive and cohesive view of dispersed data.

The following images show how OpenSearch Dashboards can present data from various sources in a unified dashboard view.

You can perform query analytics on different clusters using the data source picker.

<img src="/assets/media/blog-images/2024-05-16-top3-scenarios-where-managing-multiple-clusters-with-one-opensearch-dashboards-is-a-life-saver/discover.png"/>

<img src="/assets/media/blog-images/2024-05-16-top3-scenarios-where-managing-multiple-clusters-with-one-opensearch-dashboards-is-a-life-saver/dashboards_overall.png"/>

The following image shows a TSVB visualization created from disparate data sources.

<img src="/assets/media/blog-images/2024-05-16-top3-scenarios-where-managing-multiple-clusters-with-one-opensearch-dashboards-is-a-life-saver/tsvb_overall.png"/>

By simply specifying a new `data_source_name` field within the Vega specification `url` field, you can create a Vega visualization with data from one or more specific data sources by name. An example specification setting is shown in the following image.

<img src="/assets/media/blog-images/2024-05-16-top3-scenarios-where-managing-multiple-clusters-with-one-opensearch-dashboards-is-a-life-saver/vega_overall.png"/>

The multiple data sources feature supports adding a prefix to the index pattern name, making it easier to identify the pattern during its creation.

<img src="/assets/media/blog-images/2024-05-16-top3-scenarios-where-managing-multiple-clusters-with-one-opensearch-dashboards-is-a-life-saver/maps_1.png"/>

Additionally, the referenced data sources from the current map layers are indicated by clicking on the icon on the top navigation bar.

<img src="/assets/media/blog-images/2024-05-16-top3-scenarios-where-managing-multiple-clusters-with-one-opensearch-dashboards-is-a-life-saver/maps_2.png"/>

## Scenario 2: Centralized data management and governance

In addition to analyzing multiple data sources in a unified dashboard, you can manage remote clusters operationally. You can manage your indexes, security policies, notifications, and ML models and then select the target data source from the unified dashboard.

OpenSearch Dashboards allows you to perform all index operations, such as creating, reading, updating, and deleting indexes, as well as managing index mappings, templates, and aliases, across multiple data sources from a single instance.

You can switch between different data sources using the upper-right navigation bar, select a specific index, and choose the desired operation. Selecting an index name will display detailed information about that index. The data source ID, which is the unique identifier (UUID), is embedded in the URL, allowing you to bookmark and share specific pages directly.

The following images show the data source picker in the upper-right corner in Index State Management.

<img src="/assets/media/blog-images/2024-05-16-top3-scenarios-where-managing-multiple-clusters-with-one-opensearch-dashboards-is-a-life-saver/indexes_overview.png"/>

<img src="/assets/media/blog-images/2024-05-16-top3-scenarios-where-managing-multiple-clusters-with-one-opensearch-dashboards-is-a-life-saver/detailed_index.png"/>

OpenSearch Dashboards supports managing security across multiple data sources. Administrators can centrally manage roles and internal users for different clusters by selecting the desired cluster from the DATA SOURCES dropdown menu, as shown in the following image.

<img src="/assets/media/blog-images/2024-05-16-top3-scenarios-where-managing-multiple-clusters-with-one-opensearch-dashboards-is-a-life-saver/roles_overview.png"/>

You can also manage notification channels, as shown in the following image.

<img src="/assets/media/blog-images/2024-05-16-top3-scenarios-where-managing-multiple-clusters-with-one-opensearch-dashboards-is-a-life-saver/channels_overview.png"/>

Users can manage remote ML models, as shown in the following image. The pretrained models are deployed to the selected cluster through the Dev Tools console.

<img src="/assets/media/blog-images/2024-05-16-top3-scenarios-where-managing-multiple-clusters-with-one-opensearch-dashboards-is-a-life-saver/models_overview.png"/>

The Dev Tools console, shown in the following image, is integrated with the multiple data sources feature. You can select the target data source and execute commands to query the backend data directly from a central location.

<img src="/assets/media/blog-images/2024-05-16-top3-scenarios-where-managing-multiple-clusters-with-one-opensearch-dashboards-is-a-life-saver/devtool.png"/>

The multiple data sources feature enables OpenSearch Dashboards to provide a centralized interface for creating, viewing, and modifying anomaly detectors from various OpenSearch clusters, streamlining the management process, as shown in the following image.

<img src="/assets/media/blog-images/2024-05-16-top3-scenarios-where-managing-multiple-clusters-with-one-opensearch-dashboards-is-a-life-saver/detector_detail.png"/>


## Scenario 3: Comparing search query results across clusters

For users with multiple OpenSearch clusters handling search traffic, the multiple data sources feature allows OpenSearch Dashboards to compare search results across these clusters within a single instance by using the data source picker in the `Compare search results` application.

<img src="/assets/media/blog-images/2024-05-16-top3-scenarios-where-managing-multiple-clusters-with-one-opensearch-dashboards-is-a-life-saver/compare_queries.png"/>


## Summary
The multiple data sources feature in OpenSearch Dashboards represents a significant advancement in data analysis and management. By consolidating access to distributed data sources within a single interface, it enables users to gain comprehensive insights, streamline operations, and make informed decisions more efficiently. As organizations face challenges in managing and analyzing data across disparate systems, this feature positions OpenSearch Dashboards as a powerful solution for centralized data observability, governance, and exploration. With the ability to unify data from multiple clusters, users can unlock new levels of productivity, collaboration, and data-driven decision-making across their data ecosystem.

If you have additional scenarios you’d like us to cover, let us know.

Special thanks to Ramakrishna Chilaka, Prabhat Sharma, Derek Ho, Junqiu Lei, Jackie Han, Riya Saxena, Sumukh Hanumantha Swamy, Lin Wang, Ella Zhu, Emma Jin, Huy Nguyen, and Zhongnan Su for their work in building multiple data sources support for OpenSearch Dashboards.

Check failure on line 93 in _posts/2024-05-16-Top-3-Scenarios-Where-Managing-Multiple-Clusters-with-One-OpenSearch-Dashboards-is-a-Life-Saver.md

View workflow job for this annotation

GitHub Actions / style-job

[vale] reported by reviewdog 🐶 [OpenSearch.Spelling] Error: Chilaka. If you are referencing a setting, variable, format, function, or repository, surround it with tic marks. Raw Output: {"message": "[OpenSearch.Spelling] Error: Chilaka. If you are referencing a setting, variable, format, function, or repository, surround it with tic marks.", "location": {"path": "_posts/2024-05-16-Top-3-Scenarios-Where-Managing-Multiple-Clusters-with-One-OpenSearch-Dashboards-is-a-Life-Saver.md", "range": {"start": {"line": 93, "column": 31}}}, "severity": "ERROR"}

Check failure on line 93 in _posts/2024-05-16-Top-3-Scenarios-Where-Managing-Multiple-Clusters-with-One-OpenSearch-Dashboards-is-a-Life-Saver.md

View workflow job for this annotation

GitHub Actions / style-job

[vale] reported by reviewdog 🐶 [OpenSearch.Spelling] Error: Prabhat. If you are referencing a setting, variable, format, function, or repository, surround it with tic marks. Raw Output: {"message": "[OpenSearch.Spelling] Error: Prabhat. If you are referencing a setting, variable, format, function, or repository, surround it with tic marks.", "location": {"path": "_posts/2024-05-16-Top-3-Scenarios-Where-Managing-Multiple-Clusters-with-One-OpenSearch-Dashboards-is-a-Life-Saver.md", "range": {"start": {"line": 93, "column": 40}}}, "severity": "ERROR"}

Check failure on line 93 in _posts/2024-05-16-Top-3-Scenarios-Where-Managing-Multiple-Clusters-with-One-OpenSearch-Dashboards-is-a-Life-Saver.md

View workflow job for this annotation

GitHub Actions / style-job

[vale] reported by reviewdog 🐶 [OpenSearch.Spelling] Error: Sharma. If you are referencing a setting, variable, format, function, or repository, surround it with tic marks. Raw Output: {"message": "[OpenSearch.Spelling] Error: Sharma. If you are referencing a setting, variable, format, function, or repository, surround it with tic marks.", "location": {"path": "_posts/2024-05-16-Top-3-Scenarios-Where-Managing-Multiple-Clusters-with-One-OpenSearch-Dashboards-is-a-Life-Saver.md", "range": {"start": {"line": 93, "column": 48}}}, "severity": "ERROR"}

Check failure on line 93 in _posts/2024-05-16-Top-3-Scenarios-Where-Managing-Multiple-Clusters-with-One-OpenSearch-Dashboards-is-a-Life-Saver.md

View workflow job for this annotation

GitHub Actions / style-job

[vale] reported by reviewdog 🐶 [OpenSearch.Spelling] Error: Junqiu. If you are referencing a setting, variable, format, function, or repository, surround it with tic marks. Raw Output: {"message": "[OpenSearch.Spelling] Error: Junqiu. If you are referencing a setting, variable, format, function, or repository, surround it with tic marks.", "location": {"path": "_posts/2024-05-16-Top-3-Scenarios-Where-Managing-Multiple-Clusters-with-One-OpenSearch-Dashboards-is-a-Life-Saver.md", "range": {"start": {"line": 93, "column": 66}}}, "severity": "ERROR"}

Check failure on line 93 in _posts/2024-05-16-Top-3-Scenarios-Where-Managing-Multiple-Clusters-with-One-OpenSearch-Dashboards-is-a-Life-Saver.md

View workflow job for this annotation

GitHub Actions / style-job

[vale] reported by reviewdog 🐶 [OpenSearch.Spelling] Error: Riya. If you are referencing a setting, variable, format, function, or repository, surround it with tic marks. Raw Output: {"message": "[OpenSearch.Spelling] Error: Riya. If you are referencing a setting, variable, format, function, or repository, surround it with tic marks.", "location": {"path": "_posts/2024-05-16-Top-3-Scenarios-Where-Managing-Multiple-Clusters-with-One-OpenSearch-Dashboards-is-a-Life-Saver.md", "range": {"start": {"line": 93, "column": 90}}}, "severity": "ERROR"}

Check failure on line 93 in _posts/2024-05-16-Top-3-Scenarios-Where-Managing-Multiple-Clusters-with-One-OpenSearch-Dashboards-is-a-Life-Saver.md

View workflow job for this annotation

GitHub Actions / style-job

[vale] reported by reviewdog 🐶 [OpenSearch.Spelling] Error: Saxena. If you are referencing a setting, variable, format, function, or repository, surround it with tic marks. Raw Output: {"message": "[OpenSearch.Spelling] Error: Saxena. If you are referencing a setting, variable, format, function, or repository, surround it with tic marks.", "location": {"path": "_posts/2024-05-16-Top-3-Scenarios-Where-Managing-Multiple-Clusters-with-One-OpenSearch-Dashboards-is-a-Life-Saver.md", "range": {"start": {"line": 93, "column": 95}}}, "severity": "ERROR"}

Check failure on line 93 in _posts/2024-05-16-Top-3-Scenarios-Where-Managing-Multiple-Clusters-with-One-OpenSearch-Dashboards-is-a-Life-Saver.md

View workflow job for this annotation

GitHub Actions / style-job

[vale] reported by reviewdog 🐶 [OpenSearch.Spelling] Error: Sumukh. If you are referencing a setting, variable, format, function, or repository, surround it with tic marks. Raw Output: {"message": "[OpenSearch.Spelling] Error: Sumukh. If you are referencing a setting, variable, format, function, or repository, surround it with tic marks.", "location": {"path": "_posts/2024-05-16-Top-3-Scenarios-Where-Managing-Multiple-Clusters-with-One-OpenSearch-Dashboards-is-a-Life-Saver.md", "range": {"start": {"line": 93, "column": 103}}}, "severity": "ERROR"}

Check failure on line 93 in _posts/2024-05-16-Top-3-Scenarios-Where-Managing-Multiple-Clusters-with-One-OpenSearch-Dashboards-is-a-Life-Saver.md

View workflow job for this annotation

GitHub Actions / style-job

[vale] reported by reviewdog 🐶 [OpenSearch.Spelling] Error: Hanumantha. If you are referencing a setting, variable, format, function, or repository, surround it with tic marks. Raw Output: {"message": "[OpenSearch.Spelling] Error: Hanumantha. If you are referencing a setting, variable, format, function, or repository, surround it with tic marks.", "location": {"path": "_posts/2024-05-16-Top-3-Scenarios-Where-Managing-Multiple-Clusters-with-One-OpenSearch-Dashboards-is-a-Life-Saver.md", "range": {"start": {"line": 93, "column": 110}}}, "severity": "ERROR"}

Check failure on line 93 in _posts/2024-05-16-Top-3-Scenarios-Where-Managing-Multiple-Clusters-with-One-OpenSearch-Dashboards-is-a-Life-Saver.md

View workflow job for this annotation

GitHub Actions / style-job

[vale] reported by reviewdog 🐶 [OpenSearch.Spelling] Error: Swamy. If you are referencing a setting, variable, format, function, or repository, surround it with tic marks. Raw Output: {"message": "[OpenSearch.Spelling] Error: Swamy. If you are referencing a setting, variable, format, function, or repository, surround it with tic marks.", "location": {"path": "_posts/2024-05-16-Top-3-Scenarios-Where-Managing-Multiple-Clusters-with-One-OpenSearch-Dashboards-is-a-Life-Saver.md", "range": {"start": {"line": 93, "column": 121}}}, "severity": "ERROR"}



Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Loading