Skip to main content

Elastic Cloud

Visualize Elastic Cloud Search Account, Users, Clusters, Nodes, Backup, Roles and Service Accounts changes through queries and alerts.

Installation Guide

Info​

User needs to create an instance per deployment.

Requirements​

To Configure the integration, ensure you have the following:

  • Elastic Cloud Account ID
  • Elasticsearch API Key
  • Elasticsearch Cloud ID (generated in your Elastic Cloud account)

Configuration in Elastic Cloud​

Creating an Elasticsearch API Key​

  1. Log in to your Elastic Cloud Account.
  2. Select your deployment from the dashboard.
  3. Select the Search app.
  4. Copy the Elasticsearch Endpoint displayed on the homepage.
  5. Click Manage.
  6. Select Create New API Key.
  7. Provide an API Key Name for identification.
  8. Choose User API Key as the type.
  9. Specify the Expiry date for the API Key.
  10. Enable Control Security Privileges.
  11. Click Create API Key .
  12. Copy the generated Elasticsearch API Key.
  13. Click on your profile icon and select Organization
  14. Copy organization ID.

Configuration in JupiterOne​

To install the Elastic Cloud integration in JupiterOne, navigate to the Integrations tab in JupiterOne and select Elastic Cloud. Click New Instance to begin configuring your integration.

Creating an instance requires the following:

  • The Account Name used to identify the Elastic Cloud account in JupiterOne. Ingested entities will have this value stored in tag.AccountName when the AccountName toggle is enabled.

  • Description to assist in identifying the integration instance, if desired.

  • Polling Interval that you feel is sufficient for your monitoring needs. You may leave this as DISABLED and manually execute the integration.

  • Your Elastic Cloud Account ID (Organization ID), Elasticsearch Endpoint, and Elasticsearch API Key.

Click Create once all values are provided to finalize the integration.

Next steps​

Now that your integration instance has been configured, it will begin running on the polling interval you provided, populating data within JupiterOne. Continue on to our Instance management guide to learn more about working with and editing integration instances.