Elasticsearch domains should have at least three dedicated master nodes

문서 > Datadog 보안 > OOTB Rules > Elasticsearch domains should have at least three dedicated master nodes

이 페이지는 아직 한국어로 제공되지 않으며 번역 작업 중입니다. 번역에 관한 질문이나 의견이 있으시면 언제든지 저희에게 연락해 주십시오.

Description

This control verifies whether Elasticsearch domains are configured with at least three dedicated primary nodes and ensures that dedicated master is enabled.

Note: Using more than three primary nodes may be excessive for mitigating availability risks and can lead to higher costs. For high availability and fault tolerance, an Elasticsearch domain should have at least three dedicated primary nodes. These nodes can become heavily utilized during data node blue/green deployments due to the additional management required. Ensuring an Elasticsearch domain has at least three dedicated primary nodes provides adequate primary node resources and maintains cluster operations in the event of a node failure.

Remediation

To modify the number of data nodes in an Elasticsearch domain:

Log in to the Amazon OpenSearch Service console.
Under Domains, choose the name of the domain you want to edit.
Click Edit domain.
Under Dedicated master nodes, set Instance type to the desired instance type.
Set Number of master nodes equal to three or greater.
Click Submit.