From d31b21082db53c6ba228ec8c8899f2f457ec846e Mon Sep 17 00:00:00 2001 From: Xue Zhou Date: Mon, 19 Jul 2021 23:16:03 -0700 Subject: [PATCH 1/2] Update configuration.md --- _opensearch/configuration.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/_opensearch/configuration.md b/_opensearch/configuration.md index a6a0f995..726591a2 100755 --- a/_opensearch/configuration.md +++ b/_opensearch/configuration.md @@ -65,4 +65,8 @@ PUT _cluster/settings You can find `opensearch.yml` in `/usr/share/opensearch/config/opensearch.yml` (Docker) or `/etc/opensearch/opensearch.yml` (most Linux distributions) on each node. +You can edit the `OPENSEARCH_PATH_CONF=/etc/opensearch` to change the config directory location. This variable is sourced from `/etc/default/opensearch`(Debian package) and `/etc/sysconfig/opensearch`(RPM package). + +If you set your customized `OPENSEARCH_PATH_CONF` variable, be aware that other default environment variables will not be loaded. + The demo configuration includes a number of settings for the security plugin that you should modify before using OpenSearch for a production workload. To learn more, see [Security]({{site.url}}{{site.baseurl}}/security-plugin/). From 305266b1dc158247ef81e70d8bff283c7302f449 Mon Sep 17 00:00:00 2001 From: Xue Zhou Date: Mon, 19 Jul 2021 23:57:13 -0700 Subject: [PATCH 2/2] =?UTF-8?q?=E2=80=9Cconfiguration-change=E2=80=9D?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Xue Zhou --- _im-plugin/ism/api.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/_im-plugin/ism/api.md b/_im-plugin/ism/api.md index 20646487..4b568ad6 100644 --- a/_im-plugin/ism/api.md +++ b/_im-plugin/ism/api.md @@ -160,6 +160,10 @@ POST _plugins/_ism/add/index_1 } ``` +If you use a wildcard `*` while adding a policy to an index, the ISM plugin interprets `*` as all indices, including system indices like `.opendistro-security`, which stores users, roles, and tenants. A delete action in your policy might accidentally delete all user roles and tenants in your cluster. +Don't use the broad `*` wildcard, and instead add a prefix, such as `my-logs*`, when specifying indices with the `_ism/add` API. +{: .warning } + ---