Elasticsearch

Elasticsearch-compatible search connector using the OpenSearch REST contract.

Property	Value
Key	elasticsearch
Source type	search
Status	native
Active by default	no
Default cache strategy	semantic_first
Capabilities	supports_discovery, supports_field_permissions, supports_ingestion, supports_query

Caution

No test stack registers a source on this connector, so its source roles, policy, redaction and audit are not exercised by any test. The adapter works; its governance is unproven.

Connection configuration

Secret fields should be given as a reference, <field>_ref, such as env://NAME, rather than a literal.

Key	Secret
base_url	no
username	no
password_ref	no
token_ref	no
indices	no
max_docs_per_index	no
password	yes; prefer password_ref
token	yes; prefer token_ref

Default role templates

Offered when a source is created with default roles. Edit them to fit.

blocked

Effect	Action	Resource type	Pattern
deny	*	*	*

query_reader

Effect	Action	Resource type	Pattern
allow	search.index.describe	search.index	*
allow	search.query	search.index	*
allow	search.document.read	search.document	*
allow	discovery.search	discovery.asset	*
allow	discovery.asset.read	discovery.asset	*