OpenSearch LogExporter

OpenSearch LogExporter

Certified
Enterprise Edition

Export execution logs to OpenSearch

Streams Kestra log records into an OpenSearch index using bulk requests; control batch size and connection settings, index name is required.

yaml
type: io.kestra.plugin.ee.opensearch.LogExporter

Ship logs to Opensearch

yaml
id: log_shipper
namespace: company.team

triggers:
  - id: daily
    type: io.kestra.plugin.core.trigger.Schedule
    cron: "@daily"

tasks:
  - id: logSync
    type: io.kestra.plugin.ee.core.log.LogShipper
    logLevelFilter: INFO
    batchSize: 1000
    lookbackPeriod: P1D
    logExporters:
      - id: OpensearchLogExporter
        type: io.kestra.plugin.ee.opensearch.LogExporter
        connection:
          hosts:
            - "http://localhost:9200/"
        indexName: "logs"
Properties

OpenSearch connection

Shared HTTP settings including hosts, auth, headers, path prefix, and TLS options.

Definitions
hosts*Requiredarray
SubTypestring

Target OpenSearch HTTP endpoints

One or more full URLs with scheme and port, e.g. https://opensearch.com: 9200.

basicAuth

Authenticate with HTTP basic auth

Provide username (and optionally password) to send Basic credentials with every request.

passwordstring

Basic auth password

Rendered before use; leave empty for anonymous access.

usernamestring

Basic auth username

Rendered before use; required when password is provided.

headersarray
SubTypestring

Send custom HTTP headers

Each entry must be Name: Value, e.g. Authorization: Token XYZ; rendered before being sent on every request.

pathPrefixstring

Prefix all request paths

Prepends this path (e.g. /my/base) to every endpoint; use when OpenSearch sits behind a proxy that requires a base path.

strictDeprecationModebooleanstring

Fail on deprecation warnings

When true, any response carrying a warning header is treated as a failure; disabled unless set.

trustAllSslbooleanstring

Trust all SSL certificates

Ignore certificate chain validation (insecure); useful only for self-signed test clusters. Hostname verification is still enforced. WARNING: enabling this option exposes the connection to man-in-the-middle attacks and must never be used in production environments or when connecting to external or sensitive data stores.

Validation RegExp^[a-zA-Z0-9][a-zA-Z0-9_-]*
Min length1

Target index name

Rendered before use; must exist or auto-create per cluster settings.

Default1000

Bulk chunk size

Number of log records per bulk request; defaults to 1000.

The number of records sent to Opensearch

The number of requests sent to Opensearch

The duration of the requests sent to Opensearch