Renewing expired OpenSearch and Mongo certificates in HCL Connections Component Pack

During installation of the HCL Component pack for HCL Connections, certificates are generated for OpenSearch, Mongo and the Ingress controller. These certificates are valid for 2 years. If you don’t renew them in time, you have a problem when either of these deployments gets restarted.

Read here how to renew these certificates.

Continue reading

Upgrading containerd from 1.7 to 2.x? Read this first!

Upgrading from containerd 1.7 to 2.x as part of an HCL Connections Component Pack upgrade may introduce an unexpected issue: the default open file limit is no longer set to infinity. In larger or heavily used environments, this can lead to EMFILE (Too many open files) errors and application instability, as we experienced with MongoDB after upgrading to CR14. This article explains the change, how to identify whether your environment is affected, and the steps required to restore the previous behavior and verify the fix.

Continue reading

Tuning OpenSearch for HCL Connections

HCL is using OpenSearch as part of its component pack for HCL Connections 8 for metrics and the typeahead functionality. The standard settings for the OpenSearch are rather conservative, and might not work for your environment. In particular if your environment is heavily used, you might run into problems. HCL did provide a possibility in their Helm chart to tune the settings. This article explains how to use it.

Continue reading

Removing security-auditlog indexes from your OpenSearch cluster

If you’re running HCL Connections with OpenSearch, you might be unknowingly storing hundreds of security-auditlog indexes, one for each day since your migration. These tiny but numerous indexes quickly consume shards, impacting cluster health.
In this post, I’ll show you how to disable unnecessary audit logs (if you don’t need them) and safely remove old ones, freeing up resources and restoring cluster stability

Continue reading