How do I troubleshoot OpenSearch Service domain connection errors to Quick Sight?

Resolution

Before you connect Quick Sight to your OpenSearch Service domain, verify that your domain is in the same AWS Region and AWS account as Quick Sight.

Note: OpenSearch Service doesn't support OpenSearch engine version 1.3 or higher or legacy Amazon Elasticsearch Service engine versions 7.7 to 7.10.

Complete the resolution for your error message.

Unsupported engine version error

When you connect to an OpenSearch Service domain, you might receive the following error:

"Your database uses an unsupported engine version. Please review supported versions."

This error occurs when you don't activate compatibility mode on the OpenSearch Service domain. OpenSearch version 1.0 includes the Enable compatibility mode domain setting. Certain OpenSearch Service clients and plugins check the cluster version before connection. Compatibility mode sets OpenSearch Service to report its version as 7.10 so that these clients continue to work. When you activate compatibility mode, Quick Sight identifies the correct version and establishes the connection.

To activate compatibility mode, run the following command:

PUT /_cluster/settings{
     "persistent": {
          "compatibility.override_main_response_version": true
     }
}

Cursor not activated or can't prepare this table error

When you import the OpenSearch Service domain data into SPICE (Super-fast, Parallel, In-memory Calculation Engine), you might receive one of the following errors:

"Can't perform this Action. The domain X has not enabled cursor."

"Unable to prepare this table."

To activate the SQL cursor in your OpenSearch Service domain, run the following command:

PUT _opendistro/_sql/settings{
     "transient": {
          "opendistro.sql.cursor.enabled": "true"
     },
     "persistent": {
          "opendistro.sql.cursor.enabled": "true"
     }
}

Forbidden connection error

If you have fine-grained access control activated on OpenSearch Dashboards in your OpenSearch Service domain, then you might receive the following error:

"GENERAL_SQL_EXCEPTION. Connection error forbidden."

This error occurs because you didn't map the Quick Sight service role to an OpenSearch Service role.

To resolve this error, add permissions to a domain to allow access from Quick Sight.

Related information

Using Amazon OpenSearch Service with Amazon Quick Sight

Supported data sources

Operational best practices for Amazon OpenSearch Service