REL-1300584: Addressed feedback changes

Author: Rahiman-Nadaf

elastic-stack-setup/elastic-stack-setup-03-audit.md

@@ -23,12 +23,35 @@ After installing the required Elastic components for Data Grid Audit, the integr
 
    ```powershell
    Test-NetConnection -ComputerName <relativity-hostname> -Port 443
-   Test-NetConnection -ComputerName <elasticsearch-hostname> -Port 9200
+   Test-NetConnection -ComputerName <elasticsearch-masternode-hostname> -Port 9200
+   ```
+
+   Example output:
+
+   ```
+   PS C:\Users\relserviceaccount> Test-NetConnection -ComputerName <relativity-hostname> -Port 443
+
+   ComputerName     : <relativity-hostname>
+   RemoteAddress    : <relativity-ip-address>
+   RemotePort       : 443
+   InterfaceAlias   : Ethernet 3
+   SourceAddress    : <sql-primary-ip-address>
+   TcpTestSucceeded : True
+
+
+   PS C:\Users\relserviceaccount> Test-NetConnection -ComputerName <elasticsearch-masternode-hostname> -Port 9200
+
+   ComputerName     : <elasticsearch-masternode-hostname>
+   RemoteAddress    : <elasticsearch-masternode-ip-address>
+   RemotePort       : 9200
+   InterfaceAlias   : Ethernet 3
+   SourceAddress    : <sql-primary-ip-address>
+   TcpTestSucceeded : True
    ```
 
    Both must return `TcpTestSucceeded : True` before proceeding. If either fails, resolve the network or firewall issue before continuing.
 
-5. **SSL/TLS certificate trust** — The SSL certificates for both Relativity (Kepler) and Elasticsearch must be trusted on the SQL Primary server. This is one of the most common causes of CLI setup failure, particularly when certificates are self-signed, issued by a private CA, or issued to a hostname that differs from the one provided as the URL input.
+5. **SSL/TLS certificate trust** — The SSL certificates for both Relativity (Kepler) and Elasticsearch must be trusted on the SQL Primary server.
 
    **Relativity (Kepler) SSL certificate:**
    - The Kepler SSL certificate must be trusted on the SQL Primary server, and must be issued to the same hostname you provide as the Relativity instance URL. A mismatch between the certificate hostname and the URL will cause SSL validation to fail even if the certificate itself is valid.
@@ -41,7 +64,7 @@ After installing the required Elastic components for Data Grid Audit, the integr
    - The Elasticsearch cluster certificate must be trusted on the SQL Primary server.
    - To verify from the SQL Primary server:
      ```powershell
-     curl.exe -u <username>:<password> -X GET "https://<elasticsearch-hostname>:9200/"
+     curl.exe -u <username>:<password> -X GET "https://<elasticsearch-masternode-hostname>:9200/"
      ```
 
    A successful response (without `-k`) for each confirms the certificate is trusted. If a command only succeeds with `-k` (skip verification), import the relevant CA certificate into the Windows **Trusted Root Certification Authorities** store on the SQL Primary before proceeding. See [SSL/TLS Certificate Issues](./troubleshooting/pre-requisite-troubleshooting.md#ssltls-certificate-issues) for import instructions.
@@ -59,16 +82,16 @@ After installing the required Elastic components for Data Grid Audit, the integr
 > Providing the wrong Relativity or Elasticsearch URL is one of the most common causes of setup failure. Review these requirements before running the CLI.
 
 **Relativity instance URL:**
-- Use the **load balancer or primary web server hostname** that is reachable from the SQL Primary server, in the format `https://<hostname>/Relativity`.
+- Use the **load balancer or primary web server hostname** that is reachable from the SQL Primary server, in the format `https://<domainurl>/Relativity`.
 - Do **not** use a private or internal hostname that resolves differently from the SQL server than from workstations. The CLI makes REST API calls from the SQL Primary server, so the URL must resolve and be routable from that machine.
 - The URL must use HTTPS and the certificate at that hostname must be trusted on the SQL Primary server (see prerequisite 5).
-- Example: `https://relativity.example.com/Relativity`
+- Example: `https://<domainurl>/Relativity`
 
 **Elasticsearch cluster endpoint URL:**
 - Use the **master node hostname** — do not use a data node URL. The CLI communicates with the cluster through the master/coordinating node, which handles cluster-level operations such as API key creation and index management.
 - The default port is `9200`. The URL must use HTTPS if TLS is enabled on the cluster.
 - Use a hostname that matches the **Subject Alternative Name (SAN) or Common Name (CN)** on the Elasticsearch TLS certificate. Using an IP address or alternate hostname not covered by the certificate will cause a certificate mismatch (SSL error) even if the certificate is otherwise trusted.
-- Example: `https://<elasticsearch-hostname>:9200`
+- Example: `https://<elasticsearch-masternode-hostname>:9200`
 
 > [!TIP]
 > If your environment uses a load balancer in front of Elasticsearch, confirm that the load balancer certificate covers the hostname you are providing, and that the backend nodes are also individually accessible for certificate validation. When in doubt, use the individual node hostname that matches the certificate CN/SAN.
@@ -99,22 +122,22 @@ Follow these steps to set up Data Grid Audit using the Relativity Server CLI. Al
     Existing settings do not exist
     Enter the Relativity admin username (<relativity-admin-username>): <relativity-admin-username>
     Enter the Relativity admin password: *********
-    Enter the Relativity instance url (https://relativity.example.com/Relativity): https://relativity.example.com/Relativity
+    Enter the Relativity instance url (https://<domainurl>/Relativity): https://<domainurl>/Relativity
     Relativity instance is verified
     Enter the Elasticsearch admin username (elastic): elastic
     Enter the Elasticsearch admin password: *********
-    Enter the Elasticsearch cluster endpoint URL (https://<elasticsearch-hostname>:9200): https://<elasticsearch-hostname>:9200
+    Enter the Elasticsearch cluster endpoint URL (https://<elasticsearch-masternode-hostname>:9200): https://<elasticsearch-masternode-hostname>:9200
 
     ```
 
     | Parameter | Description | Example |
     | :--- | :--- | :--- |
     | Relativity admin username | The username of a Relativity System Administrator account. Must use Forms Authentication with two-factor authentication disabled. | `<relativity-admin-username>` |
     | Relativity admin password | The password for the Relativity admin account. | |
-    | Relativity instance URL | The HTTPS URL of the Relativity web server or load balancer, reachable from the SQL Primary server. Must end with `/Relativity`. | `https://relativity.example.com/Relativity` |
+    | Relativity instance URL | The HTTPS URL of the Relativity web server or load balancer, reachable from the SQL Primary server. Must end with `/Relativity`. | `https://<domainurl>/Relativity` |
     | Elasticsearch admin username | The username of an Elasticsearch account with superuser privileges. | `elastic` |
     | Elasticsearch admin password | The password for the Elasticsearch admin account. | |
-    | Elasticsearch cluster endpoint URL | The HTTPS URL of the Elasticsearch **master**. Do not use a data node URL. The hostname must match the CN/SAN on the Elasticsearch TLS certificate. Default port is `9200`. | `https://<elasticsearch-hostname>:9200` |
+    | Elasticsearch cluster endpoint URL | The HTTPS URL of the Elasticsearch **master**. Do not use a data node URL. The hostname must match the CN/SAN on the Elasticsearch TLS certificate. Default port is `9200`. | `https://<elasticsearch-masternode-hostname>:9200` |
 
 3. Wait for Setup to Complete.