Difference between revisions of "ElasticSearch"

Line 8: Line 8:
 
* '''JAVA 1.7.55+'''  
 
* '''JAVA 1.7.55+'''  
  
<syntaxhiglight lang="bash">
+
<syntaxhighlight lang="bash">
 
java -version  
 
java -version  
 
</syntaxhighlight>
 
</syntaxhighlight>
Line 57: Line 57:
 
Set your CLUSTER and NODE name.
 
Set your CLUSTER and NODE name.
  
<syntaxhighlight lang="yml">
+
<syntaxhighlight lang="yaml">
 
cluster.name: VEHCO        # line 33
 
cluster.name: VEHCO        # line 33
 
node.name: "SMARTCARDS"     # line 40
 
node.name: "SMARTCARDS"     # line 40
Line 101: Line 101:
 
## OR ##
 
## OR ##
 
/etc/init.d/elasticsearch start
 
/etc/init.d/elasticsearch start
</syntaxhiglight>
+
</syntaxhighlight>
 +
 
 +
 
 +
 
 +
=References=
 +
 
 +
* Very good webinar from the ElasticSearch team: http://www.elasticsearch.org/webinars/introduction-to-logstash/?watch=1
 +
* Official ElasticSearch documentation: http://www.elasticsearch.org
  
  

Revision as of 17:26, 17 November 2014


Requirements

To install and use ELK you need:

  • JAVA 1.7.55+
java -version

Java version must be > 1.7.0_55


  • Firewall rule

Open the port 9200. See FW input && FW output



ElasticSearch

Installation

Source: http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/setup-repositories.html


  • Add ELK repository: see Sources#ELK
  • Install application
apt-get install elasticsearch


  • Register application as a service
cd /etc/init.d
update-rc.d elasticsearch defaults 95 10


Configuration

Edit the configuration file:

vim /etc/elasticsearch/elasticsearch.yml


Set your CLUSTER and NODE name.

cluster.name: VEHCO         # line 33
node.name: "SMARTCARDS"	    # line 40


Extensions (plugins)

You need to install some extensions (plugins) to get the full power of ElasticSearch.


The following plugin list is the one recommanded by ElasticSearch team into their "introduction to ES" webinar.

cd /usr/share/elasticsearch/
./plugin -install karmi/elasticsearch-paramedic
./plugin -install mobz/elasticsearch-head
./plugin -install royrusso/elasticsearch-HQ


More information about each plugin:


You can access the plugins using the /_plugin/ URL:


You can search for more plugins on Google or the official ElasticSearch web-site. Checkout http://www.elasticsearch.org/download to get a list of plugins available per official developer.


Start ElasticSearch

service elasticsearch start 

## OR ##
/etc/init.d/elasticsearch start


References



TO BE CONTINUED...

user & group "elasticsearch"

>> CONF_DIR=/etc/elasticsearch >> LOG_DIR=/var/log/elasticsearch >> DATA=/var/lib/elasticsearch