ElasticSearch

Requirements

To install and use ELK you need:

• JAVA 1.7.55+

<syntaxhiglight lang="bash"> java -version </syntaxhighlight>

Java version must be > 1.7.0_55

• Firewall rule

Open the port 9200. See FW input && FW output

ElasticSearch

Installation

Source: http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/setup-repositories.html

• Add ELK repository: see [Sources#ELK]
• Install application

<syntaxhiglight lang="bash"> apt-get install elasticsearch </syntaxhighlight>

• Register application as a service

<syntaxhiglight lang="bash"> cd /etc/init.d update-rc.d elasticsearch defaults 95 10 </syntaxhighlight>

Configuration

Edit the configuration file:

<syntaxhiglight lang="bash"> vim /etc/elasticsearch/elasticsearch.yml </syntaxhighlight>

Set your CLUSTER and NODE name.

<syntaxhiglight lang="yml"> cluster.name: VEHCO # line 33 node.name: "SMARTCARDS" # line 40 </syntaxhighlight>

Extensions (plugins)

You need to install some extensions (plugins) to get the full power of ElasticSearch.

The following plugin list is the one recommanded by ElasticSearch team into their "introduction to ES" webinar.

<syntaxhiglight lang="bash"> cd /usr/share/elasticsearch/ ./plugin -install karmi/elasticsearch-paramedic ./plugin -install mobz/elasticsearch-head ./plugin -install royrusso/elasticsearch-HQ </syntaxhighlight>

More information about each plugin:

• Paramedic = Simple ElasticSearc overview and real-time data, see: https://github.com/karmi/elasticsearch-paramedic
• Head = Quick cluster overview, see: http://mobz.github.io/elasticsearch-head
• HQ = Overall manager - quite powerful, see http://www.elastichq.org/

You can access the plugins using the /_plugin/ URL:

• http://localhost:9200/_plugin/paramedic/index.html
• http://localhost:9200/_plugin/head/
• http://localhost:9200/_plugin/HQ/

You can search for more plugins on Google or the official ElasticSearch web-site. Checkout http://www.elasticsearch.org/download to get a list of plugins available per official developer.

Start ElasticSearch

<syntaxhiglight lang="bash"> service elasticsearch start

1. 1. OR ##

/etc/init.d/elasticsearch start </syntaxhiglight>

TO BE CONTINUED...

user & group "elasticsearch"

>> CONF_DIR=/etc/elasticsearch >> LOG_DIR=/var/log/elasticsearch >> DATA=/var/lib/elasticsearch