Elasticsearch

wikipedia:Elasticsearch is a web based search engine written in Java and released in 2010 that provides a distributed, multitenant-capable full-text search engine and schema-free JSON documents based on the Lucene library. You can use many differents tools to send logs to Elasticsearch, including Filebeat product from ElasticSearch developers. Elastisearch offer different software for sending data such as: Filebeat, Metricbeat, Packetbeat, Winlogbeat, Auditbeat, Heartbeat and Functionbeat

ElastaticSearch is also available as a docker image or as service in AWS (AWS Elasticsearch) since November 2015.

Installation

• Install ElasticSearch on Debian/Ubuntu
• ElasticSearch Docker installation: https://www.docker.elastic.co/: Install ElasticSearch using Docker or Install ElasticSearch and Kibana using Docker
• Configuration file:

/usr/share/elasticsearch/config/elasticsearch.yml

Activities

• Read ElasticSearch release notes/versions: https://github.com/elastic/elasticsearch/releases

• Status:

curl https://localhost:9200/_nodes/status

curl https://localhost:9200/_cat/health

• Indexes/Nodes/Aliases/Plugins:

curl http://localhost:9200/_aliases

curl https://localhost:9200/_aliases

curl http://localhost:9200/_cat/indices?v

curl https://localhost:9200/_cat/indices?v

curl -XGET https://localhost:9200/_cat/nodes?v -u 'admin:admin' --insecure
curl -XGET https://localhost:9200/_cat/plugins?v -u 'admin:admin' --insecure

• Delete ALL index:

curl -X DELETE 'http://localhost:9200/_all'

• Install ElasticSearch using Docker and Kibana: https://www.elastic.co/guide/en/elasticsearch/reference/current/docker.html

/usr/share/elasticsearch/config/elasticsearch.yml

Connect to Elasticsearch:

http://localhost:9200/

https://localhost:9200/

• Install Elasticsearch-hq management GUIs for Elasticsearch
• Review Elasticsearch logs
• Read most voted Elasticsearch queries in Stackoverflow https://stackoverflow.com/questions/tagged/elasticsearch?tab=Votes

Managed services

Several organizations offer Elasticsearch as a managed service, including Amazon Web Services Elasticsearch Service (since October 2015), Bonsai, Scalefastr, Elastic Cloud, Qbox, Searchly, IBM, Measured Search, Logz.io, IBM Bluemix Elasticsearch Service, and Object Rocket. Such managed services provide hosting, deployment, backup and other support as a package, reducing the skills and time needed to implement and operate Elasticsearch. Most managed services also include support for Kibana.

Related terms

• Prometheus
• LogDNA
• ElasticSearch users

See also

• Cerebro, Newman/Postman or Elasticsearch-hq management GUIs for Elasticsearch
• Elasticsearch, installation, ELK, Elastic X-Pack, elasticsearch.yml, logs, ECK, Elasticsearch curl URLs, Elastisearch REST APIs, /_cat/, /_cluster/, /_xpack/, QueryShardException, Elasticsearch index, ELK backup and restore, elasticsearch-cli, Elasticsearch versions, ElasticSearch Snapshot Lifecycle Management (SLM), Low disk watermark, Elasticsearch storage, Elasticsearch users, Elasticsearch roles, search context, shards, Elastic Cloud, Elastic Licensing, ElasticSearch alerts, ESQL
• Elastic: ELK, Elasticsearch, Logstash, Kibana, Installation, AWS Elasticsearch, Elastic SIEM, Elastic Beats, metricbeat, filebeat, journalbeat, Elastisearch Service , Search guard, Elasticsearch logs, curator, ILM, Lumberjack protocol, aws_elasticsearch_domain, KQL, elasticsearch.yml, elasticsearch-plugin, elasticsearch-certutil, Elasticsearch release notes/changelog
• Logs, Log collector, log management, log explorer, Linux logging, docker logs, minikube logs, Vector, Logstash, Filebeat, promtail, logfmt, Elasticsearch, fluentd, Mezmo (LogDNA), Scalyr, Loggly, Loki, tlog, cockpit, NXLog, Winston, Amazon CloudWatch Logs Insights, Logz.io, Logflare, Coralogix

Text is available under the Creative Commons Attribution-ShareAlike License; additional terms may apply. By using this site, you agree to the Terms of Use and Privacy Policy.

Source: https://en.wikiversity.org/wiki/ElasticSearch