Elasticsearch

wikipedia:Elasticsearch is a web based search engine released in 2010 that provides a distributed, multitenant-capable full-text search engine and schema-free JSON documents based on the Lucene library. You can use many differents tools to send logs to Elasticsearch, including Filebeat product from ElasticSearch developers. Elastisearch offer different software for sending data such as: Filebeat, Metricbeat, Packetbeat, Winlogbeat, Auditbeat, Heartbeat and Functionbeat

ElastaticSearch is also available as a docker image or as service in AWS (AWS Elasticsearch) since November 2015.

Installation

• ElasticSearch Docker installation: https://www.docker.elastic.co/: Install ElasticSearch using Docker
• Configuration file:

/usr/share/elasticsearch/config/elasticsearch.yml

Activities

• Read ElasticSearch release notes/versions: https://github.com/elastic/elasticsearch/releases
• List indexes:

curl http://localhost:9200/_aliases

curl http://localhost:9200/_cat/indices?v

_nodes/status

• Delete ALL index:

curl -X DELETE 'http://localhost:9200/_all'

• Install ElasticSearch using Docker and Kibana: https://www.elastic.co/guide/en/elasticsearch/reference/current/docker.html

/usr/share/elasticsearch/config/elasticsearch.yml

Connect to Elasticsearch: http://localhost:9200/

• Install Elasticsearch-hq management GUIs for Elasticsearch
• Review Elasticsearch logs
• Read most voted Elasticsearch queries in Stackoverflow https://stackoverflow.com/questions/tagged/elasticsearch?tab=Votes

Managed services

Several organizations offer Elasticsearch as a managed service, including Amazon Web Services Elasticsearch Service (since October 2015), Bonsai, Scalefastr, Elastic Cloud, Qbox, Searchly, IBM, Measured Search, Logz.io, IBM Bluemix Elasticsearch Service, and Object Rocket. Such managed services provide hosting, deployment, backup and other support as a package, reducing the skills and time needed to implement and operate Elasticsearch. Most managed services also include support for Kibana.

See also

• Cerebro, Newman/Postman or Elasticsearch-hq management GUIs for Elasticsearch
• Grafana, Grafana datasources, Grafana Alerting, Grafana installation, Grafana Labs, Grafana Changelog, Grafana logs, docker-compose.yml (Grafana), Grafana Loki, Grafana Tanka, StatsD and Graphite, grafana-cli, Loki, LogQL, Grafana Enterprise, Grafana Cloud, Grafana alerts, Amazon Grafana, Grafana OnCall, Grafana Tempo, Grafana Mimir, Grafana agent, plugins, Terraform, Grafana dashboards, /etc/grafana/grafana.ini, Grafana Pyroscope
• SIEM: Splunk, Elastic SIEM, graylog, IBM QRadar, SIEM Magic Quadrant, Micro Focus ArcSight, SentinelOne, Datadog Cloud SIEM
• ElasticSearch users
• Elastic: ELK, Elasticsearch, Logstash, Kibana, Installation, AWS Elasticsearch, Elastic SIEM, Elastic Beats, metricbeat, filebeat, journalbeat, Elastisearch Service , Search guard, Elasticsearch logs, curator, ILM, Lumberjack protocol, aws_elasticsearch_domain, KQL, elasticsearch.yml, elasticsearch-plugin, elasticsearch-certutil, Elasticsearch release notes/changelog

Text is available under the Creative Commons Attribution-ShareAlike License; additional terms may apply. By using this site, you agree to the Terms of Use and Privacy Policy.

Source: https://en.wikiversity.org/wiki/ElasticSearch