Elasticsearch

Elasticsearch is a web based search engine released in 2010 that provides a distributed, multitenant-capable full-text search engine and schema-free JSON documents based on the Lucene library. You can use many differents tools to send logs to Elasticsearch, including Filebeat product from ElasticSearch developers. Elastisearch offer different software for sending data such as: Filebeat, Metricbeat, Packetbeat, Winlogbeat, Auditbeat, Heartbeat and Functionbeat

ElastaticSearch is also available as a docker image or as service in AWS (AWS Elasticsearch) since November 2015.

Installation

• ElasticSearch Docker installation: https://www.docker.elastic.co/: Install ElasticSearch using Docker
• Configuration: /usr/share/elasticsearch/config/elasticsearch.yml

Activities

1. Read ElasticSearch release notes: https://github.com/elastic/elasticsearch/releases
2. Install ElasticSearch using Docker: https://www.elastic.co/guide/en/elasticsearch/reference/current/docker.html

/usr/share/elasticsearch/config/elasticsearch.yml

To connect: http://localhost:9200/

1. Install Elasticsearch-hq management GUIs for Elasticsearch

Managed services

Several organizations offer Elasticsearch as a managed service, including Amazon Web Services Elasticsearch Service (since October 2015), Bonsai, Scalefastr, Elastic Cloud, Qbox, Searchly, IBM, Measured Search, Logz.io, IBM Bluemix Elasticsearch Service, and Object Rocket. Such managed services provide hosting, deployment, backup and other support as a package, reducing the skills and time needed to implement and operate Elasticsearch. Most managed services also include support for Kibana.

See also

• Elastic: ELK, Elasticsearch, Logstash, Kibana, Installation, AWS Elasticsearch, Elastic SIEM, Elastic Beats, metricbeat, filebeat, journalbeat, Elastisearch Service , Search guard, Elasticsearch logs, curator, ILM, Lumberjack protocol, aws_elasticsearch_domain, KQL, elasticsearch.yml, elasticsearch-plugin, elasticsearch-certutil, Elasticsearch release notes/changelog
• Cerebro, Newman/Postman or Elasticsearch-hq management GUIs for Elasticsearch
• Grafana, Curator
• SIEM: Splunk, Elastic SIEM, graylog, IBM QRadar, SIEM Magic Quadrant, Micro Focus ArcSight, SentinelOne, Datadog Cloud SIEM
• AWS, Amazon Managed Services, AWS Management & Governance, computing, security, networking, AWS compliance, AWS Outposts AWS Free Tier, AWS certifications, AWS Trusted Advisor, AWS Systems Manager, AWS Config, IAM Access Analyzer, AWS Cost Explorer, AWS Cost Management, AWS Budgets, AWS Organizations, AWS dev: (CodeStar, Cloud9), AWS Partner Network (APN), AWS Resource Access Manager, AWS Quick Starts, AWS Global Accelerator, AWS Elemental MediaStore, AWS Enterprise support, AWS support, AWS Professional Services Consultants, AWS Cloud Map, AWS Marketplace, AWS CLI, AWS Management Console, AWS acceptable use policy, amazonaws.com, Quotas, AWS Support plans, AWS Resource Explorer, AWS Managed Services (AMS), AWS savings, AWS Nitro System, AWS Activate, Serverless, AWS timeline
• cURL, curl -s, -X, -x, curl -T, curl --help, curl -L, curl -m, curl -o, curl -X POST, curl -d, curl --header, curl -I, curl --silent, curl -Is, curl -k or curl --insecure, curl -XPUT, curl -d, ~/.curlrc, curl -i, curl --version, curl --help

Text is available under the Creative Commons Attribution-ShareAlike License; additional terms may apply. By using this site, you agree to the Terms of Use and Privacy Policy.

Source: https://en.wikiversity.org/wiki/ElasticSearch