In my development environment I have been playing around with Elastic search and have to say it is pretty neat how you can centralize your windows logs and view them on Kibanna.
If you want to install here are the steps I took.
I installed Centos 7 x64 with the minimum installation
After install I installed the following tools
You will need wget and if you want tools like ifconfig and nano editor.
yum install nettools nano wget curl
We need Java 8 so using yum
yum install java-1.8.0-openjdk.x86_64
Now we need to download the public signing key from elastic
rpm --import https://artifacts.elastic.co/GPG-KEY-elasticsearch
Using your favorite Linux editor
nano -w /etc/yum.repos.d/elastic.repo
Now paste the following
[elasticsearch-6.x]
name=Elasticsearch repository for 6.x packages
baseurl=https://artifacts.elastic.co/packages/6.x/yum
gpgcheck=1
gpgkey=https://artifacts.elastic.co/GPG-KEY-elasticsearch
enabled=1
autorefresh=1
type=rpm-md
hit Ctrl X to save
Now lets install elasticsearch
yum install elasticsearch
Running elasticsearch with systemd
systemctl daemon-reload
systemctl enable elasticsearch.service
Before starting elasticsearch lets edit the configuration file
nano -w /etc/elasticsearch/elasticsearch.yml
Find Line network.host and change it so the # in front is deleted and looks like this
network.host: 0.0.0.0
Hit Ctrl X to save
This would make elasticsearch listen on any IP address the server is running. In production you can use x-pack to secure the server so only hosts with the username and password can access the elasticsearch
Now Lets start
elasticsearch
systemctl start elasticsearch.service
Now to verify the service is running you can query with curl
curl http://127.0.0.1:9200
You should get a similar output
{
"name" : "esnode-1",
"version" : {
"number" : "6.2.1",
"build_hash" : "7299dc3",
"build_date" : "2018-02-07T19:34:26.990113Z",
"build_snapshot" : false,
"lucene_version" : "7.2.1",
"minimum_wire_compatibility_version" : "5.6.0",
"minimum_index_compatibility_version" : "5.0.0"
},
"tagline" : "You Know, for Search"
}
Now your complete