Lab 1.2: Install Elasticsearch

This lab will install the Elasticsearch component, It is recommended to install Elasticsearch as the first module.

Task 1 Install Repo and Keys

  1. Download and install the public signing key:
wget -qO - https://artifacts.elastic.co/GPG-KEY-elasticsearch | sudo apt-key add -
  1. Save the repository definition to /etc/apt/sources.list.d/elastic-5.x.list:
echo "deb https://artifacts.elastic.co/packages/5.x/apt stable main" | sudo tee -a /etc/apt/sources.list.d/elastic-5.x.list
sudo apt-get update

Task 2 Install elasticseach and setup system

  1. Install Elasticsearch
sudo apt-get install elasticsearch
  1. Edit config file to change bind address to Host address 10.1.1.5
sudo vi /etc/elasticsearch/elasticsearch.yml

elastic1

  1. Install additional plugins
sudo /usr/share/elasticsearch/bin/elasticsearch-plugin install ingest-geoip
  1. Restart Elastic Search
sudo systemctl restart elasticsearch
  1. Configure the system to start at boot
sudo /bin/systemctl daemon-reload
sudo /bin/systemctl enable elasticsearch.service
  1. Checking Start / Stop / Status
sudo systemctl start elasticsearch.service
sudo systemctl stop elasticsearch.service
sudo systemctl status elasticsearch.service

elastic2