GrayLog (2) - Install Elasticsearch

Version

▶GrayLog2 V2.1.4

 

설치 준비

▶ JDK 설치 (8설치함)

▶ MongoDB 설치 (설정 보관용)

▶ Package 설치 (패스워드 생성)

#sudo yum install epel-release and install the package with #sudo yum install pwgen

Elasticsearch

▶ Graylog설치 전 Elasticsearch 필요 (2.x Ver)

▶ Graylog 2.0.0 and higher requires Elasticsearch 2.x

Install the Elastic GPG key

# rpm --import https://packages.elastic.co/GPG-KEY-elasticsearch

Add the repository file

[elasticsearch-2.x]  name=Elasticsearch repository for 2.x packages  baseurl=https://packages.elastic.co/elasticsearch/2.x/centos  gpgcheck=1  gpgkey=https://packages.elastic.co/GPG-KEY-elasticsearch  enabled=1

설치

#sudo yum install elasticsearch

Setting

▶ elasticsearch 설정 시 나중에 설치할 Graylog 설정과 동일하게 작성되어야 하는 부분 있음

#vi /etc/elasticsearch/elasticsearch.yml cluster.name: graylog graylog 설정파일 elasticsearch_cluster_name 명과 동일 node.name: abcd.com(호스트명) => graylog 설정파일 elasticsearch_node_name_prefix 동일

메모리설정 참고

* Elasticsearch heap size defaults to 256M min, 1G max.  It is recommended to set ES_HEAP_SIZE to 50% of available RAM, but no more than 31GB.

Elasticseacrh 실행

▶ Centos6 과 7 버젼별 명령어 틀림

▶ 서비스 등록

#sudo chkconfig --add elasticsearch #service elasticsearch start / stop / restart

확인

# curl -X GET 'http://127.0.0.1:9200/' ex) {   "status" : 200,   "name" : "John Doe",   "cluster_name" : "graylog",   "version" : {     "number" : "1.7.3",     "build_hash" : "05d4530971ef0ea46d0f4fa6ee64dbc8df659682",     "build_timestamp" : "2015-10-15T09:14:17Z",     "build_snapshot" : false,     "lucene_version" : "4.10.4"   },   "tagline" : "You Know, for Search" }