This article will show how to install two big software – Elasticsearch to store information and Kibana to visualize the information under CentOS 8. Elasticsearch is ideal to store big data such as logs from user activities or server logs – one central repository for data, which is structured properly and it could be easily accessed and manipulated with various software.
Kibana is used mainly for visualizing the data stored in the Elasticseach server and manage the Elasticsearch service by the web. ste
Here is a simple example: send the web servers logs in Elasticsearch and visual statistical data with Kibana.
Using the rpm repository for the two software is the best option for installation and in future upgrades.
STEP 1) Install the CentOS 8.
How to install CentOS 8 could be found here – How to do a network installation of CentOS 8 (8.0.1950) – minimal server installation.
Or if a container approach is needed, there is a how to with LXC container – Run LXC CentOS 8 container with bridged network under CentOS 8.
STEP 2) Install the Elasticsearch.
This installation and configuration is for single node server setup.
First, create a rpm repository file /etc/yum.repos.d/elasticsearch.repo and fill it with the Elasticsearch repository information:
[elasticsearch] name=Elasticsearch repository for 7.x packages baseurl=https://artifacts.elastic.co/packages/7.x/yum gpgcheck=1 gpgkey=https://artifacts.elastic.co/GPG-KEY-elasticsearch enabled=1 autorefresh=1 type=rpm-md
Then import the Elasticsearch GPG key and install the Elasticsearch software:
[root@loganalyzer ~]# rpm --import https://artifacts.elastic.co/GPG-KEY-elasticsearch [root@loganalyzer ~]# dnf install elasticsearch Last metadata expiration check: 0:00:19 ago on 11.12.2021 (Sat) 12:43:24 UTC. Dependencies resolved. ========================================================================================================================================== Package Architecture Version Repository Size ========================================================================================================================================== Installing: elasticsearch x86_64 7.16.0-1 elasticsearch 327 M Transaction Summary ========================================================================================================================================= Install 1 Package Total download size: 327 M Installed size: 526 M Is this ok [y/N]: y Downloading Packages: elasticsearch-7.16.0-x86_64.rpm 43 MB/s | 327 MB 00:07 ------------------------------------------------------------------------------------------------------------------------------------------ Total 43 MB/s | 327 MB 00:07 Running transaction check Transaction check succeeded. Running transaction test Transaction test succeeded. Running transaction Preparing : 1/1 Running scriptlet: elasticsearch-7.16.0-1.x86_64 1/1 Creating elasticsearch group... OK Creating elasticsearch user... OK Installing : elasticsearch-7.16.0-1.x86_64 1/1 Running scriptlet: elasticsearch-7.16.0-1.x86_64 1/1 ### NOT starting on installation, please execute the following statements to configure elasticsearch service to start automatically using systemd sudo systemctl daemon-reload sudo systemctl enable elasticsearch.service ### You can start elasticsearch service by executing sudo systemctl start elasticsearch.service Created elasticsearch keystore in /etc/elasticsearch/elasticsearch.keystore [/usr/lib/tmpfiles.d/elasticsearch.conf:1] Line references path below legacy directory /var/run/, updating /var/run/elasticsearch → /run/elasticsearch; please update the tmpfiles.d/ drop-in file accordingly. Verifying : elasticsearch-7.16.0-1.x86_64 1/1 Installed: elasticsearch-7.16.0-1.x86_64 Complete!
The configuration files are placed in /etc/elasticsearch/:
Keep on reading!