elasticsearch

RabbitMQ metrics in Elasticsearch

In this example we are using Elastic Cloud managed elasticsearch and will deploy the metricbeat to a k8s cluster. Create Secret apiVersion: v1 data: ELASTICSEARCH_AUTH: [base64_encoded_auth] ELASTICSEARCH_CLOUD_ID: [base64_encoded_cloudid] ELASTICSEARCH_RABBITMQ_PASSWORD: [base64_encoded_password] ELASTICSEARCH_RABBITMQ_USER: [base64_encoded_user] kind: Secret metadata: name: metricbeat type: Opaque Create DNS pointing to RabbitMQ apiVersion: v1 kind: Service metadata: name: Read more…

By Felipe Crochik, ago

Elasticsearch Curator

Why? You can use curator to manipulate elastic search indices. For example shrink or delete old ones. Install After installing elasticsearch in debian based: Maker sure to add source to list (or you may have an old version installed instead): Add to /etc/apt/sources.list.d/:  deb [arch=amd64] https://packages.elastic.co/curator/5/debian stable main Then run: Read more…

By Felipe Crochik, ago

ElasticBeanstalk logs to Elasticsearch

Install filebeat on RPM Based: sudo rpm –import https://packages.elastic.co/GPG-KEY-elasticsearch create /etc/yum.repos.d/elastic.repo [elastic-6.x] name=Elastic repository for 6.x packages baseurl=https://artifacts.elastic.co/packages/6.x/yum gpgcheck=1 gpgkey=https://artifacts.elastic.co/GPG-KEY-elasticsearch enabled=1 autorefresh=1 type=rpm-md sudo yum install filebeat on deb based: wget -qO – https://artifacts.elastic.co/GPG-KEY-elasticsearch | sudo apt-key add – sudo apt-get install apt-transport-https echo “deb https://artifacts.elastic.co/packages/6.x/apt stable main” | sudo tee Read more…

By Felipe Crochik, ago

Kibana – reset

delete filebeat template curl -X DELETE http://localhost:9200/_template/filebeat-6.0.0 delete all indices: curl -X DELETE ‘http://localhost:9200/_all’ delete ingest template curl -X DELETE localhost:9200/_ingest/pipeline/filebeat-* Using the developer console DELETE /_template/filebeat-6.0.0 DELETE /_all DELETE /_ingest/pipeline/filebeat-*

By Felipe Crochik, ago