Elasticsearch 7.17.x on RHEL 8+

This article provides a comprehensive guide for installing Elasticsearch version 7.17.x on Ubuntu 22.04, Amazon Linux, and RHEL 8.x systems. It includes prerequisites, installation steps, configuration instructions, and integration steps with the OvalEdge application.

Hardware Requirements

Minimum 4 GB RAM (8 GB recommended)
Minimum 2 vCPUs
10 GB available disk space

Prerequisites

Ubuntu system with version 22.04 or later
User with sudo privileges
Stable internet connection
Java 17 installed (or to be installed during the process)

Elasticsearch Installation on RHEL 8.x

Install Java 17

Elasticsearch requires Java 17. Install it with the following command. If Java is already installed, verify using the version check command.
```
sudo yum install java-17-openjdk -y  
```
```
java -version 
```

Import the Elasticsearch GPG Key

Add the official GPG key to verify package authenticity.

sudo rpm --import https://artifacts.elastic.co/GPG-KEY-elasticsearch

Add the Elasticsearch YUM Repository

Create the repository file for Elasticsearch packages:
```
sudo vi /etc/yum.repos.d/elasticsearch.repo  
```

Insert the following content:

[Elasticsearch-7]  
name=Elasticsearch repository for 7.x packages  
baseurl=https://artifacts.elastic.co/packages/7.x/yum  
gpgcheck=1  
gpgkey=https://artifacts.elastic.co/GPG-KEY-elasticsearch  
enabled=1  
autorefresh=1  
type=rpm-md

Ensure there are no typos in the baseurl or gpgkey to avoid installation issues.

Install Elasticsearch

Update the package index and install Elasticsearch:

sudo yum update -y  
sudo yum install elasticsearch -y

Enable and Start the Elasticsearch Service

Reload the systemd configuration to register the new service.
Enable Elasticsearch to start on system boot:
```
sudo systemctl daemon-reexec  
```

Enable Elasticsearch to start on system boot:

sudo systemctl enable elasticsearch.service

Start the service and verify its status:

sudo systemctl daemon-reexec  
sudo systemctl enable elasticsearch.service  
sudo systemctl start elasticsearch.service  
sudo systemctl status elasticsearch.service

At this point, Elasticsearch is installed and running.

Configure Elasticsearch

Update elasticsearch.yml

Edit the configuration file at /etc/elasticsearch/elasticsearch.yml:
```
sudo vim /etc/elasticsearch/elasticsearch.yml  
```

Add or modify the following settings:

cluster.name: ovaledge  
network.host: 0.0.0.0  
transport.host: localhost  
transport.tcp.port: 9300  
http.port: 9200  
xpack.security.enabled: true

These settings configure the node to:

Be accessible from external networks (network.host: 0.0.0.0)
Use custom cluster and port settings
Enable security features for authentication

Restart Elasticsearch

Restart the service to apply the configuration changes:

sudo systemctl restart elasticsearch.service  
sudo systemctl status elasticsearch.service

Setting Up Passwords

To secure the installation, set passwords for the built-in reserved users. These accounts are used by Elastic Stack components for internal authentication.

Navigate to the Elasticsearch Binary Directory

cd /usr/share/elasticsearch/bin

Run the Password Setup Script

Use interactive mode to configure passwords:

sudo ./elasticsearch-setup-passwords interactive

When prompted:

Press y to continue
Provide passwords for the following users:
- elastic, kibana_system, logstash_system, beats_system, apm_system, remote_monitoring_user
It is recommended to use the same password for all users for ease of configuration unless stricter separation is required.

Note: Store these credentials securely, as they are required for configuring clients such as Kibana, Logstash, and OvalEdge.

Integration with the OvalEdge Application

Locate and Open the Configuration File

Navigate to the extprop directory inside the OvalEdge installation folder:
```
cd /<path_to_ovaledge>/extprop  
sudo vi oasis.properties  
```

Update Elasticsearch Properties

Modify or add the following entries:

es.host=<elasticsearch_host>  
es.port=9200  
es.protocol=http  
es.username=elastic  
es.password=<elastic_password>

es.host: Use localhost if Elasticsearch is on the same VM as OvalEdge. Otherwise, provide the server’s IP address.
es.password: Use the password configured for the elastic user.

Restart Tomcat

After saving the changes, restart Tomcat:
```
sudo systemctl restart tomcat  
```

Important: Ensure the Elasticsearch service is running and accessible from the OvalEdge server before restarting Tomcat.

PreviousElasticsearch 7.17.x on Ubuntu 22.04+NextElasticsearch 7.17.x on Windows

Last updated 4 months ago

Was this helpful?