Network Security Internet Technology Development Database Servers Mobile Phone Android Software Apple Software Computer Software News IT Information

In addition to Weibo, there is also WeChat

Please pay attention

WeChat public account

Shulou

OpenNMS event dump Elasticsearch

2025-01-15 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > Network Security >

Share

Shulou(Shulou.com)06/01 Report--

Preparation condition

1 Software and version

CentOS-7-x86_64

OpenNMS 25.1.0

Elasticsearch-7.4.2-linux-x86_64.tar.gz

Kibana-7.4.2-linux-x86_64.tar.gz

2 server

Address 192.168.1.80 192.168.1.81

Install opennms elasticsearch/kibana

Elasticsearch configuration

Vi config/elasticsearch.yml

Find and modify the following parameters

Node.name: node-1

Network.host: 0.0.0.0

Cluster.initial_master_nodes: ["node-1"]

Set user permissions

Xpack.security.enabled: true

Xpack.security.transport.ssl.enabled: true

Xpack.security.transport.ssl.verification_mode: certificate

Xpack.security.transport.ssl.keystore.path: elastic-certificates.p12

Xpack.security.transport.ssl.truststore.path: elastic-certificates.p12

problem

[1]: max file descriptors [4096] for elasticsearch process is too low, increase to at least [65535]

Solve

Vi / etc/security/limits.conf

* soft nofile 65536

* hard nofile 131072

* soft nproc 2048

* hard nproc 4096

[2]: max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]

Solve

Vi / etc/sysctl.conf

Vm.max_map_count=262144

Sysctl-p

Temporary settin

Sysctl-w vm.max_map_count=262144

Start

Bin/elasticsearch-d

Set password

Bin/elasticsearch-setup-passwords interactive

Verification

Curl http://192.168.1.81:9200-u elastic:elastic

Kibana configuration

Vi config/kibana.yml

Modify the following parameters

Server.host: "192.168.1.81"

Elasticsearch.username: "kibana"

Elasticsearch.password: "kibana"

Visit

Http://192.168.1.81:5601

Elastic/elastic

OpenNMS configuration

Vi etc/org.opennms.plugin.elasticsearch.rest.forwarder.cfg

Add the following parameters

ElasticUrl= http://192.168.1.81:9200

ElasticIndexStrategy=daily

GlobalElasticUser=elastic

GlobalElasticPassword=elastic

Enable opennms-es-rest

Ssh-p8101 admin@localhost

Login karaf password: admin

Execute a command

Feature:install opennms-es-rest

View data

Log in to Kibana, user / password: elastic/elastic

Enter Dev Tools and execute the command in Console

GET / opennms-events-*/_search

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.

Views: 0

*The comments in the above article only represent the author's personal views and do not represent the views and positions of this website. If you have more insights, please feel free to contribute and share.

Share To

Network Security

Wechat

© 2024 shulou.com SLNews company. All rights reserved.

12
Report