Setting up an Elasticsearch instance for log aggregation

Create a new Elasticsearch instance for use with MI log aggregation.

Note: The Elasticsearch instance configured to provide MI search and indexing features for the cluster cannot be used for log aggregation as well. You must install a separate Elasticsearch instance for MI log aggregation.
Follow the same download, installation, and configuration workflow as documented earlier for deploying Elasticsearch for search and indexing in your Granta MI cluster. See the topics under Deploying Elasticsearch for details.
  1. Download Elasticsearch and Kibana from the Elastic website.
  2. Install Elasticsearch.
  3. Install and configure Kibana.
  4. Secure the Elastic stack.
  5. Configure Elasticsearch to run as a Windows service.
Next, generate an API key to secure access to Elasticsearch from MI Log Collector (Filebeat) on each MI node.