elasticsearch training: administration / operations

Schedule

Installation and introduction

  • elastic stack panorama and elasticsearch history
  • standard packages
  • Java and JVM
  • Hardware

Clustering and distributed system

  • master and node role
  • node discover, leaving and incoming nodes
  • shards, primary and replicas
  • shard allocation, shard distribution
  • node losing

Monitoring

  • cluster health
  • CAT api
  • node stats
  • cluster state
  • garbage collector and heap
  • throttle
  • indices size
  • basics performance
  • cache
  • node count
  • thread pools
  • pending tasks
  • missing / 404
  • logs: slow logs, deprecation logs and activation
  • tools and monitoring systems panorama
  • hot threads

Administration and common tasks

  • refresh, flush, force_merge
  • split brains
  • cache management
  • plugins install and updates
  • index lifecycle management: close / open / freeze / delete
  • moving shard
  • shard allocation deactivation / activation
  • rolling restart
  • full cluster restart
  • backup /restore
  • curator
  • administration from kibana
  • alias, filtering and routing
  • task management api

Load

  • round robin  load balancing and adaptive replica
  • scaling writes, reads and store size

Performance tuning

  • index settings
  • cluster settings
  • mapping configuration and performance

Security

  • security on base release and history
  • panorama of fixes and exploits

Sizing

  • shard size, index et hardware choice
  • best practices, most seen metrics

Architecture

  • usage: log/ iot time series or search engine
  • hot warm architecture
  • node role and cluster design
  • multi region or cross cluster replication

Duration

2 days