elasticsearch training: administration / operations

Installation and introduction

• elastic stack panorama and elasticsearch history
• standard packages
• Java and JVM
• Hardware

Clustering and distributed system

• master and node role
• node discover, leaving and incoming nodes
• shards, primary and replicas
• shard allocation, shard distribution
• node losing

Monitoring

• cluster health
• CAT api
• node stats
• cluster state
• garbage collector and heap
• throttle
• indices size
• basics performance
• cache
• node count
• thread pools
• pending tasks
• missing / 404
• logs: slow logs, deprecation logs and activation
• tools and monitoring systems panorama
• hot threads

Administration and common tasks

• refresh, flush, force_merge
• split brains
• cache management
• plugins install and updates
• index lifecycle management: close / open / freeze / delete
• moving shard
• shard allocation deactivation / activation
• rolling restart
• full cluster restart
• backup /restore
• curator
• administration from kibana
• alias, filtering and routing
• task management api

Load

• round robin  load balancing and adaptive replica
• scaling writes, reads and store size

Performance tuning

• index settings
• cluster settings
• mapping configuration and performance

Security

• security on base release and history
• panorama of fixes and exploits

Sizing

• shard size, index et hardware choice
• best practices, most seen metrics

Architecture

• usage: log/ iot time series or search engine
• hot warm architecture
• node role and cluster design
• multi region or cross cluster replication