Skip to content

Commit b174c17

Browse files
ddpbsdddpbsd
committed
updates
Signed-off-by: ddpbsd <[email protected]>
1 parent eb57039 commit b174c17

File tree

291 files changed

+4415
-310
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

291 files changed

+4415
-310
lines changed

‎_sources/elk/agent/integrations/cel.rst.txt‎

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
==========================
2+
common expression language
3+
==========================
4+
5+
grab a list of members from the elastic cloud
6+
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
7+
8+
This is currently formatted for `filebeat`
9+
10+
.. code-block:: console
11+
12+
- type: cel
13+
interval: 1m
14+
resource.url: https://api.elastic-cloud.com/api/v1/organizations/ORGID/members
15+
auth.token.enabled: true
16+
auth.token.type: apikey
17+
auth.token.value: APIKEY
18+
program: |
19+
get(state.url).Body.as(body, {
20+
"events": [body.decode_json()]
21+
}]
22+

‎_sources/elk/agent/integrations/index.rst.txt‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -9,4 +9,5 @@ Contents:
99
:maxdepth: 1
1010

1111
alienvault-otx
12+
cel
1213

‎_sources/elk/eck.rst.txt‎

Lines changed: 55 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,55 @@
1+
=================================
2+
eck - Elastic Cloud on Kubernetes
3+
=================================
4+
5+
I'm installing it to be available in all namespaces using the helm chart.
6+
7+
.. code-block:: console
8+
9+
## add the helm repo
10+
$ helm repo add elastic https://helm.elastic.co
11+
"elastic" has been added to your repositories
12+
$ helm repo update
13+
Hang tight while we grab the latest from your chart repositories...
14+
...Successfully got an update from the "metallb" chart repository
15+
...Successfully got an update from the "elastic" chart repository
16+
...Successfully got an update from the "jetstack" chart repository
17+
...Successfully got an update from the "rancher-latest" chart repository
18+
Update Complete. _Happy Helming!_
19+
20+
## install cluster-wide
21+
$ helm install elastic-operator elastic/eck-operator -n elastic-system --create-namespace
22+
NAME: elastic-operator
23+
LAST DEPLOYED: Wed Oct 8 16:43:10 2025
24+
NAMESPACE: elastic-system
25+
STATUS: deployed
26+
REVISION: 1
27+
TEST SUITE: None
28+
NOTES:
29+
1. Inspect the operator logs by running the following command:
30+
kubectl logs -n elastic-system sts/elastic-operator
31+
32+
33+
install elasticsearch
34+
^^^^^^^^^^^^^^^^^^^^^
35+
36+
.. XXX
37+
38+
install kibana
39+
^^^^^^^^^^^^^^
40+
41+
.. XXX
42+
43+
get the password
44+
^^^^^^^^^^^^^^^^
45+
46+
.. code-block:: console
47+
48+
$ kubectl get secret elasticsearch-es-elastic-user -o go-template='{{.data.elastic | base64decode }}'
49+
PASSWORD
50+
51+
links
52+
^^^^^
53+
54+
`Instructions from elastic <https://www.elastic.co/docs/deploy-manage/deploy/cloud-on-k8s/install-using-helm-chart>`_
55+

‎_sources/elk/elastic/index.rst.txt‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -16,5 +16,6 @@ Contents:
1616
shards
1717
tasks
1818
security/index
19+
ingest_pipelines
1920
interesting
2021

‎_sources/elk/elastic/ingest_pipelines.rst.txt‎

Lines changed: 30 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,30 @@
1+
================
2+
ingest pipelines
3+
================
4+
5+
6+
split an event into multiple
7+
^^^^^^^^^^^^^^^^^^^^^^^^^^^^
8+
9+
use the `script` processor:
10+
11+
.. code-block:: console
12+
13+
"script": {
14+
"lang": "painless",
15+
"source": """
16+
if (ctx.containsKey('my_array_field') && ctx['my_array_field' instanceof List) {
17+
List new_events = new ArrayList();
18+
for (def item : ctx['myarray_field']) {
19+
Map new_doc = new HashMap(ctx); // copy orig document
20+
new_doc.remove('my_array_field'); // remove the orig array field
21+
new_doc.put('single_item_field', item); // add the individual item
22+
new_events.add(new_doc);
23+
}
24+
ctx.remove('my_array_field'); // remove the original array field from the current document
25+
ctx._ingest.on_failure = (e) => { /* handle potential failures? */ };
26+
ctx._ingest.new_documents = new_events;
27+
}
28+
"""
29+
}
30+

‎_sources/elk/health-check/cluster-architecture.rst.txt‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
====================
2+
cluster architecture
3+
====================
4+
5+
* deployment version
6+
* high availability
7+
* data tiering
8+

‎_sources/elk/health-check/fleet-and-agent.rst.txt‎

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,12 @@
1+
===============
2+
fleet and agent
3+
===============
4+
5+
* agents are managed centrally via fleet
6+
* integrations are up to date
7+
* agents are healthy
8+
* agents on recent version
9+
* agent monitoring:
10+
* agent logs enabled
11+
* agent metrics enabled
12+

‎_sources/elk/health-check/index.rst.txt‎

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
===================
2+
system health check
3+
===================
4+
5+
Ideas for performing a health check on an elastic cluster.
6+
7+
Contents:
8+
9+
.. toctree::
10+
:maxdepth: 2
11+
12+
platforms
13+
cluster-architecture
14+
performance
15+
sharding-and-data-management
16+
security
17+
fleet-and-agent
18+

‎_sources/elk/health-check/performance.rst.txt‎

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
===========
2+
performance
3+
===========
4+
5+
performance
6+
^^^^^^^^^^^
7+
8+
* cpu utilization
9+
* memory utilization
10+
* disk utilization
11+
* cluster health (traffic light?)
12+
13+
cluster monitoring
14+
^^^^^^^^^^^^^^^^^^
15+
16+
These will be in relation to the cluster (logs is actually "cluster logs").
17+
18+
* logs
19+
* metrics
20+
* health alerts
21+

‎_sources/elk/health-check/platforms.rst.txt‎

Lines changed: 30 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,30 @@
1+
=========
2+
platforms
3+
=========
4+
5+
Common
6+
^^^^^^
7+
8+
Elatic Cloud: Hosted
9+
^^^^^^^^^^^^^^^^^^^^
10+
11+
12+
Elastic Cloud: Enterprise
13+
^^^^^^^^^^^^^^^^^^^^^^^^^
14+
15+
16+
Elastic Cloud: Serverless
17+
^^^^^^^^^^^^^^^^^^^^^^^^^
18+
19+
20+
Elastic Cloud on Kuberenetes
21+
^^^^^^^^^^^^^^^^^^^^^^^^^^^^
22+
23+
24+
Docker
25+
^^^^^^
26+
27+
28+
Bare-metal
29+
^^^^^^^^^^
30+

0 commit comments

Comments
 (0)