Skip to content

Commit dfe0524

Browse files
committed
updates
1 parent 4fc714e commit dfe0524

File tree

206 files changed

+1610
-84
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

206 files changed

+1610
-84
lines changed

_sources/elk/agent/agent.rst.txt

Lines changed: 43 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,43 @@
1+
===========
2+
agent stuff
3+
===========
4+
5+
6+
find an agent by name in fleet
7+
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
8+
9+
The search field is very elasticy, so filter by `local_metadata.host.name` to search based on the name in the `Host` field.
10+
11+
12+
agent status
13+
^^^^^^^^^^^^
14+
15+
Get the status of an agent and the integrations.
16+
17+
.. code-block:: console
18+
19+
monitor0:/opt/Elastic/Agent # ./elastic-agent status
20+
Status: HEALTHY
21+
Message: (no message)
22+
Applications:
23+
* endpoint-security (HEALTHY)
24+
Protecting with policy {910a8f4a-1642-4d16-b21a-17773eede78b}
25+
* filebeat (HEALTHY)
26+
Running
27+
* metricbeat (HEALTHY)
28+
Running
29+
* filebeat_monitoring (HEALTHY)
30+
Running
31+
* metricbeat_monitoring (HEALTHY)
32+
Running
33+
* osquerybeat (HEALTHY)
34+
Running
35+
36+
check the fleet server status
37+
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
38+
39+
`curl https://fleet-server:8220/api/status`
40+
41+
Should get something like this back:
42+
`{"name": "fleet-server", "status": "HEALTHY"}`
43+

_sources/elk/agent/index.rst.txt

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,6 @@ Contents:
88
.. toctree::
99
:maxdepth: 2
1010

11-
cmd
11+
agent
1212
discover
1313

_sources/elk/elastic/security/api_key.rst.txt

Lines changed: 30 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -94,6 +94,36 @@ With this, set an `Authorization` header:
9494
9595
curl -s -H 'Authorization: ApiKey BASE664_ENCODED_KEY' http://127.0.0.1:9200/_cluster/health
9696
97+
logstash api key
98+
^^^^^^^^^^^^^^^^
99+
100+
.. code-block:: console
101+
102+
POST _security/api_key
103+
{
104+
"name": "logstash-writer",
105+
"role_descriptors": {
106+
"logstash_writer": {
107+
"cluster": [
108+
"monitor,
109+
"manage_ilm",
110+
"read_ilm"
111+
],
112+
"index": [
113+
{
114+
"names": [ "*" ],
115+
"privileges": [
116+
"view_index_metadata",
117+
"create_doc",
118+
"create_index",
119+
"write"
120+
]
121+
}
122+
]
123+
}
124+
}
125+
}
126+
97127
98128
99129

_sources/elk/elastic/shards.rst.txt

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -72,3 +72,13 @@ get cluster shard status along with curent health
7272
7373
GET _cluster/health?filter_path=status,*_shards
7474
75+
increase the number of shards that can be in the relocating state
76+
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
77+
78+
The default is 2, and elastic says you shouldn't change it.
79+
But sometimes you just gotta.
80+
81+
.. code-block:: console
82+
83+
cluster.routing.allocation.node_concurrent_recoveries
84+

_sources/elk/logstash/index.rst.txt

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -14,6 +14,7 @@ Contents:
1414
input
1515
ssl
1616
testing
17+
monitoring
1718
usage
1819

1920
patterns/index
Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,11 @@
1+
===================
2+
monitoring logstash
3+
===================
4+
5+
pipeline stats
6+
^^^^^^^^^^^^^^
7+
8+
.. code-block:: console
9+
10+
$ curl http://127.0.0.1:9600/_node/stats/pipelines
11+

_sources/misc/index.rst.txt

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -22,4 +22,5 @@ Contents:
2222
random
2323
junk/index
2424
fediverse/glitch-soc.rst
25+
zfs
2526

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,11 @@
1+
=============
2+
communication
3+
=============
4+
5+
include, if possible
6+
^^^^^^^^^^^^^^^^^^^^
7+
8+
* highlight the issue/facts
9+
* highlight the impact
10+
* provide recommendation
11+

_sources/misc/junk/index.rst.txt

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -14,6 +14,7 @@ Contents:
1414
books
1515
breweries
1616
chicken
17+
communication
1718
creepypastas
1819
gardening/index
1920
podcasts

_sources/misc/zfs.rst.txt

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
===
2+
zfs
3+
===
4+
5+
import a pool from one system to another
6+
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
7+
8+
I installed a different distribution and wanted to import my zfs pool (on an untouched drive).
9+
`zpool import` to the rescue!
10+
11+
.. code-block::
12+
13+
root@caladan:/home/ddp# zpool import
14+
pool: data
15+
id: 14940038568498653083
16+
state: ONLINE
17+
status: The pool was last accessed by another system.
18+
action: The pool can be imported using its name or numeric identifier and
19+
the '-f' flag.
20+
see: https://openzfs.github.io/openzfs-docs/msg/ZFS-8000-EY
21+
config:
22+
23+
data ONLINE
24+
nvme0n1 ONLINE
25+
root@caladan:/home/ddp# zpool import -f data
26+
root@caladan:/home/ddp# zpool list
27+
NAME SIZE ALLOC FREE CKPOINT EXPANDSZ FRAG CAP DEDUP HEALTH ALTROOT
28+
data 928G 242G 686G - - 2% 26% 1.00x ONLINE -
29+

0 commit comments

Comments
 (0)