Elasticsearch Installation

1. Download the latest ZIP file for Windows, ElasticSearch 8.17.x, from the official Downloads page.
2. Extract the contents of the zip file to C:\ElasticSearch.
3. Go to C:\ElasticSearch\elasticsearch-<version>\config, and then access the elasticsearch.yml file.
   Here, <version> is the version number that you downloaded.
4. In the .yml file, uncomment the following properties, and then modify the values to match those shown here:

   cluster.name: apm-cluster
   node.name: ${COMPUTERNAME}
   path.data: /ProgramData/Meridium/ElasticSearch
   path.logs: /ProgramData/Meridium/Logs
   bootstrap.memory_lock: true
   network.host: 0.0.0.0
   http.port: 9200
   action.destructive_requires_name: true

5. For a single node cluster, add the following line of code to the file:
   discovery.type: single-node
6. For a cluster, see https://www.elastic.co/guide/en/elasticsearch/reference/8.17/modules-discovery.html.
7. Save and close the .yml file.
8. Select the Start button on Windows, right-click Command Prompt, and then select Run as administrator.
   The Command Prompt window appears.
9. At the command prompt, enter cd C:\ElasticSearch\elasticsearch-<version>\bin, and then press Enter.
   Here, <version> is the version number that you downloaded.
10. By default, ElasticSearch is installed with authentication enabled. Follow these steps to set a password for the elastic user.
    1. At the command prompt, enter elasticsearch-keystore add "bootstrap.password".
    2. Enter the password.
11. By default, ElasticSearch installs with SSL enabled using a self-signed certificate.
    • Follow encrypt http communication to use a trusted certificate.
    • Or, add this to the elasticsearch.yaml file to turn off SSL xpack.security.http.ssl.enabled: "false"
12. At the command prompt, enter elasticsearch-service install, and then press Enter.
    Elasticsearch is installed.
13. Access the Microsoft Management Console (services.msc) and perform the following operations for the Elasticsearch service:
    • Verify that the service runs as Local System.
    • Modify the startup to be Automatic.
    • Start the service to verify installation and configuration.
14. On the server on which Elasticsearch is installed, go to http://localhost:9200/ in a web browser. Use “http” if SSL is turned off. Use “elastic” as the username and the password that you set above. Ensure that Elasticsearch runs successfully.
    A response that is similar to the following sample appears.

    {
      "name" : "elasticsearch-svr ",
      "cluster_name" : "docker-cluster",
      "cluster_uuid" : "o8-U13fNQYCl3K5mCFtduA",
      "version" : {
        "number" : "8.17.0",
        "build_flavor" : "default",
        "build_type" : "docker",
        "build_hash" : "2b6a7fed44faa321997703718f07ee0420804b41",
        "build_date" : "2024-12-11T12:08:05.663969764Z",
        "build_snapshot" : false,
        "lucene_version" : "9.12.0",
        "minimum_wire_compatibility_version" : "7.17.0",
        "minimum_index_compatibility_version" : "7.0.0"
      },
      "tagline" : "You Know, for Search"
    }

15. On the server on which Elasticsearch is installed, go to http://[elastic-search-server]:9200/ in a web browser, and ensure that Elasticsearch runs successfully.
    A response that is similar to the sample provided in the previous step appears.
16. On the APM server, go to C:\ProgramData\Meridium\appsettings.Global.json.
17. As needed, modify the following value. Replace localhost with the IP address or the host name of the ElasticSearch Server if it is installed on a separate server.

    "elasticSearch": {
            "url": "http://localhost:9200",
            "password": "<value>"
        },

18. After all third-party services are configured, reset IIS and services on all APM App Servers.

To enhance security, you can implement user authentication for Elasticsearch using the X-Pack security.

1. From the Elasticsearch installation folder, navigate to the config folder, and then access the file elasticsearch.yml.
2. In the .yml file, add the following line of code:
   xpack.security.enabled: true
3. Based on your Elasticsearch cluster type, complete one of the following steps:
   • For a single node cluster, add the following line of code in the elasticsearch.yml file: discovery.type: single-node

     Save and close the elasticsearch.yml file.

   • For a multi-node cluster, Elasticsearch requires TLS communication between the nodes. For instructions, refer to https://www.elastic.co/guide/en/elasticsearch/reference/7.9/configuring-tls.html#node-certificates.
4. From the Elasticsearch installation folder, set the bootstrap password. To do so:
   1. Run the command prompt as an administrator.
   2. Change the directory to the Elasticsearch installation folder.
   3. Run the following command: bin/elasticsearch-keystore add "bootstrap.password"
   4. Enter the password.
5. On the APM server, navigate to C:\ProgramData\Meridium, and then modify the appsettings.Global.json file to update the Elasticsearch settings with the password:

   "elasticSearch": {
           "url": "http://localhost:9200",
           "password": "<value>"
       },

6. Restart Elasticsearch, Search, and IIS.