OpenNMS event dump Elasticsearch
Preparation condition
1 Software and version
CentOS-7-x86_64
OpenNMS 25.1.0
Elasticsearch-7.4.2-linux-x86_64.tar.gz
Kibana-7.4.2-linux-x86_64.tar.gz
2 server
Address 192.168.1.80 192.168.1.81
Install opennms elasticsearch/kibana
Elasticsearch configuration
Vi config/elasticsearch.yml
Find and modify the following parameters
Node.name: node-1
Network.host: 0.0.0.0
Cluster.initial_master_nodes: ["node-1"]
Set user permissions
Xpack.security.enabled: true
Xpack.security.transport.ssl.enabled: true
Xpack.security.transport.ssl.verification_mode: certificate
Xpack.security.transport.ssl.keystore.path: elastic-certificates.p12
Xpack.security.transport.ssl.truststore.path: elastic-certificates.p12
problem
[1]: max file descriptors [4096] for elasticsearch process is too low, increase to at least [65535]
Solve
Vi / etc/security/limits.conf
* soft nofile 65536
* hard nofile 131072
* soft nproc 2048
* hard nproc 4096
[2]: max virtual memory areas vm.max_map_count [65530] is too low, increase to at least [262144]
Solve
Vi / etc/sysctl.conf
Vm.max_map_count=262144
Sysctl-p
Temporary settin
Sysctl-w vm.max_map_count=262144
Start
Bin/elasticsearch-d
Set password
Bin/elasticsearch-setup-passwords interactive
Verification
Curl http://192.168.1.81:9200-u elastic:elastic
Kibana configuration
Vi config/kibana.yml
Modify the following parameters
Server.host: "192.168.1.81"
Elasticsearch.username: "kibana"
Elasticsearch.password: "kibana"
Visit
Http://192.168.1.81:5601
Elastic/elastic
OpenNMS configuration
Vi etc/org.opennms.plugin.elasticsearch.rest.forwarder.cfg
Add the following parameters
ElasticUrl= http://192.168.1.81:9200
ElasticIndexStrategy=daily
GlobalElasticUser=elastic
GlobalElasticPassword=elastic
Enable opennms-es-rest
Ssh-p8101 admin@localhost
Login karaf password: admin
Execute a command
Feature:install opennms-es-rest
View data
Log in to Kibana, user / password: elastic/elastic
Enter Dev Tools and execute the command in Console
GET / opennms-events-*/_search
