Skip to content

[Learning Note] ELK

Jump to bottom
Gukie edited this page Dec 11, 2017 · 7 revisions

Installation

ES, Kibana, X-Pack installation:

Java client API

refer: https://www.elastic.co/guide/en/elasticsearch/client/java-rest/current/index.html

Replication Model

Each index in Elasticsearch is divided into shards and each shard can have multiple copies. These copies are known as a replication group and must be kept in sync when documents are added or removed. If we fail to do so, reading from one copy will result in very different results than reading from another. The process of keeping the shard copies in sync and serving reads from them is what we call the data replication model.

refer: https://www.elastic.co/guide/en/elasticsearch/reference/current/docs-replication.html

Self-Define Schema(Mapping)

Conceptually,

  • an Elasticsearch server contains zero or more indexes.
  • An index is a container for zero or more types, which in turn has zero or more documents.
  • To put it another way: a document has an identifier, belongs to a type, which belongs to an index.
  • The figure below shows the documents A, B, X and Y of the type my_type, inside the index my_index.

refer:

Clone this wiki locally