Understanding Elasticsearch from Installation to Trouble Shooting

Elasticsearch is a distributed search and analytics engine, scalable data store, and vector database built on Apache Lucene. It’s optimized for speed and relevance on production-scale workloads. Use Elasticsearch to search, index, store, and analyze data of all shapes and sizes in near real time.

Elasticsearch is the heart of the Elastic Stack. Combined with Kibana, it powers the following Elastic solutions:

How to install?

To install Elasticsearch, follow these steps based on your operating system:

1. For Linux (Debian/Ubuntu)

a. Import the Elasticsearch public GPG key:

wget -qO - https://artifacts.elastic.co/GPG-KEY-elasticsearch | sudo apt-key add -

b. Install the apt-transport-https package:

sudo apt-get install apt-transport-https

c. Add the Elasticsearch APT repository:

echo "deb https://artifacts.elastic.co/packages/8.x/apt stable main" | sudo tee -a /etc/apt/sources.list.d/elastic-8.x.list

d. Update your package list and install Elasticsearch:

sudo apt-get update
sudo apt-get install elasticsearch

e. Enable and start the Elasticsearch service:

sudo systemctl enable elasticsearch
sudo systemctl start elasticsearch

2. For macOS (Using Homebrew)

a. Install Elasticsearch:

brew tap elastic/tap
brew install elastic/tap/elasticsearch-full

b. Start Elasticsearch:

brew services start elastic/tap/elasticsearch-full

3. For Windows

a. Download the Elasticsearch ZIP file from the official Elastic website.

b. Extract the ZIP file and navigate to the bin folder inside the extracted directory.

c. Start Elasticsearch by running:

elasticsearch.bat

4. Verifying Installation

Once Elasticsearch is running, you can verify the installation by running this command:

curl -X GET "localhost:9200/"

This should return basic information about your Elasticsearch instance.

To install Elasticsearch using Docker, follow these steps:

1. Install Docker

If Docker is not already installed, follow the installation instructions for your OS from the Docker website.

2. Pull the Elasticsearch Docker Image

To get the official Elasticsearch Docker image, run:

docker pull docker.elastic.co/elasticsearch/elasticsearch:8.10.2

Replace 8.10.2 with the version you'd like to use, if necessary.

3. Run Elasticsearch in Docker

To start an Elasticsearch container, run the following command:

docker run -d --name elasticsearch -p 9200:9200 -p 9300:9300 -e "discovery.type=single-node" docker.elastic.co/elasticsearch/elasticsearch:8.10.2

• -d: Runs the container in detached mode.
• --name elasticsearch: Names the container "elasticsearch".
• -p 9200:9200: Maps port 9200 (HTTP) to your host, so you can interact with Elasticsearch.
• -p 9300:9300: Maps port 9300 (transport), mainly used for clustering.
• -e "discovery.type=single-node": This sets up Elasticsearch in single-node mode (useful for development).

4. Verify Installation

Once the container is running, you can verify that Elasticsearch is working by sending an HTTP request:

curl -X GET "localhost:9200/"

This should return the Elasticsearch instance information in JSON format.

5. Optional: Managing the Container

• Stop Elasticsearch:

  docker stop elasticsearch
  

• Start the container again:

  docker start elasticsearch
  

This Docker setup is great for development or testing environments. If you're planning to run Elasticsearch in production via Docker, you may want to configure persistent storage, networking, and cluster settings.

Trouble Shooting when the default port (9200) is not mapped correctly.

You can't directly modify the port of a running container, but you can change how Docker forwards the ports without reinstalling Elasticsearch. Here's how:

Step-by-Step Instructions:

1. Stop the Container First, stop the currently running Elasticsearch container:

   docker stop <container_id_or_name>
   

2. Create a New Container with Correct Port Mapping

   Use Docker’s commit and run commands to create a new container from your existing one without having to pull and reinstall the image. This will preserve the current setup and data.

   First, commit the stopped container to a new image:

   docker commit <container_id_or_name> my_elasticsearch:v1
   

   Now, create and run a new container with the proper port mapping (in this case, mapping port 9200 on the host to port 9200 inside the container):

   docker run -d --name elasticsearch_fixed -p 9200:9200 -p 9300:9300 -e "discovery.type=single-node" my_elasticsearch:v1
   

   This will create a new container using the existing state, but with updated port bindings.

3. Verify the Change

   You can now verify that Elasticsearch is running on the new port (9200) by running:

   curl -X GET “localhost:9200/”

    

Key Takeaways: Understanding Elasticsearch from Installation to Troubleshooting

• Elasticsearch is a powerful, distributed search and analytics engine that provides scalable data storage and vector database capabilities, optimized for high-speed relevance.
• Easy installation across platforms: Elasticsearch offers straightforward installation guides for Linux (Debian/Ubuntu), macOS (using Homebrew), and Windows.
• Leverage Docker for streamlined development and testing: Docker simplifies Elasticsearch setup by providing an isolated container environment with easy management.
• Troubleshooting common issues: Learn to handle scenarios where the default port (9200) isn't mapped correctly by adjusting Docker port forwarding without reinstalling Elasticsearch.