Configuring a PLOSSYS Output Engine Server¶

Operating System Settings¶

In an editor, open the following configuration file:

/etc/sysctl.conf

Adjust the necessary operating system settings
- for high-volume systems:
```
net.ipv4.ip_local_port_range = 10000 65535
fs.file-max = 1058576
```
- for working with Elasticsearch:
```
vm.max_map_count = 262144
```

Logging¶

If you have installed PLOSSYS Output Engine with a separate management server, you have to set the IP address of the management server for the logging:

On the PLOSSYS Output Engine Server, edit the following file:
```
/opt/seal/etc/filebeat.yml
```
In elasticsearch, replace localhost by the host name or IP address of the management server:
```
output:
  elasticsearch:
    hosts:
    - http://<admin_server>:9200
```
Save the file.
In the seal-rest service, specify the following key:
- ELASTICSEARCH_REST_URL: URL of the Elasticsearch server
Example of setting the key via PLOSSYS CLI
```
plossys config set ELASTICSEARCH_REST_URL "http://<admin_server>:9200" --service rest --insecure
```
Restart PLOSSYS Output Engine:
```
plossys service start
```

Logging in a Cluster¶

Hint - each cluster member separately

All PLOSSYS Output Engine servers in a cluster have to transfer their log data to the same Elasticsearch server. Therefore you have to perform the following instructions on each cluster member separately.

On the PLOSSYS Output Engine Server, edit the following file:
```
/opt/seal/etc/filebeat.yml
```
In elasticsearch, replace localhost by the host name or IP address of the management server:
```
output:
  elasticsearch:
    hosts:
    - http://<admin_server>:9200
```
Save the file.
In the seal-rest service, specify the following key:
- ELASTICSEARCH_REST_URL: URL of the Elasticsearch server
Example of setting the key via PLOSSYS CLI
```
plossys config set ELASTICSEARCH_REST_URL "http://<admin_server>:9200" --service rest --insecure
```
Restart PLOSSYS Output Engine:
```
plossys service start
```

Displaying the Log Messages of PLOSSYS Output Engine in Kibana¶

The log messages of PLOSSYS Output Engine can be displayed and evaluated in the Kibana user interface.

Open the Kibana user interface in a Web browser:

http://<admin_server>:5601

Hint - saving search settings

Kibana does not save search settings. But as the search settings are included in the URL you can save the search settings as bookmarks.