Installing SEAL Elastic Stack¶

Overview¶

The installation consists of a server and a client part which you have to install separately.

Server:

The server part includes Elasticsearch and Kibana. You have to install it on the
- Management server.
Client:

The client part contains Filebeat. Depending on your system you have to install it on the following servers:
- PLOSSYS Output Engine server
- PLOSSYS 4 server
- SEAL Operator server
- PLOSSYS Distribution Engine/DPF server

Automatic Configuration¶

SEAL Elastic Stack 8.x provides an automatic configuration, see original documentation, automatic configuration which includes the following security settings:

Minimal Security, see original documentation, Minimal Security
Basic Security, see original documentation, Basic Security.

These include the following actions:

Generating Self-signed Certificates

The automatic configuration
- creates self-signed certificates for Elasticsearch,
- adds their names in the elasticsearch.yml configuration file, and
- stores the certificates in the newly created certs subdirectory.
For details on Certificate files, see Self-signed Certificates.
Activating the Minimal Security

The Minimal Security of Elastic Stack will be activated.

A password for the elastic superuser of Elasticsearch will be automatically generated.

Caution - only on the command line

The password is created by the install.sh or install.ps1 installation script during the installation of SEAL Elastic Stack and printed on the command line.

Make sure, you remember it and keep it safe.

For details on resetting the elastic superuser password, see Resetting Passwords.
Creating and using an enrollment token to configure Kibana

The automatic configuration creates and uses an enrollment token for configuring Kibana. For this, the kibana.yml configuration file is enhanced accordingly.

Instructions¶

Follow the instructions below to install SEAL Elastic Stack.

Management Server¶

Hint - disc space

Make sure that you have enough disk space available on the installation device. If the amount of free space is less than about 10 % of the device's total capacity, Elasticsearch will lock the created indices and Kibana will not start properly.

In a browser, log on to the SEAL Systems delivery platform with your logon data:

https://delivery.sealsystems.de

Hint - logon data

You receive the logon data from your Technical Project Manager at SEAL Systems.
Download the SEAL Elastic Stack - 8.17.3.396 - msi folder. It is saved as SEAL Elastic Stack - 8.17.3.396 - msi.zip.
Extract SEAL Elastic Stack - 8.17.3.396 - msi.zip.
In a PowerShell (Administrator), change to the SEAL Elastic Stack - 8.17.3.396 - msi\server directory and start installing the packages:
```
cd "SEAL Elastic Stack - 8.17.3.396 - msi\server"
```
```
Set-ExecutionPolicy Bypass -Scope Process -Force; .\install.ps1
```

Open the required firewall ports for necessesary services:

Set-ExecutionPolicy Bypass -Scope Process -Force; .\firewall.ps1

Check the configuration files of elasticsearch and kibana as described in Configuring the Management Server.
Start SEAL Elasticsearch:
```
start-service seal-elasticsearch
```
Start Kibana:
```
start-service seal-kibana
```
Upload the initial database configuration as described in Configuration via Script.

Hint - TLS encryption for Kibana

If you wish to increase security while accessing Kibana, see TLS encryption for Kibana.

PLOSSYS Output Engine Server¶

In a browser, log on to the SEAL Systems delivery platform with your logon data:

https://delivery.sealsystems.de

Hint - logon data

You receive the logon data from your Technical Project Manager at SEAL Systems.
Download the SEAL Elastic Stack - 8.17.3.396 - msi folder. It is saved as SEAL Elastic Stack - 8.17.3.396 - msi.zip.
Extract SEAL Elastic Stack - 8.17.3.396 - msi.zip.
In a PowerShell (Administrator), change to the SEAL Elastic Stack - 8.17.3.396 - msi\client directory and start installing the packages:
```
cd "SEAL Elastic Stack - 8.17.3.396 - msi\client"
```
```
Set-ExecutionPolicy Bypass -Scope Process -Force; .\install.ps1
```
Start SEAL Filebeat:
```
start-service seal-filebeat
```

PLOSSYS 4 Server¶

In a browser, log on to the SEAL Systems delivery platform with your logon data:

https://delivery.sealsystems.de

Hint - logon data

You receive the logon data from your Technical Project Manager at SEAL Systems.
Download the SEAL Elastic Stack - 8.17.3.396 - msi folder. It is saved as SEAL Elastic Stack - 8.17.3.396 - msi.zip.
Extract SEAL Elastic Stack - 8.17.3.396 - msi.zip.
In a PowerShell (Administrator), change to the SEAL Elastic Stack - 8.17.3.396 - msi\client-p4 directory and start installing the packages:
```
cd "SEAL Elastic Stack - 8.17.3.396 - msi\client-p4"
```
```
Set-ExecutionPolicy Bypass -Scope Process -Force; .\install.ps1
```

Start SEAL Filebeat:

start-service seal-p4-accounting-filebeat

SEAL Operator Server¶

In a browser, log on to the SEAL Systems delivery platform with your logon data:

https://delivery.sealsystems.de

Hint - logon data

You receive the logon data from your Technical Project Manager at SEAL Systems.
Download the SEAL Elastic Stack - 8.17.3.396 - msi folder. It is saved as SEAL Elastic Stack - 8.17.3.396 - msi.zip.
Extract SEAL Elastic Stack - 8.17.3.396 - msi.zip.
In a PowerShell (Administrator), change to the SEAL Elastic Stack - 8.17.3.396 - msi\client-operator directory and start installing the packages:
```
cd "SEAL Elastic Stack - 8.17.3.396 - msi\client-operator"
```
```
Set-ExecutionPolicy Bypass -Scope Process -Force; .\install.ps1
```
Start SEAL Filebeat:
```
start-service seal-operator-filebeat
```

PLOSSYS Distribution Engine/DPF Server¶

In a browser, log on to the SEAL Systems delivery platform with your logon data:

https://delivery.sealsystems.de

Hint - logon data

You receive the logon data from your Technical Project Manager at SEAL Systems.
Download the SEAL Elastic Stack - 8.17.3.396 - msi folder. It is saved as SEAL Elastic Stack - 8.17.3.396 - msi.zip.
Extract SEAL Elastic Stack - 8.17.3.396 - msi.zip.
In a PowerShell (Administrator), change to the SEAL Elastic Stack - 8.17.3.396 - msi\client-dpf directory and start installing the packages:
```
cd "SEAL Elastic Stack - 8.17.3.396 - msi\client-dpf"
```
```
Set-ExecutionPolicy Bypass -Scope Process -Force; .\install.ps1
```
Start SEAL Filebeat:
```
start-service seal-dpf-filebeat
```