After you install Logstash, you can optionally obtain and install X-Pack. For more information about how to obtain X-Pack, see https://www.elastic.co/products/x-pack.
To use X-Pack you need:
You must install X-Pack on Elasticsearch, Kibana, and Logstash, using the version of X-Pack that matches of the version the product. For more information about installing X-Pack on Elasticsearch and Kibana, see Installing X-Pack.
If you are installing X-Pack for the first time on an existing cluster, you must perform a full cluster restart. Installing X-Pack enables security and security must be enabled on ALL nodes in a cluster for the cluster to operate correctly. When upgrading you can usually perform a rolling upgrade.
To install X-Pack on Logstash:
Install X-Pack on your Logstash nodes by running
bin/logstash-pluginin the Logstash installation directory.
bin/logstash-plugin install x-pack
- Configure and start Logstash.
The plugin install scripts require direct Internet access to download and install X-Pack. If your server doesn’t have Internet access, you can manually download and install X-Pack.
To install X-Pack on a machine that doesn’t have Internet access:
- Manually download the X-Pack zip file:
- Transfer the zip file to a temporary directory on the offline machine. (Do NOT put the file in the Elasticsearch plugins directory.)
bin/logstash-plugin installfrom the Logstash install directory and specify the location of the X-Pack zip file. (The plugins for Elasticsearch, Kibana, and Logstash are included in the same zip file.) For example:
bin/logstash-plugin install file:///path/to/file/x-pack-5.5.0.zip