Installing X-Pack

To use X-Pack you need:

You must run the version of X-Pack that matches the version of Elasticsearch you are running.

X-Pack also provides a monitoring UI for Logstash.

To install X-Pack:

Note

The X-Pack installation scripts require direct internet access to download and install X-Pack. If your servers don’t have internet access, you can manually download the X-Pack zip file and transfer it to a temporary directory on the offline machines. The plugins for Elasticsearch, Kibana and Logstash are all included in a single zip file. For more information about installing X-Pack on offline machines, see the product-specific X-Pack installation instructions.

Enabling and Disabling X-Pack Features

By default, all X-Pack features are enabled. You can explicitly enable or disable X-Pack features in elasticsearch.yml and kibana.yml:

Setting Description

xpack.graph.enabled

Set to false to disable X-Pack graph features. Configure in both elasticsearch.yml and kibana.yml.

xpack.ml.enabled

Set to false to disable X-Pack machine learning features. Configure in both elasticsearch.yml and kibana.yml.

xpack.monitoring.enabled

Set to false to disable X-Pack monitoring features. Configure in elasticsearch.yml, kibana.yml, and logstash.yml.

xpack.reporting.enabled

Set to false to disable X-Pack reporting features. Configure in kibana.yml only.

xpack.security.enabled

Set to false to disable X-Pack security features. Configure in both elasticsearch.yml and kibana.yml.

xpack.watcher.enabled

Set to false to disable Watcher. Configure in elasticsearch.yml only.

For more information, see X-Pack Settings.

Upgrading X-Pack

To upgrade X-Pack:

  1. Stop Elasticsearch.
  2. Uninstall X-Pack from Elasticsearch:

    bin/elasticsearch-plugin remove x-pack
  3. Install the new version of X-Pack into Elasticsearch.

    bin/elasticsearch-plugin install x-pack
  4. Restart Elasticsearch.

    Important

    If you’re upgrading a production cluster, perform a rolling upgrade to ensure recovery is as quick as possible. Rolling upgrades are supported when upgrading to a new minor version. A full cluster restart is required when upgrading to a new major version.

  5. Uninstall X-Pack from Kibana:

    bin/kibana-plugin remove x-pack
  6. Install the new version of X-Pack into Kibana.

    bin/kibana-plugin install x-pack
  7. Restart Kibana.

Uninstalling X-Pack

To uninstall X-Pack:

  1. Stop Elasticsearch.
  2. Remove X-Pack from Elasticsearch:

    bin/elasticsearch-plugin remove x-pack
  3. Restart Elasticsearch.
  4. Remove X-Pack from Kibana:

    bin/kibana-plugin remove x-pack
  5. Restart Kibana.
  6. Remove X-Pack from Logstash:

    bin/logstash-plugin remove x-pack
  7. Restart Logstash.