To use X-Pack you need:
- Elasticsearch 5.5.0 – Installing Elasticsearch
- Kibana 5.5.0 – Getting Kibana Up and Running
You must run the version of X-Pack that matches the version of Elasticsearch you are running.
X-Pack also provides a monitoring UI for Logstash.
To install X-Pack:
The X-Pack installation scripts require direct internet access to download and install X-Pack. If your servers don’t have internet access, you can manually download the X-Pack zip file and transfer it to a temporary directory on the offline machines. The plugins for Elasticsearch, Kibana and Logstash are all included in a single zip file. For more information about installing X-Pack on offline machines, see the product-specific X-Pack installation instructions.
Enabling and Disabling X-Pack Features
By default, all X-Pack features are enabled. You can explicitly enable or disable X-Pack features in elasticsearch.yml and kibana.yml:
| Setting | Description |
|---|---|
xpack.graph.enabled |
Set to false to disable X-Pack graph features. Configure in both elasticsearch.yml and kibana.yml. |
xpack.ml.enabled |
Set to false to disable X-Pack machine learning features. Configure in both elasticsearch.yml and kibana.yml. |
xpack.monitoring.enabled |
Set to false to disable X-Pack monitoring features. Configure in elasticsearch.yml, kibana.yml, and logstash.yml. |
xpack.reporting.enabled |
Set to false to disable X-Pack reporting features. Configure in kibana.yml only. |
xpack.security.enabled |
Set to false to disable X-Pack security features. Configure in both elasticsearch.yml and kibana.yml. |
xpack.watcher.enabled |
Set to false to disable Watcher. Configure in elasticsearch.yml only. |
For more information, see X-Pack Settings.
Upgrading X-Pack
To upgrade X-Pack:
- Stop Elasticsearch.
- Uninstall X-Pack from Elasticsearch:
/usr/share/elasticsearch/bin/elasticsearch-plugin remove x-pack
- Install the new version of X-Pack into Elasticsearch.
/usr/share/elasticsearch/bin/elasticsearch-plugin install x-pack
- Restart Elasticsearch.
If you’re upgrading a production cluster, perform a rolling upgrade to ensure recovery is as quick as possible. Rolling upgrades are supported when upgrading to a new minor version. A full cluster restart is required when upgrading to a new major version.
- Uninstall X-Pack from Kibana:
bin/kibana-plugin remove x-pack
- Install the new version of X-Pack into Kibana.
bin/kibana-plugin install x-pack
- Restart Kibana.
Uninstalling X-Pack
To uninstall X-Pack:
- Stop Elasticsearch.
- Remove X-Pack from Elasticsearch:
bin/elasticsearch-plugin remove x-pack
- Restart Elasticsearch.
- Remove X-Pack from Kibana:
bin/kibana-plugin remove x-pack
- Restart Kibana.
- Remove X-Pack from Logstash:
bin/logstash-plugin remove x-pack
- Restart Logstash.