ElasticStack

============

This is a simple role for setting up a single, unsecured ElasticStack node. It comes with Kibana and Beats templates. This project is still in the early development stages, so it is not recommended for production use!

!!! Set up Kibana to only accept connections from the local host and place a BasicAuth protected Proxy in front of it !!!

!!! Configure Elasticsearch to listen on all devices (0.0.0.0) and use iptables to limit access !!!

Role Variables

• elasticsearch_heap_size: 1g

• elasticsearch_install_elasticsearch: True

• elasticsearch_install_kibana: True

• elasticsearch_release: 7.16.2

• elasticsearch_install_auditbeat: True

• elasticsearch_install_filebeat: True

• elasticsearch_install_heartbeat: True

• elasticsearch_install_metricbeat: True

• elasticsearch_install_packetbeat: True

• elasticsearch_init_trial_license: False # Should a 30-day trial license be activated and XPack features installed?

Example Playbook

- hosts: elasticsearch
  roles:
     - { role: andrelohmann.elasticsearch }

To-Do

Add the following instructions to the role:

• Secure Elasticsearch and Kibana with an Nginx HTTP Proxy

OR

• Implement SearchGuard

License

MIT

Author Information

You can find more about the author here.