Elastic Stack Ansible Playbook for MacOS

This playbook is for setting up version 7.x of the Elastic Stack on a local MacOS environment You can still use this for 6.x but you will need to modify the site.yml and set the target_os: for some of the products that were not divided out by OS from a downloads path perspective.

Notes and requirements

• Prequisite: You will need Ansible installed you can install with brew install ansible
• This was tested on MacOS Mojave 10.14.x
• The playbook is currently configured to install the full Elastic Stack including all the Beats
• You can install all components or individually (or comment out what you don't want to install in the site.yml)
• Currently ELKUp starts Elasticsearch with a 2gb JVM, Kibana and APM Server with RUM enabled
• You can change the Elasticsearch JVM size by editing ES_JVM_SIZE in ELKup

Instructions

Export or set ES_INSTALL_HOME to the base directory where you want to install

export ES_INSTALL_HOME=/Users/sbrown/workspace/elastic-install

To install all the components, run the playbook with the following command, this installs version 7.10.0 of all components

ansible-playbook site.yml -i hosts --extra-vars "tag=7.10.0 run_option=install-all"

To install a single component, run the playbook with the following command, this installs Elasticearch version 7.10.0

ansible-playbook site.yml -i hosts --extra-vars "tag=7.10.0 run_option=install-elasticearch"

Run ELKup start to start the stack

TAG=7.10.0 ./ELKup start

Run ELKup start to start the stack

TAG=7.10.0 ./ELKup stop

Run the playbook with the following command, this removes version 7.10.0

CAUTION This forceably removes the ENTIRE installation including data directories and config files

ansible-playbook site.yml -i hosts --extra-vars "tag=7.10.0 run_option=remove-all"

To remove a single component, run the playbook with the following command, this removes Elasticearch version 7.10.0.

ansible-playbook site.yml -i hosts --extra-vars "tag=7.10.0 run_option=install-elasticearch"

Valid run_options

install-all, install-elasticearch, install-logstash, install-kibana, install-apm-server, install-metricbeat, install-filebeat, install-hearbeat

remove-all, remove-elasticearch, remove-logstash, remove-kibana, remove-apm-server, remove-metricbeat, remove-filebeat, remove-hearbeat