[Learning Note] ELK - Gukie/building-recommend GitHub Wiki
Installation
ES, Kibana, X-Pack installation:
Java client API
refer: https://www.elastic.co/guide/en/elasticsearch/client/java-rest/current/index.html
Replication Model
Each index in Elasticsearch is divided into shards and each shard can have multiple copies. These copies are known as a replication group and must be kept in sync when documents are added or removed. If we fail to do so, reading from one copy will result in very different results than reading from another. The process of keeping the shard copies in sync and serving reads from them is what we call the data replication model.
refer: https://www.elastic.co/guide/en/elasticsearch/reference/current/docs-replication.html
Self-Define Schema(Mapping)
Conceptually,
- an Elasticsearch server contains zero or more indexes.
- An index is a container for zero or more types, which in turn has zero or more documents.
- To put it another way: a document has an identifier, belongs to a type, which belongs to an index.
- The figure below shows the documents A, B, X and Y of the type my_type, inside the index my_index.

refer: