...
| Node | Open Port |
|---|---|
| wifimon-node{1,2,3}.example.org | 9200/tcp, 9300/tcp |
| wifimon-kibana.example.org | 9200/tcp, 9300/tcp, 5601/tcp |
| wifimon-logstash.example.org | 5044/tcp |
Port 9200/tcp is used to query the cluster using the Elasticsearch REST API. Port 9300/tcp is used for internal communication between cluster nodes. Port 5044/tcp is where Logstash listens for beats of log events sent from Filebeat. Port 5601/tcp is used to access Kibana platform from the browser.
| Note | ||
|---|---|---|
| ||
To query the cluster, the port 9200/tcp is used. This port is not opened in the firewall, the cluster can only by queried locally from each cluster node by applying the commands of Elasticsearch REST API at the node you are currently logged in. For more information on querying the cluster see Cluster Exploration. |
This setup uses firewalld for the configuration of firewall. On each component a "wifimon" custom zone is created to hold the specific configuration.
...
For more information on Kibana configuration settings, see Configuring Kibana.
| Anchor | ||||
|---|---|---|---|---|
|
Even though it is possible to explore the cluster by using the Kibana platform, this section is about querying the cluster by using the REST API provided by Elasticsearch. The querying commands are executed in wifimon-kibana.example.org node and the user elastic is used for authentication.
...