Muridin

22 April 2022

PUT /_cluster/settings

{    "persistent" : {
       "cluster.max_shards_per_node": "1500"
   }
}

Ref:

https://stackoverflow.com/questions/63700998/how-to-increase-cluster-settings-cluster-max-shards-per-node-for-aws-elasticsea

ref:
https://www.elastic.co/guide/en/fleet/8.1/fleet-server-scalability.html#scaling-recommendations

ref https://www.elastic.co/support/matrix#matrix_compatibility

C:\"Program Files"\Elastic\Agent\elastic-agent.exe uninstall

ref: https://www.elastic.co/guide/en/fleet/current/uninstall-elastic-agent.html

1) use kibana_system

2) reset password on docker
docker exec -it container_name /usr/share/elasticsearch/bin/elasticsearch-reset-password -u kibana_system

GET /_cat/nodes - get list of nodes

Get / - get version of the node

GET /_cluster/health?pretty
- get cluster status: green/red
- number of nodes
- number of primary shards

https://www.elastic.co/virtual-events/unlock-your-soc-stop-threats-with-limitless-xdr

Detect - alert-rules
Video minute 15:20

Cases:
minute : 27

External Incident Management System: (eg: JIRA)
minute: 28:31