Page Comparison

...

1. The plugin is located at  /installs/tech-preview/es-changes-feed-plugin.zip
2. In order to extract the plugin please follow the procedure :
   1. cd  /installs/tech-preview
   2. unzip es-changes-feed-plugin.zip
   3. The command will create the following files in the directory /installs/tech-preview :
      1. MonTierEventsFeedPlugin.zip
      2. MonTierEventsFeedPlugin.zip.md5

3. To install plugin just run commands: 

   1. cd /app/elasticsearch_base

   2. bin/plugin install file:///installs/tech-preview/MonTierEventsFeedPlugin.zip

   3. Approve the installation by pressing Y to the prompt question "Continue with installation? [y/N]"

   4. To remove plugin issue command : bin/plugin remove file:///installs/tech-preview/MonTierEventsFeedPlugin.zip

4. Configure each Store node number 2 or 4 as follow:

   1. cd /app/elasticsearch_nodes/config/MonTier-es-raw-trans-Node-2 
   2. Edit file elasticsearch.yml

5. add to the end of file the parameters:

   Parameter	Values	Description
   montier.events.feed.syslog.protocol	tcp or udp	the protocol used to send syslog
   montier.events.feed.syslog.host	ip addressv4 or valid hostname	target syslog agent hostname
   montier.events.feed.syslog.port	integer 1-65535	target syslog agent port
   montier.events.feed.syslog.ssl	false or true	enable / disable ssl
   montier.events.feed.appname	text A-Z|a-z|0-9 name - 8 chars	syslog application name

   
   

Configure syslog agent

For each syslog agent that you have in system perform the following

1. cd /app/flume/syslog_agents/conf/MonTier-SyslogAgent-nn/ (replace nn with agent number)
2. edit file flume_syslog.conf
3. Look  in each each agent for rows with pattern : MonTier-SyslogAgent-1.sinks.syslogElasticSinknnn.batchSize = (replace nnn with 1 to 10!!)
4. For each row found please add below the line 
5.