Tried out installing Elastic, Logstash and Kibana on Ubuntu 17.6 (running on VMWare Player on Windows 10) and it was a bit difficult. Not sure if it's because I'm not a Linux guru or what.
Installing elasticsearch via apt-get works but it does not run because of some YAML library missing
Installing manually (wget/download) works but all the permissions are wrong and it won't run without a lot of tweaking (chown).
Point 2 is the real issue and applies equally to ElasticSearch, LogStash and Kibana. It's catch 22: you can't install without sudo but if you use sudo then all the created directories are owned by root and you have no access to them so nothing runs (permission errors).
So the only way to get things running is to sudo install them and then chown 4 different folders: one for each application. So for logstash you have to do:
sudo chown -R myuser /usr/share/logstash
sudo chown -R myuser /etc/logstash
sudo chown -R myuser /var/lib/logstash
sudo chown -R myuser /var/log/logstash
Do that 3 times and you might have ELK running.
Then, when you install X-Pack you have to do similar antics.
So I got ES running but it won't run as a service. sudo service elasticsearch start runs without error but ES is not running.
I assume it's permissions of the elasticsearch user so I tried setting the group ownership to "adm" on all relevant folders and adding the elasticsearch user to the adm group (myuser was already a member). This has not helped issues.
Any way to diagnose why a service won't start in linux? Can't see anything in syslog or /var/log/elasticsearch/*.log
Unfortunately I have no way of recalling the exact message but it should be reproducible on a new installation of Ubuntu 17.6 on VMWare. Just ran sudo apt-get install elasticsearch (after sudo apt-get update).
Googling the issue at the time brought up posts saying the apt-get package for elasticsearch was not quite "ready for the masses" or similar. I think basically some YAML library was missing or out of date.
There's been 200 million or so downloads of our product and I don't recall seeing this problem in the last few years. Not trying to put the blame on you, but it's super helpful if you can record things so we can dig deeper and find a solution.
Also it doesn't actually look like Ubuntu 17 has been released?
The experience was written "posthumously" after I'd gotten things running and I thought I'd let you guys know but I'm fairly certain the link I posted is the correct error message "NoClassDefFoundError".
What version of elasticsearch are you installing? That Debian bug link is for a very old version (1.7) and trying to install from that repository on a recent distro would likely have many issues. See the current docs for installing on Debian systems.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.