A new technical guide details a complete offline installation of Elastic Stack 9.2 using RPM packages. The architecture spans three dedicated servers: Elasticsearch, Logstash, and Kibana. This method is crucial for air-gapped environments, where external repositories and internet access are prohibited. The guide provides a step-by-step workflow, from OS preparation and kernel tuning to firewall configuration.

The core process involves generating Certificate Authority (CA) certificates directly on the Elasticsearch node. This ensures secure, encrypted communication between all components without relying on external certificate authorities. The guide specifies exact commands for creating HTTP and transport certificates, configuring TLS for both nodes, and setting up mutual authentication. This approach is standard for hardening production clusters.

For Logstash and Kibana, the instructions involve copying the CA and configuring secure connections to the Elasticsearch host. Logstash uses a keystore for its password, while Kibana's configuration points directly to the Elasticsearch endpoint with the proper SSL settings. The guide concludes with verification steps, confirming that each service is running correctly behind HTTPS.

This method is for administrators who need full control over their deployment, especially in regulated industries or secure data centers. It avoids dependency on package managers, allowing for precise version control and auditability. The guide also hints at future topics like mutual TLS, high-availability clusters, and SELinux hardening.