install-elasticsearch-systemd

国内镜像

https://mirrors.huaweicloud.com/elasticsearch/

https://mirrors.huaweicloud.com/kibana/

https://mirrors.huaweicloud.com/logstash/

下载安装包

https://www.elastic.co/cn/downloads/elasticsearch

elasticsearch 必须使用普通用户运行

useradd -M -s /sbin/nologin elastic

解压安装包

tar -zxvf elasticsearch-7.16.0-linux-x86_64.tar.gz -C /opt/elk
chown -R elastic:elastic /opt/elk/elasticsearch-7.16.0
ln -s /opt/elk/elasticsearch-7.16.0 /opt/elk/elasticsearch

修改配置文件

# vim /opt/elk/elasticsearch/config/elasticsearch.yml

# 末尾追加
cluster.name: elasticsearch
node.name: master_01
network.host: 0.0.0.0
cluster.initial_master_nodes: ["master_01"]

## 可选
http.cors.enabled: true
http.cors.allow-origin: '*'

systemd 启动服务

修改 vim /etc/systemd/system.conf 对 systemd 服务不生效的，需要配置文件中单独指定.

[Unit]
Description=Elasticsearch 7.16
# This unit can only run after the network is up and running
# (that is, the network target has run)
After=network.target

[Service]
# and the initial process exits
Type=forking

# Wait 120 seconds on startup and shutdown to consider the process
# correctly started up or shut down.
TimeoutSec=120

# The UNIX user and group to execute PostgreSQL as
User=elastic
Group=elastic

# Set the JAVA_HOME environmental variable for Elasticsearch
Environment=ES_JAVA_HOME=/opt/jdk11

# If StandardOutput= or StandardError= are set to syslog, journal or kmsg,
# prefix log lines with "elasticsearch"
SyslogIdentifier=elasticsearch

# Command used to start Elasticsearch
ExecStart=/opt/elk/elasticsearch/bin/elasticsearch -d

# open files
LimitNOFILE=65535
# processes/threads
LimitNPROC=64000

[Install]
# This unit is part of target multi-user
WantedBy=multi-user.target

开放端口

# 查看端口开放情况
firewall-cmd --list-all

firewall-cmd --add-port=9200/tcp --permanent
firewall-cmd --remove-port=9200/tcp --permanent

firewall-cmd --reload 

安全认证

1. 修改配置文件 elasticsearch.yml

   xpack.security.enabled: true

2. 生成证书

   bin/elasticsearch-certutil ca
   bin/elasticsearch-certutil cert --ca elastic-stack-ca.p12
   mv elastic-certificates.p12 config/
   mv elastic-stack-ca.p12 config/

3. 开启集群中https传输

   xpack.security.transport.ssl.enabled: true
   xpack.security.transport.ssl.verification_mode: certificate
   xpack.security.transport.ssl.keystore.path: elastic-certificates.p12
   xpack.security.transport.ssl.truststore.path: elastic-certificates.p12

4. 开启api接口https传输 暂时没有使用到

   xpack.security.http.ssl.enabled: true
   xpack.security.http.ssl.keystore.path: elastic-certificates.p12
   xpack.security.http.ssl.truststore.path: elastic-certificates.p12
    
   xpack.security.http.ssl.client_authentication: none
   xpack.ssl.verification_mode: none

5. 为内建用户设置密码

   bin/elasticsearch-setup-passwords auto

   Changed password for user apm_system
   PASSWORD apm_system = deVcc3ur3tDe8EzDfJXJ
   
   Changed password for user kibana_system
   PASSWORD kibana_system = EcCXA3No9uNDqNAEnhQH
   
   Changed password for user kibana
   PASSWORD kibana = EcCXA3No9uNDqNAEnhQH
   
   Changed password for user logstash_system
   PASSWORD logstash_system = IOpAn1vBAWSnYMA1Hm2J
   
   Changed password for user beats_system
   PASSWORD beats_system = EU9fWawyuFmbwZBrlHrM
   
   Changed password for user remote_monitoring_user
   PASSWORD remote_monitoring_user = zfvVO6MO8P71W9XoAhBx
   
   Changed password for user elastic
   PASSWORD elastic = JE4LYRGKqyzv68aHRdH8

   可以使用上面的 elastic 用户登录 kibana

赏

谢谢你请我吃糖果

支付宝

微信