前言
在Elasticsearch7.3，x-pack已经作为默认的插件集成在Elasticsearch里面了，所以无需在bin/elasticsearch-plugin install x-pack了，直接在配置文件中启用就可以了。
|
[root@localhost bin]
# ./elasticsearch-plugin install x-pack
|
|
|
ERROR:
this distribution of Elasticsearch contains X-Pack by default
|
|
开启x-pack
参考官方文档，开启x-pack只需要在elasticsearch的配置文件elasticsearch.yml文件中新增如下配置即可：
|
# 开启
x-pack安全验证
|
|
|
xpack.security.audit.enabled: true
|
|
|
xpack.license.self_generated.type: basic
|
|
|
# 如果是
basic license的话需要加入下面这一行，不然的话restart elasticsearch之后会报错。
|
|
|
xpack.security.transport.ssl.enabled: true
|
|
设置密码
|
[root@elk elasticsearch]
# bin/elasticsearch-setup-passwords interactive
|
|
|
Initiating the setup
of passwords for reserved users
|
|
|
elastic,apm_system,kibana,logstash_system,beats_system,remote_monitoring_user.
|
|
|
You will be prompted to enter passwords
as the process progresses.
|
|
|
Please confirm that you would like to
continue [y/N]y
|
|
|
Enter password
for [elastic]:
|
|
|
Reenter password
for [elastic]:
|
|
|
Enter password
for [apm_system]:
|
|
|
Reenter password
for [apm_system]:
|
|
|
Enter password
for [kibana]:
|
|
|
Reenter password
for [kibana]:
|
|
|
Enter password
for [logstash_system]:
|
|
|
Reenter password
for [logstash_system]:
|
|
|
Enter password
for [beats_system]:
|
|
|
Reenter password
for [beats_system]:
|
|
|
Enter password
for [remote_monitoring_user]:
|
|
|
Reenter password
for [remote_monitoring_user]:
|
|
|
Changed password
for user [apm_system]
|
|
|
Changed password
for user [kibana]
|
|
|
Changed password
for user [logstash_system]
|
|
|
Changed password
for user [beats_system]
|
|
|
Changed password
for user [remote_monitoring_user]
|
|
|
Changed password
for user [elastic]
|
|
密码设置完成后需要在相对应的服务中增加elasticsearch的账号密码，例如kibana、logstash。
kibana设置：
|
elasticsearch.username:
"elastic"
|
|
|
elasticsearch.password:
"123456"
|
|
测试
|
curl -XGET -u
"elastic:123456" http://192.168.115.211:9200/_cat/indices
|
|
|
green
open .kibana_task_manager aA2f1cDOSU6nqCx9P-hFPQ 1 0 2 4 45.1kb 45.1kb
|
|
|
green
open .security-7 kLzahwFyQ2aep2EzmrdLrQ 1 0 44 0 88.2kb 88.2kb
|
|
|
yellow
open con_error ku-d1jaQQ8q9eNLSYZAKow 1 1 63023 6368 47mb 47mb
|
|
|
yellow
open alive_ip p9EgMpYEQLabuke05CBMKA 1 1 6538723 1279843 706.5mb 706.5mb
|
|
|
green
open .kibana_1 qc9bm_m7TqiH53JHGxXXww 1 0 19 4 83.6kb 83.6kb
|
|