[Elasticsearch] 给ES设置必须以用户名密码访问

一、elasticsearch.yml中设置

1、进入es的config目录中打开elasticsearch.yml

2、增加以下两项：

xpack.security.enabled: true
xpack.security.transport.ssl.enabled: true

二、重启es后使用elasticsearch-setup-passwords进行密码设置

1、在完成修改elasticsearch.yml后，重启es；

2、进入es的bin目录，敲入命令：

./elasticsearch-setup-passwords interactive     #linux执行这个
elasticsearch-setup-passwords interactive       #windows执行这个

3、之后分别给elastic, kibana, logstash_system,beats_system等用户设置密码，具体如下例：

[root@hecs-81986 bin]# ./elasticsearch-setup-passwords interactive
Initiating the setup of passwords for reserved users elastic,apm_system,kibana,kibana_system,logstash_system,beats_system,remote_monitoring_user.
You will be prompted to enter passwords as the process progresses.
Please confirm that you would like to continue [y/N]y


Enter password for [elastic]:
passwords must be at least [6] characters long
Try again.
Enter password for [elastic]:
Reenter password for [elastic]:
Enter password for [apm_system]:
Reenter password for [apm_system]:
Enter password for [kibana_system]:
Reenter password for [kibana_system]:
Enter password for [logstash_system]:
Reenter password for [logstash_system]:
Enter password for [beats_system]:
Reenter password for [beats_system]:
Enter password for [remote_monitoring_user]:
Reenter password for [remote_monitoring_user]:
Changed password for user [apm_system]
Changed password for user [kibana_system]
Changed password for user [kibana]
Changed password for user [logstash_system]
Changed password for user [beats_system]
Changed password for user [remote_monitoring_user]
Changed password for user [elastic]

执行完毕之后，访问es节点就需要用户名密码了，如下：