elasticsearch-users和elasticsearch-reset-password介绍

        elasticsearch 内置 elastic, kibana, logstash_system,beats_system 共4个用户,用途如下:
elastic 账号:内置的超级用户,拥有 superuser 角色。
kibana 账号:用来连接 elasticsearch 并与之通信。Kibana 服务器以该用户身份提交请求以访问集群监视 API 和 .kibana 索引,不能访问 index。
logstash_system 账号:用户 Logstash 在 Elasticsearch 中存储监控信息时使用。

1、elasticsearch-reset-password,设置用户密码

命令:bin/elasticsearch-reset-password -u logstash_system 

2、elasticsearch-users  添加用户

#角色列表: roles Known roles: [watcher_admin, apm_system, viewer, logstash_system, rollup_user, kibana_user, beats_admin, remote_monitoring_agent, rollup_admin, snapshot_user, data_frame_transforms_admin, monitoring_user, enrich_user, kibana_admin, logstash_admin, editor, data_frame_transforms_user, machine_learning_user, machine_learning_admin, watcher_user, apm_user, beats_system, transform_user, reporting_user, kibana_system, transform_admin, remote_monitoring_collector, transport_client, superuser, ingest_admin]

#增加授权: #superuser能正常打开es的9200端口,kibana_system配置后才可以正常对接kb和es bin/elasticsearch-users roles -a superuser logadmin

bin/elasticsearch-users roles -a kibana_system logadmin

#移除授权:

bin/elasticsearch-users roles -r kibana_admin logadmin

#查看授权:

bin/elasticsearch-users roles -v logadmin

logadmin : kibana_system,superuser

elasticsearch@elasticsearch-master-2:~$ elasticsearch-reset-password -u elastic -i 123qqWARNING: Owner of file [/usr/share/elasticsearch/config/users] used to be [root], but now is [elasticsearch] WARNING: Owner of file [/usr/share/elasticsearch/config/users_roles] used to be [root], but now is [elasticsearch] q05:59:51.395 [main] WARN org.elasticsearch.common.ssl.DiagnosticTrustManager - failed to establish trust with server at [172.16.58.200]; the server provided a certificate with subject name [CN=elasticsearch-master], fingerprint [663f0e2ea99d6c658d7418a5119e1d756abc2ef3], keyUsage [digitalSignature, keyEncipherment] and extendedKeyUsage [serverAuth, clientAuth]; the session uses cipher suite [TLS_AES_256_GCM_SHA384] and protocol [TLSv1.3]; the certificate has subject alternative names [DNS:elasticsearch-master,DNS:elasticsearch-master.logging,DNS:elasticsearch-master.logging.svc]; the certificate is issued by [CN=elasticsearch-ca] but the server did not provide a copy of the issuing certificate in the certificate chain; the issuing certificate with fingerprint [6aacfbb37169100f515734e0862890ea18cd03f1] is trusted in this ssl context ([xpack.security.http.ssl (with trust configuration: PEM-trust{/usr/share/elasticsearch/config/certs/ca.crt})]) java.security.cert.CertificateException: No subject alternative names matching IP address 172.16.58.200 found at sun.security.util.HostnameChecker.matchIP(HostnameChecker.java:164) ~[?:?] at sun.security.util.HostnameChecker.match(HostnameChecker.java:101) ~[?:?]
04-02
评论 1
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包

打赏作者

magic33416563

你的鼓励将是我创作的最大动力

¥1 ¥2 ¥4 ¥6 ¥10 ¥20
扫码支付:¥1
获取中
扫码支付

您的余额不足,请更换扫码支付或充值

打赏作者

实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值