Elasticsearch,Kibana集成,x-pack鉴权配置

Elasticsearch,Kibana集成

---

Java8环境部署[CentOS7]

cd /usr/local/src
wget https://repo.huaweicloud.com/java/jdk/8u201-b09/jdk-8u201-linux-x64.tar.gz

tar -xzvf jdk-8u201-linux-x64.tar.gz -C /usr/local
 
 
#配置环境变量
vim /etc/profile
#文末添加
export JAVA_HOME=/usr/local/jdk1.8.0_201
export JRE_HOME=${JAVA_HOME}/jre
export CLASSPATH=.:${JAVA_HOME}/lib:${JRE_HOME}/lib
export PATH=${JAVA_HOME}/bin:$PATH
 
source /etc/profile
java -version
java version "1.8.0_201"
Java(TM) SE Runtime Environment (build 1.8.0_201-b09)
Java HotSpot(TM) 64-Bit Server VM (build 25.201-b09, mixed mode)

---

Elasticsearch

https://www.elastic.co/cn/start 

https://www.elastic.co/cn/downloads/elasticsearch

# 修改环境参数
vim /etc/security/limits.conf
* soft nofile 65536
* hard nofile 131072
* soft nproc 2048
* hard nproc 4096

vim /etc/sysctl.conf
vm.max_map_count=655360

sysctl -p

# 下载并配置
cd /usr/local/src
wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-8.11.1-linux-x86_64.tar.gz
tar -xzvf  elasticsearch-8.11.1-linux-x86_64.tar.gz -C /usr/local/ 


# 添加新用户
groupadd elastic
useradd elastic -g elastic -p elasticsearch
# 设置文件权限
cd /usr/local/
chown -R elastic:elastic elasticsearch-8.11.1

# 设置数据及日志目录
vim /usr/local/elasticsearch-8.11.1/config/elasticsearch.yml
cluster.name: es-cluster # 集群名
node.name: es-node-01 # 节点名
path.data: /usr/local/elasticsearch-8.11.1/data	# 数据目录
path.logs: /usr/local/elasticsearch-8.11.1/logs	# 日志目录
network.host: 0.0.0.0	# es绑定到地址
http.port: 9200			# es绑定到端口
http.cors.enabled: true
http.cors.allow-origin: "*"


# 关闭并禁用防火墙
service firewalld stop
systemctl disable firewalld

# 切换用户并启动
su elastic
cd /usr/local/elasticsearch-8.11.1/bin
./elasticsearch -d

# 重置账户密码
/usr/local/elasticsearch-8.11.1/bin/elasticsearch-reset-password --username elastic -i

warning: ignoring JAVA_HOME=/usr/local/jdk1.8.0_201; using bundled JDK
This tool will reset the password of the [elastic] user.
You will be prompted to enter the password.
Please confirm that you would like to continue [y/N]y

Enter password for [elastic]:
Re-enter password for [elastic]:
Password for the [elastic] user successfully reset.

https://192.168.18.128:9200/

elastic/elastic

---

Kibana

https://www.elastic.co/cn/downloads/kibana

cd /usr/local/src
wget https://artifacts.elastic.co/downloads/kibana/kibana-8.11.1-linux-x86_64.tar.gz
tar -xzvf kibana-8.11.1-linux-x86_64.tar.gz -C /usr/local/ 

# 添加新用户
groupadd kibana
useradd kibana -g kibana -p kibana
# 设置文件权限
cd /usr/local/
chown -R kibana:kibana kibana-8.11.1

vim /usr/local/kibana-8.11.1/config/kibana.yml
server.port: 5601
server.host: "192.168.18.128"
i18n.locale: "zh-CN"

/usr/local/elasticsearch-8.11.1/bin/elasticsearch-create-enrollment-token --scope kibana
warning: ignoring JAVA_HOME=/usr/local/jdk1.8.0_201; using bundled JDK
eyJ2ZXIiOiI4LjExLjEiLCJhZHIiOlsiMTkyLjE2OC4xOC4xMjg6OTIwMCJdLCJmZ3IiOiI1YTU1NTRiOGMxY2FjMzBkOGFiNWQzODhlNWFiMTE2MDgzYzVlMTRkMWE1NTI4Mzc4MmRkMTIyMTkwNDFlYjIyIiwia2V5Ijoicnc0UFBZd0JyTVdzN3NiNkJLWWs6M0xsQnBUS21SUGlVeUFkX0s0MUJodyJ9


# 切换用户并启动
su kibana
cd /usr/local/kibana-8.11.1
nohup bin/kibana > ./logs/start-init.log 2>&1  &

---

Kibana导入CSV到Elastic

---

参考链接

https://blog.csdn.net/fu_huo_1993/article/details/127596404

---

Elasticsearch安装常见插件

# 远程安装
./elasticsearch-plugin install https://github.com/medcl/elasticsearch-analysis-ik/releases/download/v8.11.1/elasticsearch-analysis-ik-8.11.1.zip

# 离线安装
./elasticsearch-plugin install file:///usr/local/src/elasticsearch-analysis-ik-8.11.1.zip