elasticsearch2.3.5安装search-guard2.3.5.15时elasticsearch.yml的配置

# ------------------------------------ Node ------------------------------------
#
# Use a descriptive name for the node:
#
 node.name: node-0
#
# Add custom attributes to the node:
#
 node.rack: r1
#
# ----------------------------------- Paths ------------------------------------
#
# Path to directory where to store the data (separate multiple locations by comma):
#
 path.data: /work/elasticsearch-data
#
# Path to log files:
#
 path.logs: /work/elasticsearch-logs
#
# ----------------------------------- Memory -----------------------------------
#
# Lock the memory on startup:
#
 bootstrap.mlockall: true
#
# Make sure that the `ES_HEAP_SIZE` environment variable is set to about half the memory
# available on the system and that the owner of the process is allowed to use this limit.
#
# Elasticsearch performs poorly when the system is swapping the memory.
#
# ---------------------------------- Network -----------------------------------
#
# Set the bind address to a specific IP (IPv4 or IPv6):
#
 network.host: 0.0.0.0
 shield.audit.enabled: true
#
# Set a custom port for HTTP:
#
# http.port: 9200
#
# For more information, see the documentation at:
# <http://www.elastic.co/guide/en/elasticsearch/reference/current/modules-network.html>
#
# --------------------------------- Discovery ----------------------------------
#
# Pass an initial list of hosts to perform discovery when new node is started:
# The default list of hosts is ["127.0.0.1", "[::1]"]
#
 discovery.zen.ping.unicast.hosts: ["127.0.0.1"]
#
# Prevent the "split brain" by configuring the majority of nodes (total number of nodes / 2 + 1):
#
 discovery.zen.minimum_master_nodes: 1
#
# For more information, see the documentation at:
# <http://www.elastic.co/guide/en/elasticsearch/reference/current/modules-discovery.html>
#
# ---------------------------------- Gateway -----------------------------------
#
# Block initial recovery after a full cluster restart until N nodes are started:
#
# gateway.recover_after_nodes: 3
#
# For more information, see the documentation at:
# <http://www.elastic.co/guide/en/elasticsearch/reference/current/modules-gateway.html>
#
# ---------------------------------- Various -----------------------------------
#
# Disable starting multiple nodes on a single system:
#
# node.max_local_storage_nodes: 1
#
# Require explicit names when deleting indices:
#
# action.destructive_requires_name: true　注意下面每行开头必须有一个空格
 searchguard.enable: true
 searchguard.authcz.admin_dn:
  - cn=admin,ou=wbb,ou=wbb,dc=wbb,dc=com
 security.manager.enabled: false
 searchguard.ssl.transport.enabled: true
 searchguard.ssl.transport.keystore_filepath: node-0-keystore.jks
# searchguard.ssl.transport.keystore_alias: my_alias
 searchguard.ssl.transport.keystore_password: changeit
 searchguard.ssl.transport.truststore_filepath: truststore.jks
# searchguard.ssl.transport.truststore_alias: my_alias
 searchguard.ssl.transport.truststore_password: changeit
 searchguard.ssl.transport.enforce_hostname_verification: false