ELK(5):kibana安装、使用和代理访问
1 安装
# sudo rpm -ivh kibana-7.2.0-x86_64.rpm
# sudo rpm -ivh kibana-7.2.0-x86_64.rpm 警告:kibana-7.2.0-x86_64.rpm: 头V4 RSA/SHA512 Signature, 密钥 ID d88e42b4: NOKEY 准备中... ################################# [100%] 正在升级/安装... 1:kibana-7.2.0-1 ################################# [100%] [admin@pe-jira elk]$
2 配置文件
server.port: 5601 server.host: "10.6.76.27" elasticsearch.hosts: ["http://10.6.76.27:9200"] #暂时先这样子,再改成127.0.0.1 i18n.locale: zh-CN #直接调用中文,再不用汉化,666
3 启动
sudo systemctl start kibana
4 最简单的摸索一下
4.1 添加系统日志
5 Nginx代理访问kibana 并设置身份验证
Nginx安装我就不写了
把kibana的地址改成127.0.0.1
5.1 代理访问
[admin@pe-jira conf]$ cat kibana.conf upstream kibana_app { server 127.0.0.1:5601 weight=1 max_fails=2 fail_timeout=30s; } server { listen 80; server_name kibana.corp.XXX.com; location / { # proxy_redirect http:// $scheme://; #proxy_set_header X-Forwarded-Ssl on; proxy_pass http://kibana_app; proxy_next_upstream http_502 http_504 error timeout invalid_header; proxy_set_header Host $host; proxy_set_header X-Forwarded-For $remote_addr; access_log logs/kibana.log main; log_by_lua_file /home/admin/webserver/nginx/conf/conf.d/record.lua; } }
5.2 登陆认证
需要http-tools
yum install -y httpd-tools
创建用户名密码
htpasswd -bc /home/admin/webserver/conf/htpasswd.users admin admin
#[admin@pe-jira conf]$ cat /home/admin/webserver/conf/htpasswd.users
#admin:$apr1$ml2bzvSu$UGIMC5.ZUlM9/H.VqOuCF/
nginx添加配置认证文件
#[admin@pe-jira conf]$ cat kibana.conf upstream kibana_app { server 127.0.0.1:5601 weight=1 max_fails=2 fail_timeout=30s; } server { listen 80; server_name kibana.corp.XXXi.com; auth_basic "Restricted Access"; auth_basic_user_file /home/admin/webserver/conf/htpasswd.users; location / { #proxy_set_header X-Forwarded-Ssl on; proxy_pass http://kibana_app; proxy_next_upstream http_502 http_504 error timeout invalid_header; proxy_set_header Host $host; proxy_set_header X-Forwarded-For $remote_addr; access_log logs/kibana.log main; log_by_lua_file /home/admin/webserver/nginx/conf/conf.d/record.lua; } }