elk

elastic：https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-5.6.16.tar.gz
kibana：https://artifacts.elastic.co/downloads/kibana/kibana-5.6.16-linux-x86_64.tar.gz
filebeat：https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-5.6.16-linux-x86_64.tar.gz

vim /etc/security/limits.conf：

* soft nofile 65536
* hard nofile 65536

vim /etc/sysctl.conf：
vm.max_map_count=262144

xpack插件：
wget https://artifacts.elastic.co/downloads/packs/x-pack/x-pack-5.6.16.zip

手动安装：https://www.elastic.co/guide/en/elasticsearch/reference/6.2/installing-xpack-es.html

破解：
使用luyten反编译LicenseVerifier.class类
修改成：
package org.elasticsearch.license;

import java.nio.;
import java.util.;
import java.security.;
import org.elasticsearch.common.xcontent.;
import org.apache.lucene.util.;
import org.elasticsearch.common.io.;
import java.io.*;

public class LicenseVerifier
{
public static boolean verifyLicense(final License license, final byte[] encryptedPublicKeyData) {
return true;
}
public static boolean verifyLicense(final License license) {
return true;
}
}

重新编译：
javac -cp “/opt/elk/elasticsearch-5.6.16/lib/elasticsearch-5.6.16.jar:/opt/elk/elasticsearch-5.6.16/lib/lucene-core-6.6.1.jar:/opt/elk/elasticsearch-5.6.16/plugins/x-pack/x-pack-5.6.16.jar” LicenseVerifier.java

替换LicenseVerifier.class

证书：
curl -XGET -u elastic:123456 ‘http://ip:9200/_license’
curl -XPUT -u elastic:123456 ‘http://ip:9200/_license’ -d @license.json

此处参考：
https://www.cnblogs.com/benwu/articles/6648471.html

在elastic上安装xpack：
./elasticsearch-5.6.16/bin/elasticsearch-plugin install file:///opt/elk/x-pack-5.6.16.zip

在kibana上安装xpack：
./kibana-5.6.16-linux-x86_64/bin/kibana-plugin install file:///opt/elk/x-pack-5.6.16.zip

ik插件：
git clone https://github.com/medcl/elasticsearch-analysis-ik
cd elasticsearch-analysis-ik/
git checkout v5.6.16