elasticsearch 安装search guard

search guard用语elk的角色划分

./plugin install -b com.floragunn/search-guard-ssl/2.3.3.11

./plugin install -b com.floragunn/search-guard-2/2.3.5.5

下载源代码 使用工具包

git clone https://github.com/floragunncom/search-guard-ssl.git

cd search-guard-ssl/example-pki-scripts

./example.sh

vim elasticsearch.yaml

cp node-1-keystore.jks /etc/elasticsearch/

cp truststore.jks /etc/elasticsearch/

cat elasticsearch.yaml 

security.manager.enabled: false

searchguard.authcz.admin_dn:

  - "CN=kirk,OU=client,O=client,l=tEst, C=De"

searchguard.audit.type: internal_elasticsearch

searchguard.ssl.transport.enabled: true

searchguard.ssl.transport.keystore_type: JKS

searchguard.ssl.transport.keystore_filepath: node-1-keystore.jks

searchguard.ssl.transport.truststore_type: JKS

searchguard.ssl.transport.truststore_filepath: truststore.jks

searchguard.ssl.transport.truststore_password: changeit

searchguard.ssl.transport.enforce_hostname_verification: true

searchguard.ssl.transport.resolve_hostname: true

searchguard.ssl.transport.enable_openssl_if_available: false

service ealsticsearch restart

./tools/sgadmin.sh  -h 127.0.0.1 -cd  sgconfig -ks  sgconfig/kirk-keystore.jks -kspass changeit  -ts sgconfig/truststore.jks 

具体信息修改example.sh