Elasticsearch安装

2020-01-09 2024-05-08 约 750 字预计阅读 2 分钟次阅读条评论

摘要

1 安装Elasticsearch

1.1 下载

bash

wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-7.5.1-linux-x86_64.tar.gz

1.2 解压

bash

tar zxf elasticsearch-7.5.1-linux-x86_64.tar.gz
mv elasticsearch-7.5.1 /usr/local/elastic

1.3 修改配置文件

bash

vi config/elasticsearch.yml

text

cluster.name: myes # 集群名称
node.name: node-1 # 设置node名称
path.data: /data/elasticsearch/data # 数据目录位置
path.logs: /data/elasticsearch/logs # 日志目录位置
network.host: 0.0.0.0 # 设置访问地址
http.port: 9200 # 设置访问端口
cluster.initial_master_nodes: ["node-1"]
http.cors.allow-origin: "*" # 跨域问题
http.cors.enabled: true
xpack.security.enabled: true
xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.verification_mode: certificate
xpack.security.transport.ssl.keystore.path: certs/elastic-certificates.p12
xpack.security.transport.ssl.truststore.path: certs/elastic-certificates.p12

bash

vi /etc/sysctl.conf
vm.max_map_count=262144
sysctl -p

1.4 创建数据目录

bash

mkdir -p /data/elasticsearch/{data,logs}
chown -R elastic.elastic /data/elasticsearch

1.5 创建用户

bash

groupadd elastic
useradd -g elastic -s /sbin/nologin -c "Elastic Server" elastic

1.6 创建elastic服务

bash

cat > /usr/lib/systemd/system/elastic.service <<EOF
[Unit]
Description=elasticsearch server
[Service]
Type=simple
User=elastic
Group=elastic
LimitNOFILE=100000
LimitNPROC=100000
ExecStart=/usr/local/elastic/bin/elasticsearch
[Install]
WantedBy=multi-user.target
EOF

1.7 启动

bash

systemctl enable elastic.service
systemctl start elastic.service

1.8 测试

curl 'http://localhost:9200/?pretty'

出现如下结果表示启动成功

https://img.bwcxtech.com/img/20200928154355.png

1.9 开启xpack

1.9.1 生成证书

bash

./bin/elasticsearch-certutil ca
./bin/elasticsearch-certutil cert --ca elastic-stack-ca.p12

添加刚才输入的密码到elasticsearch.keystore，会在config文件夹下生成elasticseaerch.keystore文件

bash

./bin/elasticsearch-keystore add xpack.security.transport.ssl.keystore.secure_password
./bin/elasticsearch-keystore add xpack.security.transport.ssl.truststore.secure_password

mkdir config/certs
mv elastic-stack-ca.p12 config/certs
mv elastic-certificates.p12 config/certs

1.9.2 设置用户密码

bash

./bin/elasticsearch-setup-passwords interactive

https://img.bwcxtech.com/img/20200928154400.png

1.10 容器启动

bash

docker run -d \
-p 9200:9200 \
-p 9300:9300 \
-e discovery.type=single-node \
-e bootstrap.memory_lock=true \
-e ES_JAVA_OPTS=-Xms512m -Xmx512m \
-v data01:/usr/share/elasticsearch/data \
elasticsearch:7.2.0

启用安全

bash

docker run -d \
-p 9200:9200 \
-p 9300:9300 \
-e discovery.type=single-node \
-e bootstrap.memory_lock=true \
-e ES_JAVA_OPTS=-Xms512m -Xmx512m \
-e xpack.security.enabled=true \ #开启xpack安全
-v data01:/usr/share/elasticsearch/data \
elasticsearch:7.2.0

启用安全需要设置密码

修改密码

bash

./bin/elasticsearch-setup-passwords interactive

elastic，apm_system，kibana，logstash_system，beats_system，remote_monitoring_user 等密码一起修改的

2 安装kibana

2.1 下载

bash

wget https://artifacts.elastic.co/downloads/kibana/kibana-7.5.1-linux-x86_64.tar.gz

2.2 解压

bash

tar zxf kibana-7.5.1-linux-x86_64.tar.gz
mv kibana-7.5.1-linux-x86_64 /usr/local/kibana

修改配置

yaml

## 监听端口，可以不修改
server.port: 5601
## 修改绑定ip，使外部可以通过http访问
server.host: "0.0.0.0"
logging.dest: "/usr/local/kibana/kibana.log"
## 修改elasticsearch服务的地址
elasticsearch.hosts: ["http://localhost:9200"]
## 修改es账号密码
elasticsearch.username: "elastic"
elasticsearch.password: "elastic"
## 修改页面语言为中文
i18n.locale: "zh-CN"

2.3 创建用户

bash

groupadd kibana
useradd -g kibana -s /sbin/nologin -c "Kibana Server" kibana
chown -R kibana.kibana kibana

2.4 创建kibana服务

bash

cat > /usr/lib/systemd/system/kibana.service <<EOF
[Unit]
Description=kibana server
[Service]
Type=simple
User=kibana
Group=kibana
ExecStart=/usr/local/kibana/bin/kibana
[Install]
WantedBy=multi-user.target
EOF

2.5 启动

bash

systemctl enable kibana.service
systemctl start kibana.service

配置nginx代理

bash

vi nginx.conf

bash

location /kibana/ {
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection 'upgrade';
    proxy_set_header Host $host;
    proxy_cache_bypass $http_upgrade;
    proxy_pass  https://localhost:5601/;
    rewrite ^/kibana/(.*)$ /$1 break;
}

bash

vi kibana.yml

text

server:
  basePath: "/kibana"

2.6 容器启动

bash

docker run -d \
-p 5601:5601 \
-e ELASTICSEARCH_HOSTS=http://elastic:9200 \
-e ELASTICSEARCH_USERNAME=elastic \
-e ELASTICSEARCH_PASSWORD=elastic \
-e I18N_LOCALE=zh-CN \
kibana:7.2.0

赞赏支持

微信打赏

支付宝打赏