安装 ELK(ElasticSearch, Logstash, Kibana)

Ubuntu 安装 ElasticSearch

安装

wget https://jansora.oss-cn-shanghai.aliyuncs.com/lib/elasticsearch/deb/elasticsearch-7.10.1-amd64.deb
wget https://jansora.oss-cn-shanghai.aliyuncs.com/lib/elasticsearch/deb/elasticsearch-7.10.1-amd64.deb.sha512
shasum -a 512 -c elasticsearch-7.10.1-amd64.deb.sha512 
sudo dpkg -i elasticsearch-7.10.1-amd64.deb

配置权限

新增 /etc/elasticsearch/elasticsearch.yml

http.cors.enabled: true
http.cors.allow-origin: "*"
http.cors.allow-headers: Authorization
xpack.security.enabled: true
xpack.security.transport.ssl.enabled: true

重启使配置生效

systemctl restart elasticsearch

修改密码 ( elastic,apm_system,kibana,kibana_system,logstash_system,beats_system,remote_monitoring_user)

/usr/share/elasticsearch/bin/elasticsearch-setup-passwords interactive
root@jansora-Vostro-3669:/usr/share/elasticsearch/bin# /usr/share/elasticsearch/bin/elasticsearch-setup-passwords interactive
Initiating the setup of passwords for reserved users elastic,apm_system,kibana,kibana_system,logstash_system,beats_system,remote_monitoring_user.
You will be prompted to enter passwords as the process progresses.
Please confirm that you would like to continue [y/N]y


Enter password for [elastic]: 
Reenter password for [elastic]: 
Enter password for [apm_system]: 
Reenter password for [apm_system]: 
Enter password for [kibana_system]: 
Reenter password for [kibana_system]: 
Enter password for [logstash_system]: 
Reenter password for [logstash_system]: 
Enter password for [beats_system]: 
Reenter password for [beats_system]: 
Enter password for [remote_monitoring_user]: 
Reenter password for [remote_monitoring_user]: 
Changed password for user [apm_system]
Changed password for user [kibana_system]
Changed password for user [kibana]
Changed password for user [logstash_system]
Changed password for user [beats_system]
Changed password for user [remote_monitoring_user]
Changed password for user [elastic]

MAC 安装 ElasticSearch

➜  .m2 brew install elastic/tap/elasticsearch-full                                               
==> Tapping elastic/tap
Cloning into '/usr/local/Homebrew/Library/Taps/elastic/homebrew-tap'...
remote: Enumerating objects: 954, done.
remote: Counting objects: 100% (195/195), done.
remote: Compressing objects: 100% (133/133), done.
remote: Total 954 (delta 134), reused 98 (delta 61), pack-reused 759
Receiving objects: 100% (954/954), 226.37 KiB | 424.00 KiB/s, done.
Resolving deltas: 100% (720/720), done.
Tapped 17 formulae (36 files, 325.8KB).
==> Installing elasticsearch-full from elastic/tap
==> Downloading https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-7.13.2-darwin-x86_64.tar.gz?tap=elastic/homebrew-tap
######################################################################## 100.0%
Warning: Tried to install empty array to /usr/local/etc/elasticsearch/jvm.options.d
==> codesign -f -s - /usr/local/Cellar/elasticsearch-full/7.13.2/libexec/modules/x-pack-ml/platform/darwin-x86_64/controller.app --deep
==> find /usr/local/Cellar/elasticsearch-full/7.13.2/libexec/jdk.app/Contents/Home/bin -type f -exec codesign -f -s - {} ;
==> Caveats
Data:    /usr/local/var/lib/elasticsearch/elasticsearch_jansora/
Logs:    /usr/local/var/log/elasticsearch/elasticsearch_jansora.log
Plugins: /usr/local/var/elasticsearch/plugins/
Config:  /usr/local/etc/elasticsearch/

To have launchd start elastic/tap/elasticsearch-full now and restart at login:
  brew services start elastic/tap/elasticsearch-full
Or, if you don't want/need a background service you can just run:
  elasticsearch
==> Summary
🍺  /usr/local/Cellar/elasticsearch-full/7.13.2: 957 files, 504.8MB, built in 56 seconds

评论栏