Network Security Internet Technology Development Database Servers Mobile Phone Android Software Apple Software Computer Software News IT Information

In addition to Weibo, there is also WeChat

Please pay attention

WeChat public account

Shulou

Elasticsearch6.5.0 installation and kibana,cerebro,head,beat

2025-01-18 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > Internet Technology >

Share

Shulou(Shulou.com)06/03 Report--

First, install java environment, java8 version or above. echo $JAVA_HOME/home/admin/java/jdk1.8.0_131es installation can not be started using root user, so to create a new user, give the user installation directory permissions and then go to the official website to download the latest version of es, I use here is es6.2.3 and es6.5.0, of which 6.5.0 is the latest stable version. After unzipping the installation, enter the configuration file directory and modify the configuration file. cd elasticsearch-6.5.0/config/vi jvm.options! [](http://doc.ailinux.net/uploads/es/images/m_983b9e9eb763a549d15765213dbb9e6_r.png) Modify the memory to be less than the memory of your server. For example, if the memory of your server is 8 G, then you can configure it as-Xms 3g. Next, we can formally modify the configuration of es vi elasticsearch.yml. Here, first configure the cluster name, node name, and data directory storage path (You need to create a new es data folder and log folder, and then specify them in the configuration file. The index data of es is stored in the data folder. If you want to migrate data, you can directly copy the indexes folder in the data folder between minor versions to complete the migration) cluster.name: www.example.com: 6node.master: www.example.com: www.example.com:/home/admin/dddd/es_data/datapath. logs:/home/admin/dddd/es_data/logs

Set to true to lock memory

bootstrap.memory_lock: true Set up any address to connect to network.host: www.example.com http access port http.port: 9200 tcp access port transport. tcp. port: 9300http.cors.enabled: truehttp. cor. allow-credentials: truehttp. cor. allow-methods: OPTIONS, HEAD, GET, POST, PUT, DELETEhttp. cor. allow-origin:"*" http. cor. allow-headers: X-Requested-With, X-Auth-Token, Content-Type, Content-Length, Authorization

cluster configuration

I set the intranet ip192.168.0.6 as the main node, and the es configuration is divided into main node, data node, coordination node and ingest node. For node configuration, please refer to official website: https://www.example.com:["www.example.com"] discovery. zen. minimum_master_nodes: 1gateway.recover_after_nodes: 3path.repo:["/home/admin/dddd/es_data/backup "] www.example.com_timeout: www.example.com_timeout: 300sdiscovery.zen.fd.ping_interval: 300sdiscovery.zen.fd.ping_retrieves: 6

Cluster index cache configuration

indices.memory.index_buffer_size: 30%indices.recovery.max_bytes_per_sec: 30gbindices.breaker.fielddata.limit: 65%indices.breaker.request.limit: 45%indices.breaker.total.limit: 75%http.max_content_length: 100mbtransport.tcp.compress: trueindices.fielddata.cache.size: 50mb

Cluster thread pool configuration

thread_pool.index.queue_size: 1600thread_pool.index.size: 9thread_pool.search.size: 64thread_pool.get.size: 32thread_pool.get.queue_size: 1600thread_pool.bulk.size: 9thread_pool.bulk.queue_size: 1600 In es6.2, you need to install xpach with plug-in command for security authentication, while in es6.5 xpack has become an internal module, so it is good to configure it directly, because xpach can do permission control, so it is recommended to configure it. es6.2 configuration: cd elasticsearch-6.5.0/bin/x-pack./ certgen Then generate ca.zip as the public key, and enter all server commands and intranet ip as the private key to facilitate communication between clusters. es6.5 configuration: cd elasticsearch-6.5.0/bin/./ elasticsearch-certgen The public key and private key of each server are generated in the same way as es6.2. The difference is that es6.5 must register the intranet domain name of each server, and then enter the intranet domain name when asking dns name.(The domain name of the external network is also OK, but the network speed is not as fast as the internal network communication), otherwise the code tcp connection will report an error. After all the keys are generated, copy the ca.zip folder to the config folder of each node, create a new folder x-pack_ssl (named arbitrarily), then move the ca.zip file into it, decompress, and then open the xpack configuration in the es configuration file, as follows: xpack.security.enabled: truexpack.ssl.key: x-pack_ssl/es6/es6.keyxpack.ssl.certificate: x-pack_ssl/es6/es6.crtxpack.ssl.certificate_authorities: x-pack_ssl/ca/ca.crtxpack.security.transport.ssl.enabled: true

Enable sniffing, cluster communication usage

xpack. security. audit. index. client. transport. sniff: true Then you can start es cluster, cd elasticsearch-6.5.0/bin, sh elasticsearch According to the startup error to determine which configuration has not changed, please refer to the link: https://blog.csdn.net/ntc10095/article/details/73650794 Finally, use nginx proxy to access the domain name: { "name" : "6", "cluster_name" : "sxy", "cluster_uuid" : "UV3fkxf2T7WH8r_bjUKrig", "version" : { "number" : "6.5.0", "build_flavor" : "default", "build_type" : "tar", "build_hash" : "816e6f6", "build_date" : "2018-11-09T18:58:36.352602Z", "build_snapshot" : false, "lucene_version" : "7.5.0", "minimum_wire_compatibility_version" : "5.6.0", "minimum_index_compatibility_version":"5.0.0 "}," tagline ":" You Know, for Search "} The entire cluster will be built. The subsequent plug-ins will be updated for es6.5, and the word splitter will be cracked, including head, cerebro, kibana, beat, etc. Here are some reference pictures. Document update time: 2018 - 11 - 22 10:30 Author: Xingyu Contact information: QQ 2445067568

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.

Views: 0

*The comments in the above article only represent the author's personal views and do not represent the views and positions of this website. If you have more insights, please feel free to contribute and share.

Share To

Internet Technology

Wechat

© 2024 shulou.com SLNews company. All rights reserved.

12
Report