Shulou(Shulou.com)06/02 Report--

1. Generate a certificate

Bin/elasticsearch-certutil cabin/elasticsearch-certutil cert-ca elastic-stack-ca.p12mv bin/elastic-certificates.p12 config/mv bin/elastic-stack-ca.p12 config/

2. Edit elasticsearch.yml

Turn on xpack

Xpack.security.enabled: true

3. Enable https transport in the cluster

Xpack.security.transport.ssl.enabled: truexpack.security.transport.ssl.verification_mode: certificatexpack.security.transport.ssl.keystore.path: elastic-certificates.p12xpack.security.transport.ssl.truststore.path: elastic-certificates.p12

4. Enable api interface https transmission

Xpack.security.http.ssl.enabled: truexpack.security.http.ssl.keystore.path: elastic-certificates.p12xpack.security.http.ssl.truststore.path: elastic-certificates.p12xpack.security.http.ssl.client_authentication: nonexpack.ssl.verification_mode: none

5. Automatically generate passwords

Bin/elasticsearch-setup-passwords auto

6. Configure kibana.yml

Change http to https because elastic https transmission is enabled

Elasticsearch.hosts: ["https://localhost:9200"]

Configure the kibana username and password you just generated, otherwise you will report an error when you start kibana

Elasticsearch.username: "kibana" elasticsearch.password: "puVIrhabjDNOMFCybZZj"

Ssl certificate is certified as none

Elasticsearch.ssl.verificationMode: none

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.