ES6.5.4中使用X-Pack

淩亂°似流年 2022-03-06 08:16 385阅读 0赞

1.  **介绍**
2.  X-Pack是一个弹性堆栈扩展，提供安全性、警报、监视、报告、机器学习和许多其他功能。默认情况下，当您安装Elasticsearch时，将安装X-Pack。
3.  如果你想尝试所有的X-Pack功能，你可以开始30天的试用。在试用期结束时，您可以购买订阅，以继续使用X-Pack组件的全部功能。有关更多信息，请参见[https://www.elastic.co/subscriptions][https_www.elastic.co_subscriptions]。
4.  从6.3版本开始，项目里自带了X-Pack，不废话开始
5.  [http://www.lupaworld.com/article-266921-1.html][http_www.lupaworld.com_article-266921-1.html]
6.  ![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM5NjY5MDU4_size_16_color_FFFFFF_t_70][]
7.  启用trial license（30天试用）
8.  之前查看es日志
9.  ![201903191021163.png][]
10.     curl -H "Content-Type:application/json" -XPOST  http://192.168.184.136:9200/_xpack/license/start_trial?acknowledge=true
    
     
11. 之后查看es日志，可以看到elasticsearch控制台显示license 已变为trial
12. ![20190319102145731.png][]
13. 在ES的bin目录下执行
14.     ./elasticsearch-setup-passwords interactive
    
     
15. [elasticsearch-setup-passwords][]命令用法
16. 此命令仅用于Elasticsearch安全特性的初始配置期间。它使用弹性引导密码运行用户管理API请求。为elastic用户设置密码后，引导程序密码将不再活动，您不能在次使用此命令
17. 第一次执行./elasticsearch-setup-passwords interactive报错
18. ![2019031817030943.png][]
19. 在elasticsearch.yml配置
20.     xpack.security.enabled: true  #默认为false
    
     
21. 再次执行：
22.     ./elasticsearch-setup-passwords interactive
23. 启动预留用户elastic、apm\_system、kibana、logstash\_system、beats\_system、remote\_monitoring\_user的密码设置，在此过程中，系统会提示您输入密码。
24. ![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM5NjY5MDU4_size_16_color_FFFFFF_t_70 1][]
25. 密码都为123456
26. 如果执行过一次就不能再执行了，你可以从Kibana中的管理>用户UI或使用安全用户API更新密码。
27. ![20190318170438678.png][]
28. 设置角色和用户来控制对Elasticsearch的访问。例如，要授予John Doe对所有匹配pattern events\*的索引的完全访问权，并使他能够在Kibana中为这些索引创建可视化和仪表板，您可以创建events\_admin角色并将该角色分配给一个新的johndoe用户。
29.     curl -XPOST -u elastic 'localhost:9200/_xpack/security/role/events_admin' -H "Content-Type: application/json" -d '{
        "indices" : [
        {
        "names" : [ "events*" ],
        "privileges" : [ "all" ]
        },
        {
        "names" : [ ".kibana*" ],
        "privileges" : [ "manage", "read", "index" ]
        }
        ]
        }'
        
        curl -XPOST -u elastic 'localhost:9200/_xpack/security/user/johndoe' -H "Content-Type: application/json" -d '{
        "password" : "userpassword",
        "full_name" : "John Doe",
        "email" : "john.doe@anony.mous",
        "roles" : [ "events_admin" ]
        }'
30. 详情查看：[X-Pack APIs][]，用kibana去操作就行了
31. [Command line tools][]语法：
32.     bin/elasticsearch-users
        ([useradd <username>] [-p <password>] [-r <roles>]) |
        ([list] <username>) |
        ([passwd <username>] [-p <password>]) |
        ([roles <username>] [-a <roles>] [-r <roles>]) |
        ([userdel <username>])
33. **添加用户**
34.     bin/elasticsearch-users useradd jacknich -p theshining -r network,monitoring
35. ![20190319130345188.png][]
36. 提示这里面没有这些roles，官方文档给的例子，没有就找个有的换上就行了。。。
37. **用户列表**
38.     bin/elasticsearch-users list
39. **修改密码方式**
40. 方式一、不用这种了。。。用kibana的Restful就可以搞定，更便捷。。。
41.     # 例如修改 elastic 的密码
        curl -u elastic -H "Content-Type:application/json" -XPOST 'http://192.168.184.136:9200/_xpack/security/user/elastic/_password' -d'
        {
          "password" : "new_password"
        }'
42. 方式二、官网的例子名字写错了。。。。。。。。
43.     bin/elasticsearch-users passwd jacknich
    
     
44. ![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM5NjY5MDU4_size_16_color_FFFFFF_t_70 2][]
45. 方式二、
46. 浏览器访问 `192.168.184.136:5601` 在 `kibana` 设置里进行用户管理，有一点我在命令行里添加的用户，在kibana显示不出来！！！！！！！
47.  
48. ![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM5NjY5MDU4_size_16_color_FFFFFF_t_70 3][]
49. **下面的示例从jacknich用户中删除网络和监视角色，并添加用户角色**
50.     bin/elasticsearch-users roles jacknich -r network,monitoring -a user
    
     
51. **删除用户**
52.     bin/elasticsearch-users userdel jacknich
53. 要想head插件访问需要带上用户名和密码
54. 并且在elasticsearch.yml配置
55.     http.cors.allow-headers: Authorization,X-Requested-With,Content-Length,Content-Type
    
     
56. [http://192.168.184.136:9100/?auth\_user=elastic&auth\_password=][http_192.168.184.136_9100_auth_user_elastic_auth_password]123456
57. **在kibana中配置**
58. 修改kibana.yml配置文件
59.     # If your Elasticsearch is protected with basic authentication, these settings provide
        # the username and password that the Kibana server uses to perform maintenance on the Kibana
        # index at startup. Your Kibana users still need to authenticate with Elasticsearch, which
        # is proxied through the Kibana server.
        elasticsearch.username: "kibana"
        elasticsearch.password: "123456"
    
     
60. 输入[http://192.168.184.136:5601][http_192.168.184.136_5601]显示
61. ![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM5NjY5MDU4_size_16_color_FFFFFF_t_70 4][]
62. 输入账号密码就行了

参考：

[官网：][Link 1][Configuring security in Elasticsearch][]

[elasticsearch6.3.1 启用x-pack][elasticsearch6.3.1 _x-pack]

[x-pack 安装与使用][x-pack]

[Elasticsearch6.2.2 X-Pack部署及使用详解][Elasticsearch6.2.2 X-Pack]

[https_www.elastic.co_subscriptions]: https://www.elastic.co/subscriptions
[http_www.lupaworld.com_article-266921-1.html]: http://www.lupaworld.com/article-266921-1.html
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM5NjY5MDU4_size_16_color_FFFFFF_t_70]: /images/20220306/0510f31901bc463a8e79db1d697903ae.png
[201903191021163.png]: /images/20220306/85ec8410b8ba453e818b5bed927a0cde.png
[20190319102145731.png]: /images/20220306/cc1a10a09c18427587232c3253710476.png
[elasticsearch-setup-passwords]: https://www.elastic.co/guide/en/elasticsearch/reference/6.5/setup-passwords.html
[2019031817030943.png]: /images/20220306/311a8221062c458f9d4ab104de3a6564.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM5NjY5MDU4_size_16_color_FFFFFF_t_70 1]: /images/20220306/d348080894034446bba0a2d67a6eb664.png
[20190318170438678.png]: /images/20220306/918b3a38c8ef4b47b806cdc39a3bed6f.png
[X-Pack APIs]: https://www.elastic.co/guide/en/elasticsearch/reference/6.5/xpack-api.html
[Command line tools]: https://www.elastic.co/guide/en/elasticsearch/reference/6.5/commands.html
[20190319130345188.png]: /images/20220306/a7f4399a495344e0ac924fb964c51619.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM5NjY5MDU4_size_16_color_FFFFFF_t_70 2]: /images/20220306/39ebc70652d84e0094e270a2639365d7.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM5NjY5MDU4_size_16_color_FFFFFF_t_70 3]: /images/20220306/a8792fc2966843599ab3f7ee8f336f35.png
[http_192.168.184.136_9100_auth_user_elastic_auth_password]: http://192.168.36.61:9100//?auth_user=elastic&auth_password=passwd
[http_192.168.184.136_5601]: http://192.168.184.136:5601
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM5NjY5MDU4_size_16_color_FFFFFF_t_70 4]: /images/20220306/52cf2917312644ec942159fd44994ad0.png
[Link 1]: https://www.elastic.co/guide/en/x-pack/6.2/index.html
[Configuring security in Elasticsearch]: https://www.elastic.co/guide/en/elasticsearch/reference/6.5/configuring-security.html
[elasticsearch6.3.1 _x-pack]: https://blog.csdn.net/zou79189747/article/details/81164576
[x-pack]: https://blog.csdn.net/gekkoou/article/details/81359503
[Elasticsearch6.2.2 X-Pack]: https://blog.csdn.net/laoyang360/article/details/79632579