Elasticsearch集群部署

集群节点：

一、下载安装包
wget -P /download https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-7.17.0-linux-x86_64.tar.gz

二、在所有ES所在服务器创建数据目录

mkdir -p /data/elasticsearch/{data,logs}

三、创建ES独立用户并授权软件包及数据目录

useradd es

chown -R es.es /data/elasticsearch/*

chown -R es.es /opt/elasticsearch*

四、修改配置文件
vim elasticsearch.yml

cluster.name: es-cluster-iam
node.name: master_data_01
node.master: true
node.data: true
node.ingest: false
path.data: /data/elasticsearch/data
path.logs: /data/elasticsearch/logs
bootstrap.memory_lock: true
network.host: 0.0.0.0
http.port: 9200
discovery.seed_hosts: ["1×2.x1.37.83","1×2.x1.38.155","1×2.x1.38.119"]
cluster.initial_master_nodes: ["master_data_01","master_data_02","master_data_03"]
xpack.security.enabled: true
xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.verification_mode: certificate
xpack.security.transport.ssl.client_authentication: required
xpack.security.transport.ssl.keystore.path: elastic-certificates.p12
xpack.security.transport.ssl.truststore.path: elastic-certificates.p12
xpack.security.audit.enabled: true
xpack.security.http.ssl.enabled: true
xpack.security.http.ssl.keystore.path: elastic-certificates.p12
xpack.security.http.ssl.truststore.path: elastic-certificates.p12
indices.breaker.fielddata.limit: 40%
indices.breaker.request.limit: 40%
indices.breaker.total.limit: 90%

五、修改jvm文件

#需要根据服务器实际资源情况进行配置

六、生成密钥文件

./elasticsearch-certutil ca
./elasticsearch-certutil cert –ca elastic-stack-ca.p12

#并将生成的密钥文件拷贝到config下

cp elastic-certificates.p12 config/
cp elastic-stack-ca.p12 config/

七、将标准化好的ES包拷贝到各个ES服务器

八、切换到ES用户，在各个节点启动ES

./elasticsearch -d

配置密码：

./elasticsearch-setup-passwords interactive

需要注意:ES 配置密码需要以http模式启动修改，否则不允许修改，修改完成后，再以HTTPS的模式启动ES;

https模式启动，需要在启动文件中增加如下参数:

xpack.security.enabled: true
xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.verification_mode: certificate
xpack.security.transport.ssl.client_authentication: required
xpack.security.transport.ssl.keystore.path: elastic-certificates.p12
xpack.security.transport.ssl.truststore.path: elastic-certificates.p12
xpack.security.audit.enabled: true
xpack.security.http.ssl.enabled: true
xpack.security.http.ssl.keystore.path: elastic-certificates.p12
xpack.security.http.ssl.truststore.path: elastic-certificates.p12

http 默认启动则不需要这些参数。

查看进程

查看集群节点