elk7.x開啓安全配置

1.使用如下命令生成證書

./bin/elasticsearch-certutil cert -out config/elastic-certificates.p12 -pass ""

2.在elasticsearch.yml文件中添加以下幾條

xpack.security.enabled: true #開啓安全策略

xpack.security.transport.ssl.enabled: true #開啓ssl策略，安全策略爲true，這一條就必須爲true不然會報錯

xpack.security.transport.ssl.verification_mode: certificate

xpack.security.transport.ssl.keystore.path: elastic-certificates.p12

xpack.security.transport.ssl.truststore.path: elastic-certificates.p12

啓動elasticsearch查看有無報錯 注：如沒有使用證書則會出現java的錯誤

3.使用如下命令生成密碼

./bin/elasticsearch-setup-passwords auto

4.在kibana中設置登陸密碼

elasticsearch.username: "kibana"

elasticsearch.password: "生成密碼"

注！！！在kibana登陸界面中輸入的是elastic的用戶名密碼