20 June 2022. Update: 2022/07/01.
ElasticSearch version: 8.2.3
- Grafana Plugins 簡介 : 分支中簡單介紹各 Plugins 功能
配備 4 Cpus以上 Linux 版本 Ubuntu 20.04
-
sudo apt-get install -y adduser libfontconfig1
-
wget https://dl.grafana.com/oss/release/grafana_9.0.0_amd64.deb
-
sudo dpkg -i grafana_9.0.0_amd64.deb
-
sudo systemctl enable --now grafana-server
-
systemctl status grafana-server.service (確認有無啟動)
-
sudo ufw allow 3000
-
如是用雲端虛擬機,則需另在去防火牆規則中新增 3000/tcp port (eg. GCP 要去虛擬私有雲網路中的防火牆設定)
-
sudo apt update ; sudo apt-get update
-
sudo apt install apt-transport-https openjdk-11-jdk -y
-
java --version (確認有無顯示JAVA版本)
-
sudo nano /etc/environment
在第二行加入JAVA_HOME="/usr/lib/jvm/java-11-openjdk-amd64"
-
source /etc/environment
-
echo $JAVA_HOME (確認設定是否正確)
-
wget -qO - https://artifacts.elastic.co/GPG-KEY-elasticsearch | sudo gpg --dearmor -o /usr/share/keyrings/elasticsearch-keyring.gpg
-
echo "deb [signed-by=/usr/share/keyrings/elasticsearch-keyring.gpg] https://artifacts.elastic.co/packages/8.x/apt stable main" | sudo tee /etc/apt/sources.list.d/elastic-8.x.list
-
sudo apt-get update
-
sudo apt-get install elasticsearch -y
-
sudo systemctl start elasticsearch
-
sudo systemctl status elasticsearch
-
sudo nano /etc/elasticsearch/elasticsearch.yml
取消註解並變更 network.host:0.0.0.0 與 discovery.seed_hosts: [ ] -
sudo systemctl restart elasticsearch
-
sudo /usr/share/elasticsearch/bin/elasticsearch-reset-password -i -u elastic (按 y 後,改 elastic 密碼)
-
curl -k -u elastic:密碼 -XGET "https://localhost:9200" (確認有無成功)
-
在瀏覽器中輸入 https://IP:9200/
-
補充:
如是用雲端虛擬機,則需另在去防火牆規則中新增 9200/tcp port (eg. GCP 要去虛擬私有雲網路中的防火牆設定)
-
wget https://artifacts.elastic.co/downloads/logstash/logstash-8.2.3-amd64.deb
-
sudo dpkg -i logstash-8.2.3-amd64.deb
-
sudo systemctl start logstash
-
sudo systemctl status logstash
-
sudo systemctl stop logstash (先關掉之後再用)
-
wget https://artifacts.elastic.co/downloads/kibana/kibana-8.2.3-amd64.deb
-
sudo dpkg -i kibana-8.2.3-amd64.deb
-
sudo sh /usr/share/elasticsearch/bin/elasticsearch-certutil ca --pem
之後按enter ( sh 不行就換 bash ) -
sudo -s (進入root模式,ctrl+d 可退出)
-
cp /usr/share/elasticsearch/elastic-stack-ca.zip /etc/kibana
-
cd /etc/kibana
-
sudo apt-get install unzip -y
-
unzip elastic-stack-ca.zip
-
cp /etc/elasticsearch/certs/http_ca.crt /etc/kibana/ca
-
chgrp kibana /etc/kibana/ca/*
-
chown kibana /etc/kibana/ca/*
-
/usr/share/elasticsearch/bin/elasticsearch-reset-password -i -u kibana_system (按 y 後,改 kibana 密碼)
-
sudo nano /etc/kibana/kibana.yml (直接將下面程式碼貼在最上層)
server.host: "0.0.0.0"
elasticsearch.username: "kibana_system"
elasticsearch.password: "自己設定的密碼(步驟12)"
server.ssl.enabled: true
server.ssl.certificate: /etc/kibana/ca/ca.crt
server.ssl.key: /etc/kibana/ca/ca.key
elasticsearch.hosts: ["https://自己ip:9200"] (如果 gcp ip 有變動則要再去更改此 ip)
elasticsearch.ssl.certificateAuthorities: [ "/etc/kibana/ca/http_ca.crt" ]
elasticsearch.ssl.verificationMode: none
-
sudo systemctl start kibana
-
sudo systemctl restart kibana (有時無法開啟要重啟 kibana)
-
在瀏覽器中輸入 https://自己ip:5601
-
補充:
如是用雲端虛擬機,則需另在去防火牆規則中新增 5601/tcp port (eg. GCP 要去虛擬私有雲網路中的防火牆設定)