#
mkdir config/certificates
# configcertificates
mv ./elastic-certificates.p12 config/certificates/
#
chmod 777 ./config/certificates/elastic-certificates.p12
bin/elasticsearch-keystore add xpack.security.transport.ssl.keystore.secure_password
bin/elasticsearch-keystore add xpack.security.transport.ssl.truststore.secure_password
vim config/elasticsearch.yml
network.host: 0.0.0.0
bootstrap.memory_lock: false
bootstrap.system_call_filter: false
#
http.cors.enabled: true
http.cors.allow-origin: "*"
http.cors.allow-headers: Authorization,X-Requested-With,Content-Type,Content-Length
xpack.ml.enabled: true
#trueX-Pack
xpack.security.enabled: true
xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.verification_mode: certificate
#elastic-certificates.p12
xpack.security.transport.ssl.keystore.path: /opt/elasticsearch/config/certificates/elastic-certificates.p12
xpack.security.transport.ssl.truststore.path: /opt/elasticsearch/config/certificates/elastic-certificates.p12
discovery.seed_hosts: ["127.0.0.1", "[::1]"]
cluster.initial_master_nodes: 127.0.0.1
mkdir sbin
vim sbin/elasticsearch
#!/bin/bash
ES_HOME=/opt/elasticsearch
bin/elasticsearch -E node.name=node01 -E cluster.name=es_cluster -E path.data=/data01/elasticsearch/ -d
bin/elasticsearch -E node.name=node02 -E cluster.name=es_cluster -E path.data=/data02/elasticsearch/ -E http.
port=9201 -d
bin/elasticsearch -E node.name=node03 -E cluster.name=es_cluster -E path.data=/data03/elasticsearch/ -E http.
port=9202 -d