安装Elasticsearch

# define download url
ELASTICSEARCH_URL="https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-8.12.1-linux-x86_64.tar.gz"
TARGET_DIR="/opt"
 
# create target directory(if not exists)
mkdir -p $TARGET_DIR
 
# download elasticsearch
curl -o /tmp/elasticsearch.tar.gz $ELASTICSEARCH_URL &
wait
 
# unzip to target directory
tar -C $TARGET_DIR -zxvf /tmp/elasticsearch.tar.gz
 
# clean up the downloaded zip files
rm /tmp/elasticsearch.tar.gz

adduser useradd

sudo adduser elasticsearch
# or
sudo useradd -m elasticsearch

sudo chown -R elasticsearch:elasticsearch /path/to/elasticsearch

sudo -u elasticsearch /path/to/elasticsearch/bin/elasticsearch

sudo sysctl -w vm.max_map_count=262144

ERROR: Elasticsearch exited unexpectedly, with exit code 137

ulimit -n 65536

sudo firewall-cmd --zone=public --add-port=9200/tcp --permanent
sudo firewall-cmd --reload

sudo -u elasticsearch nohup /path/to/elasticsearch/bin/elasticsearch > /path/to/elasticsearch.log 2>&1 &

curl -X POST "localhost:9200/_security/user/new_user" -H "Content-Type: application/json" -u admin_user:admin_password -d'
{
  "password" : "new_user_password",
  "roles" : ["user_role"],
  "full_name" : "New User",
  "email" : "newuser@example.com"
}'

bin/elasticsearch-setup-passwords interactive

bin/elasticsearch-reset-password -u elastic

# define the downloaded urls
FILEBEAT_URL="https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-8.12.1-linux-x86_64.tar.gz"
METRICBEAT_URL="https://artifacts.elastic.co/downloads/beats/metricbeat/metricbeat-8.12.1-linux-x86_64.tar.gz"
TARGET_DIR="/opt"
# you need to determine the installation directory of your ForguncyServer on your machine and replace the paths in this script accordingly.
SAVE_FOLDER="/opt/ForguncyServer/WebSite/influxDbServerBin"
 
# create target directory(if not exists)
mkdir -p $TARGET_DIR
 
# download filebeat and metricbeat
curl -o /tmp/filebeat.tar.gz $FILEBEAT_URL &
curl -o /tmp/metricbeat.tar.gz $METRICBEAT_URL &
wait
 
# unzip to target directory
tar -C $TARGET_DIR -zxvf /tmp/filebeat.tar.gz
tar -C $TARGET_DIR -zxvf /tmp/metricbeat.tar.gz

# move the extracted files to the SAVE_FOLDER
sudo mv $TARGET_DIR/filebeat-8.12.1-linux-x86_64/filebeat $SAVE_FOLDER/filebeat
sudo rm -rf $TARGET_DIR/filebeat-8.12.1-linux-x86_64

sudo mv $TARGET_DIR/metricbeat-8.12.1-linux-x86_64/metricbeat $SAVE_FOLDER/metricbeat
sudo rm -rf $TARGET_DIR/metricbeat-8.12.1-linux-x86_64
 
# clean up the downloaded zip files
rm /tmp/filebeat.tar.gz
rm /tmp/metricbeat.tar.gz

./bin/elasticsearch-certutil ca # Create a self-signed certificate authority (CA)

instances:
  - name: "node-1"
    dns:
      - "your.domain.com" # if have DNS
    ip:
      - "10.32.2.94" # the IP address you want to expose

./bin/elasticsearch-certutil cert --ca elastic-stack-ca.p12 --in instances.yml --out elastic-certificates.zip

# update apt
sudo apt-get update

# install unzip
sudo apt-get install unzip

# unzip zip file
unzip elastic-certificates.zip

cp elastic-stack-ca.p12 config/elastic-stack-ca.p12
cp node-1/node-1.p12 config/node-1.p12
cp instances.yml config/instances.yml

# Declare the name of this node in the cluster
node.name: node-1

# Since this example starts a single-instance cluster, configure the master node as the node declared earlier
cluster.initial_master_nodes: ["node-1"]

# Declare the IP address that Elasticsearch cluster listens on. 
# If it's for internal network access, you can configure the local network address of the machine. 
# If you want external network access, you can configure it as 0.0.0.0 to listen on all IP addresses
network.host: 0.0.0.0

# Enable the xpack.security
xpack.security.enabled: true

# Enable secure communication between cluster nodes
xpack.security.transport.ssl:
  enabled: true
  verification_mode: certificate
  # Both the keystore and truststore need to be configured with the certificate file generated earlier
  keystore.path: node-1.p12
  truststore.path: node-1.p12
  # The keystore and truststore both need to be configured with the password entered during the certificate creation process, which in this example is xA123456
  keystore.password: xA123456
  truststore.password: xA123456

# Enable secure communication (HTTPS) between clients and the cluster
xpack.security.http.ssl:
  enabled: true
  # Both the keystore and truststore need to be configured with the certificate file generated earlier
  keystore.path: node-1.p12
  truststore.path: node-1.p12
  # The keystore and truststore both need to be configured with the password entered during the certificate creation process, which in this example is xA123456
  keystore.password: xA123456
  truststore.password: xA123456

./bin/elasticsearch

./bin/elasticsearch-setup-passwords interactive