13存储搜索引擎高性能集群课件x pack65使用

1、开始 xpack开启试用POST /_xpack/license/start_trial?acknowledge=true1.2. es 开启 securityxpack.security.enabled: true设置内指用户bin/elasticsearch-setup-passwords interactiveelasticapm_system kibanalogstash_system beats_systemremote_monitoring_user配置 kibanaES重启 Kibana，重新登录 Kibana 后，你会看到如下登录界面elasticsearch.username

2、: "elastic" elasticsearch.password: "elastic" xpack.security.enabled: truexpack.security.encryptionKey: "4297f44bb2497399d7a93"启用/禁用 x-pack 中的特性默认情况下 xpack 中的各种特性都是开启的. 你可以通过在elasticsearch.yml、kibana.yml、logstash.yml 中配置来开启或关闭他们。SettingDescriptionxpack.graph.enabledSet

3、to false to disable X-Pack graph features.xpack.ml.enabledSet to false to disable X-Pack machine learning features.xpack.monitoring.enabledSet to false to disable X-Pack monitoring features.xpack.reporting.enabledSet to false to disable X-Pack reporting features.xpack.security.enabledSet to false to

4、 disable X-Pack security features.xpack.watcher.enabledSet to false to disable Watcher.Security简介x-pack security 组件从下面三个方面为 ES stack 提供安全防护。·Preventing unauthorized access with password protection, role-based access control,and IP filtering.Preserving the integrity of your data with message aut

5、hentication and SSL/TLS encryption.Maintaining an audit trail so you know whos doing what to your cluster and the data itstores.··支持从多个安全数据源获取用户数据nativeAn internal realm where users are stored in a dedicated Elasticsearch index. With this realm, users are authenticated by usernames and pas

6、swords. The users are managed via the User Management API.ldapA realm that uses an external LDAP server to authenticate the users. With this realm, users are authenticated by usernames and passwords.active_directoryA realm that uses an external Active Directory Server to authenticate the users. With

7、 this realm, users are authenticated by usernames and passwords.pkiA realm that authenticates users using Public Key Infrastructure (PKI). This realm works in conjunction with SSL/TLS and identifies the users through the Distinguished Name (DN) of the clients X.509s.fileAn internal realm where users

8、 are defined in files stored on each node in the Elasticsearch cluster. With this realm, users are authenticated by usernames and passwords. The users are managed via dedicated tools that are provided by X-Pack on installation.samlA realm that uses SAML 2.0 Web SSO. This realm is designed to be used

9、 with Kibana.内建用户elasticA built-in superuser. See Built-in Roles.kibanaThe user Kibana uses to connect and communicate with Elasticsearch.logstash_systemThe user Logstash uses when storing monitoring information in Elasticsearch.内建多种方式进行用户管理1、Rest APIGET /_xpack/security/userGET /_xpack/security/use

10、r/<username>DELETE /_xpack/security/user/<username>POST /_xpack/security/user/<username>PUT/_xpack/security/user/<username>PUT/_xpack/security/user/<username>/_disablePUT/_xpack/security/user/<username>/_enablePUT/_xpack/security/user/<username>/_password2、Kibana Management用有系统管理权限的用户（如管理。elastic）登录 kibana，在management 菜单中进行用户、MonitorMonitor 简介从 ES nodes、lostash nodes、kibana 实例收集数据，被的 ES 集群可以决定整个技术栈的日志存在什么地方，默认情况下，会存在被的 ES