1
Service:ElasticSearch
系統管理員 edited this page 2026-03-06 06:18:09 +00:00

下載 elasticsearch 服務

wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-8.16.0-linux-x86_64.tar.gz --no-check-certificate

驗證 elasticsearch 服務壓縮檔

wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-8.16.0-linux-x86_64.tar.gz.sha512 --no-check-certificate
shasum -a 512 -c elasticsearch-8.16.0-linux-x86_64.tar.gz.sha512

解壓縮 elasticsearch 服務

tar -xzf elasticsearch-8.16.0-linux-x86_64.tar.gz

先啟動一次服務,讓設定檔完整

elasticsearch

設定 elasticsearch 服務

nano elasticsearch-8.16.0/config/elasticsearch.yml

(修改以下內容)

# 在全部網路介面啟動服務
network.host: 0.0.0.0

# 改走 http 協定
xpack.security.http.ssl:
  enabled: false

# 允許所有介面的網路連線
http.host: 0.0.0.0

# 允許所有介面的叢集連線
transport.host: 0.0.0.0

elasticsearch 指令

啟動服務

elasticsearch

關閉服務

elasticsearch -d -p pid

取得 PID

pkill -F pid

重設密碼

elasticsearch-reset-password -i -u elastic

產生服務金鑰 for kibana

elasticsearch-create-enrollment-token -s kibana

(輸出)

eyJ2ZXIiOiI4LjE0LjAiLCJhZHIiOlsiMTkyLjE2OC4zMC4xMDQ6OTIwMCJdLCJmZ3IiOiIzYTEyMWIwZTk4N2M0YzE5ODczMzdmNmU0OTk1Y2E3M2RmNmMzZmE5YzlkNzU4ZGYxN2M4YmNlOThjNjBiMjAxIiwia2V5IjoidWpEaVFwTUJDcmJ4NjlvajVsRm86SkpTUmQzdFdRTWVsUlIyUGxHbGg2ZyJ9

下載 kibana 服務

wget https://artifacts.elastic.co/downloads/kibana/kibana-8.16.0-linux-x86_64.tar.gz --no-check-certificate

驗證 kibana 服務壓縮檔

wget https://artifacts.elastic.co/downloads/kibana/kibana-8.16.0-linux-x86_64.tar.gz.sha512 --no-check-certificate
shasum -a 512 -c kibana-8.16.0-linux-x86_64.tar.gz.sha512

解壓縮 kibana 服務

tar -xzf kibana-8.16.0-linux-x86_64.tar.gz

設定服務

sudo nano kibana-8.16.0/config/kibana.yml

(調整內容)

# 在所有網路介面啟動服務
server.host: "0.0.0.0"

# 設定 elasticsearch 服務位置
elasticsearch.hosts: ["http://0.0.0.0:9200"]

# 設定 elasticsearch 存取金鑰
elasticsearch.serviceAccountToken: "eyJ2ZXIiOiI4LjE0LjAiLCJhZHIiOlsiMTkyLjE2OC4zMC4xMDQ6OTIwMCJdLCJmZ3IiOiIzYTEyMWIwZTk4N2M0YzE5ODczMzdmNmU0OTk1Y2E3M2RmNmMzZmE5YzlkNzU4ZGYxN2M4YmNlOThjNjBiMjAxIiwia2V5IjoidWpEaVFwTUJDcmJ4NjlvajVsRm86SkpTUmQzdFdRTWVsUlIyUGxHbGg2ZyJ9"

kibana 指令

啟動服務

kibana

安裝 elasticsearch 與 kibana

安裝相依套件

sudo apt install -y apt-transport-https

安裝 elasticsearch 與 kibana 服務

echo "deb [signed-by=/usr/share/keyrings/elasticsearch-keyring.gpg] https://artifacts.elastic.co/packages/8.x/apt stable main" | sudo tee /etc/apt/sources.list.d/elastic-8.x.list
sudo apt update && sudo apt upgrade -y && sudo apt install -y elasticsearch kibana

新增 elasticsearch 服務

sudo nano /etc/systemd/system/elasticsearch.service
[Unit]
Description=elasticsearch

[Service]
Type=simple
User=shuochen
WorkingDirectory=/home/shuochen/elasticsearch-8.16.0
ExecStart=/home/shuochen/elasticsearch-8.16.0/bin/elasticsearch
Restart=always

[Install]
WantedBy=multi-user.target

啟動 elasticsearch 服務

sudo systemctl daemon-reload
sudo systemctl enable elasticsearch
sudo systemctl start elasticsearch

新增 kibana 服務

sudo nano /etc/systemd/system/kibana.service
[Unit]
Description=kibana

[Service]
Type=simple
User=shuochen
WorkingDirectory=/home/shuochen/kibana-8.16.0
ExecStart=/home/shuochen/kibana-8.16.0/bin/kibana --allow-root
Restart=always

[Install]
WantedBy=multi-user.target

啟動 kibana 服務

sudo systemctl daemon-reload
sudo systemctl enable kibana
sudo systemctl start kibana