From 42460b5b0d8d107ea7fc42b9253d76daf8b3eb32 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E7=B3=BB=E7=B5=B1=E7=AE=A1=E7=90=86=E5=93=A1?=
 <admin@noreply.localhost>
Date: Fri, 6 Mar 2026 06:18:09 +0000
Subject: [PATCH] =?UTF-8?q?=E6=96=B0=E5=A2=9E=20Service=EF=BC=9AElasticSea?=
 =?UTF-8?q?rch?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 Service%EF%BC%9AElasticSearch.md | 225 +++++++++++++++++++++++++++++++
 1 file changed, 225 insertions(+)
 create mode 100644 Service%EF%BC%9AElasticSearch.md

diff --git a/Service%EF%BC%9AElasticSearch.md b/Service%EF%BC%9AElasticSearch.md
new file mode 100644
index 0000000..2ed6b24
--- /dev/null
+++ b/Service%EF%BC%9AElasticSearch.md
@@ -0,0 +1,225 @@
+# 下載 elasticsearch 服務
+
+```bash
+wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-8.16.0-linux-x86_64.tar.gz --no-check-certificate
+```
+
+# 驗證 elasticsearch 服務壓縮檔
+
+```bash
+wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-8.16.0-linux-x86_64.tar.gz.sha512 --no-check-certificate
+```
+
+```bash
+shasum -a 512 -c elasticsearch-8.16.0-linux-x86_64.tar.gz.sha512
+```
+
+# 解壓縮 elasticsearch 服務
+
+```bash
+tar -xzf elasticsearch-8.16.0-linux-x86_64.tar.gz
+```
+
+先啟動一次服務，讓設定檔完整
+
+```bash
+elasticsearch
+```
+
+# 設定 elasticsearch 服務
+
+```bash
+nano elasticsearch-8.16.0/config/elasticsearch.yml
+```
+
+(修改以下內容)
+
+```yaml
+# 在全部網路介面啟動服務
+network.host: 0.0.0.0
+
+# 改走 http 協定
+xpack.security.http.ssl:
+  enabled: false
+
+# 允許所有介面的網路連線
+http.host: 0.0.0.0
+
+# 允許所有介面的叢集連線
+transport.host: 0.0.0.0
+```
+
+# elasticsearch 指令
+
+## 啟動服務
+
+```bash
+elasticsearch
+```
+
+## 關閉服務
+
+```bash
+elasticsearch -d -p pid
+```
+
+取得 PID
+
+```bash
+pkill -F pid
+```
+
+## 重設密碼
+
+```bash
+elasticsearch-reset-password -i -u elastic
+```
+
+## 產生服務金鑰 for kibana
+
+```bash
+elasticsearch-create-enrollment-token -s kibana
+```
+
+(輸出)
+
+```bash
+eyJ2ZXIiOiI4LjE0LjAiLCJhZHIiOlsiMTkyLjE2OC4zMC4xMDQ6OTIwMCJdLCJmZ3IiOiIzYTEyMWIwZTk4N2M0YzE5ODczMzdmNmU0OTk1Y2E3M2RmNmMzZmE5YzlkNzU4ZGYxN2M4YmNlOThjNjBiMjAxIiwia2V5IjoidWpEaVFwTUJDcmJ4NjlvajVsRm86SkpTUmQzdFdRTWVsUlIyUGxHbGg2ZyJ9
+```
+
+# 下載 kibana 服務
+
+```bash
+wget https://artifacts.elastic.co/downloads/kibana/kibana-8.16.0-linux-x86_64.tar.gz --no-check-certificate
+```
+
+# 驗證 kibana 服務壓縮檔
+
+```bash
+wget https://artifacts.elastic.co/downloads/kibana/kibana-8.16.0-linux-x86_64.tar.gz.sha512 --no-check-certificate
+```
+
+```bash
+shasum -a 512 -c kibana-8.16.0-linux-x86_64.tar.gz.sha512
+```
+
+# 解壓縮 kibana 服務
+
+```bash
+tar -xzf kibana-8.16.0-linux-x86_64.tar.gz
+```
+
+# 設定服務
+
+```bash
+sudo nano kibana-8.16.0/config/kibana.yml
+```
+
+(調整內容)
+
+```bash
+# 在所有網路介面啟動服務
+server.host: "0.0.0.0"
+
+# 設定 elasticsearch 服務位置
+elasticsearch.hosts: ["http://0.0.0.0:9200"]
+
+# 設定 elasticsearch 存取金鑰
+elasticsearch.serviceAccountToken: "eyJ2ZXIiOiI4LjE0LjAiLCJhZHIiOlsiMTkyLjE2OC4zMC4xMDQ6OTIwMCJdLCJmZ3IiOiIzYTEyMWIwZTk4N2M0YzE5ODczMzdmNmU0OTk1Y2E3M2RmNmMzZmE5YzlkNzU4ZGYxN2M4YmNlOThjNjBiMjAxIiwia2V5IjoidWpEaVFwTUJDcmJ4NjlvajVsRm86SkpTUmQzdFdRTWVsUlIyUGxHbGg2ZyJ9"
+```
+
+# kibana 指令
+
+## 啟動服務
+
+```bash
+kibana
+```
+
+## 安裝 elasticsearch 與 kibana
+
+## 安裝相依套件
+
+```bash
+sudo apt install -y apt-transport-https
+```
+
+## 安裝 elasticsearch 與 kibana 服務
+
+```bash
+echo "deb [signed-by=/usr/share/keyrings/elasticsearch-keyring.gpg] https://artifacts.elastic.co/packages/8.x/apt stable main" | sudo tee /etc/apt/sources.list.d/elastic-8.x.list
+```
+
+```bash
+sudo apt update && sudo apt upgrade -y && sudo apt install -y elasticsearch kibana
+```
+
+## 新增 elasticsearch 服務
+
+```bash
+sudo nano /etc/systemd/system/elasticsearch.service
+```
+
+```
+[Unit]
+Description=elasticsearch
+
+[Service]
+Type=simple
+User=shuochen
+WorkingDirectory=/home/shuochen/elasticsearch-8.16.0
+ExecStart=/home/shuochen/elasticsearch-8.16.0/bin/elasticsearch
+Restart=always
+
+[Install]
+WantedBy=multi-user.target
+```
+
+## 啟動 elasticsearch 服務
+
+```bash
+sudo systemctl daemon-reload
+```
+
+```bash
+sudo systemctl enable elasticsearch
+```
+
+```bash
+sudo systemctl start elasticsearch
+```
+
+## 新增 kibana 服務
+
+```bash
+sudo nano /etc/systemd/system/kibana.service
+```
+
+```
+[Unit]
+Description=kibana
+
+[Service]
+Type=simple
+User=shuochen
+WorkingDirectory=/home/shuochen/kibana-8.16.0
+ExecStart=/home/shuochen/kibana-8.16.0/bin/kibana --allow-root
+Restart=always
+
+[Install]
+WantedBy=multi-user.target
+```
+
+## 啟動 kibana 服務
+
+```bash
+sudo systemctl daemon-reload
+```
+
+```bash
+sudo systemctl enable kibana
+```
+
+```bash
+sudo systemctl start kibana
+```
\ No newline at end of file