新增 Service：ElasticSearch

Service%EF%BC%9AElasticSearch.md

@@ -0,0 +1,225 @@
+# 下載 elasticsearch 服務
+
+```bash
+wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-8.16.0-linux-x86_64.tar.gz --no-check-certificate
+```
+
+# 驗證 elasticsearch 服務壓縮檔
+
+```bash
+wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-8.16.0-linux-x86_64.tar.gz.sha512 --no-check-certificate
+```
+
+```bash
+shasum -a 512 -c elasticsearch-8.16.0-linux-x86_64.tar.gz.sha512
+```
+
+# 解壓縮 elasticsearch 服務
+
+```bash
+tar -xzf elasticsearch-8.16.0-linux-x86_64.tar.gz
+```
+
+先啟動一次服務，讓設定檔完整
+
+```bash
+elasticsearch
+```
+
+# 設定 elasticsearch 服務
+
+```bash
+nano elasticsearch-8.16.0/config/elasticsearch.yml
+```
+
+(修改以下內容)
+
+```yaml
+# 在全部網路介面啟動服務
+network.host: 0.0.0.0
+
+# 改走 http 協定
+xpack.security.http.ssl:
+  enabled: false
+
+# 允許所有介面的網路連線
+http.host: 0.0.0.0
+
+# 允許所有介面的叢集連線
+transport.host: 0.0.0.0
+```
+
+# elasticsearch 指令
+
+## 啟動服務
+
+```bash
+elasticsearch
+```
+
+## 關閉服務
+
+```bash
+elasticsearch -d -p pid
+```
+
+取得 PID
+
+```bash
+pkill -F pid
+```
+
+## 重設密碼
+
+```bash
+elasticsearch-reset-password -i -u elastic
+```
+
+## 產生服務金鑰 for kibana
+
+```bash
+elasticsearch-create-enrollment-token -s kibana
+```
+
+(輸出)
+
+```bash
+eyJ2ZXIiOiI4LjE0LjAiLCJhZHIiOlsiMTkyLjE2OC4zMC4xMDQ6OTIwMCJdLCJmZ3IiOiIzYTEyMWIwZTk4N2M0YzE5ODczMzdmNmU0OTk1Y2E3M2RmNmMzZmE5YzlkNzU4ZGYxN2M4YmNlOThjNjBiMjAxIiwia2V5IjoidWpEaVFwTUJDcmJ4NjlvajVsRm86SkpTUmQzdFdRTWVsUlIyUGxHbGg2ZyJ9
+```
+
+# 下載 kibana 服務
+
+```bash
+wget https://artifacts.elastic.co/downloads/kibana/kibana-8.16.0-linux-x86_64.tar.gz --no-check-certificate
+```
+
+# 驗證 kibana 服務壓縮檔
+
+```bash
+wget https://artifacts.elastic.co/downloads/kibana/kibana-8.16.0-linux-x86_64.tar.gz.sha512 --no-check-certificate
+```
+
+```bash
+shasum -a 512 -c kibana-8.16.0-linux-x86_64.tar.gz.sha512
+```
+
+# 解壓縮 kibana 服務
+
+```bash
+tar -xzf kibana-8.16.0-linux-x86_64.tar.gz
+```
+
+# 設定服務
+
+```bash
+sudo nano kibana-8.16.0/config/kibana.yml
+```
+
+(調整內容)
+
+```bash
+# 在所有網路介面啟動服務
+server.host: "0.0.0.0"
+
+# 設定 elasticsearch 服務位置
+elasticsearch.hosts: ["http://0.0.0.0:9200"]
+
+# 設定 elasticsearch 存取金鑰
+elasticsearch.serviceAccountToken: "eyJ2ZXIiOiI4LjE0LjAiLCJhZHIiOlsiMTkyLjE2OC4zMC4xMDQ6OTIwMCJdLCJmZ3IiOiIzYTEyMWIwZTk4N2M0YzE5ODczMzdmNmU0OTk1Y2E3M2RmNmMzZmE5YzlkNzU4ZGYxN2M4YmNlOThjNjBiMjAxIiwia2V5IjoidWpEaVFwTUJDcmJ4NjlvajVsRm86SkpTUmQzdFdRTWVsUlIyUGxHbGg2ZyJ9"
+```
+
+# kibana 指令
+
+## 啟動服務
+
+```bash
+kibana
+```
+
+## 安裝 elasticsearch 與 kibana
+
+## 安裝相依套件
+
+```bash
+sudo apt install -y apt-transport-https
+```
+
+## 安裝 elasticsearch 與 kibana 服務
+
+```bash
+echo "deb [signed-by=/usr/share/keyrings/elasticsearch-keyring.gpg] https://artifacts.elastic.co/packages/8.x/apt stable main" | sudo tee /etc/apt/sources.list.d/elastic-8.x.list
+```
+
+```bash
+sudo apt update && sudo apt upgrade -y && sudo apt install -y elasticsearch kibana
+```
+
+## 新增 elasticsearch 服務
+
+```bash
+sudo nano /etc/systemd/system/elasticsearch.service
+```
+
+```
+[Unit]
+Description=elasticsearch
+
+[Service]
+Type=simple
+User=shuochen
+WorkingDirectory=/home/shuochen/elasticsearch-8.16.0
+ExecStart=/home/shuochen/elasticsearch-8.16.0/bin/elasticsearch
+Restart=always
+
+[Install]
+WantedBy=multi-user.target
+```
+
+## 啟動 elasticsearch 服務
+
+```bash
+sudo systemctl daemon-reload
+```
+
+```bash
+sudo systemctl enable elasticsearch
+```
+
+```bash
+sudo systemctl start elasticsearch
+```
+
+## 新增 kibana 服務
+
+```bash
+sudo nano /etc/systemd/system/kibana.service
+```
+
+```
+[Unit]
+Description=kibana
+
+[Service]
+Type=simple
+User=shuochen
+WorkingDirectory=/home/shuochen/kibana-8.16.0
+ExecStart=/home/shuochen/kibana-8.16.0/bin/kibana --allow-root
+Restart=always
+
+[Install]
+WantedBy=multi-user.target
+```
+
+## 啟動 kibana 服務
+
+```bash
+sudo systemctl daemon-reload
+```
+
+```bash
+sudo systemctl enable kibana
+```
+
+```bash
+sudo systemctl start kibana
+```