Elasticsearch 7.9.2 multi hosts

시스템환경 

OS: aws Linux 

 

 

wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-7.9.2-linux-x86_64.tar.gz
wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-7.9.2-linux-x86_64.tar.gz.sha512

sudo yum install -y perl-Digest-SHA

shasum -a 512 -c elasticsearch-7.9.2-linux-x86_64.tar.gz.sha512 
tar -xzf elasticsearch-7.9.2-linux-x86_64.tar.gz
cd elasticsearch-7.9.2/

 

ca 인증서 저장 (패스워드 등록안함)

> bin/elasticsearch-certutil ca

> bin/elasticsearch-certutil cert --ca elastic-stack-ca.p12

 

 

elastic-stack-ca.p12

elastic-certificates.p12

파일을 config 폴더로 복사

 

다른서버로 넘겨보자 scp

 

scp 파일 계정@아이피:/elastic (경로)

 

 

타겟서버 세팅

https://stackoverflow.com/questions/36300446/ssh-permission-denied-publickey-gssapi-with-mic

 

Elasticsearch 구동 후 패스워드 등록

> bin/elasticsearch-setup-passwords interactive

 

 

elasticserch.yml

xpack.security.enabled: true
xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.verification_mode: certificate
xpack.security.transport.ssl.keystore.path: elastic-certificates.p12
xpack.security.transport.ssl.truststore.path: elastic-certificates.p12
xpack.security.http.ssl.enabled: true
xpack.security.http.ssl.verification_mode: certificate
xpack.security.http.ssl.keystore.path: elastic-certificates.p12      
xpack.security.http.ssl.truststore.path: elastic-certificates.p12