elasticsearch 배포

supervisord 구성

[supervisord]
; ....
nodaemon=false               ; (start in foreground if true;default false)

[program:elk_01]
directory=/yikaoyan/elasticsearch-7.2.1
command=/usr/bin/bash bin/elasticsearch
user=elk  ;  ，ES root 

systemctl enable supervisord  //  

[Service]
Type=forking
ExecStart=/usr/bin/supervisord -c /etc/supervisor/supervisord.conf

systemctl daemon-reload
systemctl start supervisord

ES 비 root 사용자 실행 문제

#  
useadd elk
#  es 
chown -R elk:elk elasticsearch-folder

upstream elk {
    server 127.0.0.1:9200;
}

server {
    listen 8080;  #  8080 ， 9200 
    access_log  /var/log/nginx/statistics_access.log;

    client_max_body_size 4G;
    fastcgi_buffers 64 8K;
    client_body_buffer_size 1024k;
    keepalive_timeout 5;
    client_body_timeout 15;
    client_header_timeout 15;

    send_timeout 15;
    sendfile on;
    tcp_nopush on;
    tcp_nodelay on;

    location / {
        proxy_pass http://elk;  #  ，http:// 
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_buffers 8 32k;
        proxy_buffer_size 64k;

        #  
        auth_basic "auth required";
        auth_basic_user_file /etc/nginx/conf.d/htpasswd/es;
    }
}

# ---------------------------------- Network -----------------------------------
#
# Set the bind address to a specific IP (IPv4 or IPv6):
#
network.host: 127.0.0.1
#
# Set a custom port for HTTP:
#
# http.port: 9200

연결 ES

# elasticsearch.hosts: ["http://localhost:9200"]
elasticsearch.hosts: ["http://xx.xx.xx.xxx:8080"]

# ...

# If your Elasticsearch is protected with basic authentication, these settings provide
# the username and password that the Kibana server uses to perform maintenance on the Kibana
# index at startup. Your Kibana users still need to authenticate with Elasticsearch, which
# is proxied through the Kibana server.
elasticsearch.username: "user"
elasticsearch.password: "pwd"

ES_CLIENT = Elasticsearch(['http://user:[email protected]:8080'])