ElasticSearch-8.0初识

Elastic 版本更迭历史#

发布日期	版本号	时间间隔
2010-05-14	V0.7
2014-02-14	V1.0	1372 天
2015-10-28	V2.0	621 天
2016-10-26	V5.0	364 天
2017-11-14	V6.0	384 天
2019-04-10	V7.0	512 天
2022-02-11	V8.0	1038 天

8.x 新特性及变化#

服务启动过程中默认启用且自动化的配置了安全防护功能:

• 开启用户认证访问功能
• 为内置账号elastic设置了随机密码
• 创建了集群内外加密通信的密钥对
• 为Kibana 服务器创建了配置令牌
• 为后续将加入该集群的节点创建了配置令牌

更多新特性及变更可查看 breaking-changes-8.0

集群部署#

• 配置文件

cluster.name: es8
node.name: 10.1.1.1
node.roles: [ master,data ]
network.host: 10.1.1.1
http.port: 9200
transport.port: 9300
discovery.seed_hosts: ['10.1.1.1:9300', '10.1.1.1:9300', '10.1.1.1:9300']
cluster.initial_master_nodes: ['10.1.1.1:9300', '10.1.1.1:9300', '10.1.1.1:9300']
transport.compress: true
bootstrap.memory_lock: true
node.attr.zone: hot
##
thread_pool.write.queue_size: 1000
reindex.remote.whitelist: ["10.*:9200"]
## 
xpack.security.enabled: true
xpack.sql.enabled: false
xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.verification_mode: none
xpack.security.transport.ssl.keystore.path: certs/elastic-certificates.p12
xpack.security.transport.ssl.truststore.path: certs/elastic-certificates.p12
xpack.security.authc.token.enabled: false
##
http.cors.enabled: true
http.cors.allow-origin: "*"
http.cors.allow-credentials: true
http.cors.allow-headers: "Content-Type, Access-Control-Allow-Headers, Authorization, X-Requested-With, Content-Length"

[root@jevic1 bin]# ./elasticsearch-setup-passwords auto
******************************************************************************
Note: The 'elasticsearch-setup-passwords' tool has been deprecated. This       command will be removed in a future release.
******************************************************************************

Initiating the setup of passwords for reserved users elastic,apm_system,kibana,kibana_system,logstash_system,beats_system,remote_monitoring_user.
The passwords will be randomly generated and printed to the console.
Please confirm that you would like to continue [y/N]y


Changed password for user apm_system
PASSWORD apm_system = QbGziLVUqfjxDhkGZsr1

Changed password for user kibana_system
PASSWORD kibana_system = j9XKgFVenmqKpfJj6gU5

Changed password for user kibana
PASSWORD kibana = j9XKgFVenmqKpfJj6gU5

Changed password for user logstash_system
PASSWORD logstash_system = L8p02TDmv6VUpxww50Kd

Changed password for user beats_system
PASSWORD beats_system = 0dcBQA6KGXs4R7TNm7ba

Changed password for user remote_monitoring_user
PASSWORD remote_monitoring_user = 1IBRa2Q8g1KiHtj64wVq

Changed password for user elastic
PASSWORD elastic = aRGj1nxt2gUbbSH6Q8Ff

• 创建Admin用户

curl -u elastic:aRGj1nxt2gUbbSH6Q8Ff http://10.1.1.1:9200
curl -XPOST -u elastic:aRGj1nxt2gUbbSH6Q8Ff  -H "Content-Type:application/json" 'http://10.24.12.31:9200/_xpack/security/user/elastic/_password' -d '{ "password" : "xx" }'