ELK之安装了search guard认证后安装elasticsearch-head

　　安装searc guard参考 https://www.cnblogs.com/minseo/p/10576126.html

　　安装elasticsearch-head参考 https://www.cnblogs.com/minseo/p/9117470.html

　　

　　安装了search guard以后再安装elasticsearch-head 完整的elasticsearch配置如下

cluster.name: my-elk
node.name: test-es-kibana-03
path.data: /data/es-data
path.logs: /var/log/elasticsearch
network.host: 172.16.20.13
http.port: 9200
#集群个节点IP地址，也可以使用els、els.shuaiguoxia.com等名称，需要各节点能够解析
#discovery.zen.ping.unicast.hosts: ["172.16.20.12","172.16.20.13"]
#集群节点数
#discovery.zen.minimum_master_nodes: 2
#增加参数，使head插件可以访问es  
http.cors.enabled: true
http.cors.allow-origin: "*"
#允许跨域头，不能像其他参考文件只写Authorization要写全
http.cors.allow-headers: Authorization,X-Requested-With,Content-Length,Content-Type

searchguard.ssl.transport.pemcert_filepath: key/node-certificates/CN=IP-172.16.20.13.crtfull.pem
searchguard.ssl.transport.pemkey_filepath: key/node-certificates/CN=IP-172.16.20.13.key.pem
searchguard.ssl.transport.pemkey_password: c4ab466ad5273161b7cd
searchguard.ssl.transport.pemtrustedcas_filepath: key/chain-ca.pem
searchguard.ssl.transport.enforce_hostname_verification: false
searchguard.ssl.http.enabled: true
searchguard.ssl.http.pemcert_filepath: key/node-certificates/CN=IP-172.16.20.13.crtfull.pem
searchguard.ssl.http.pemkey_filepath: key/node-certificates/CN=IP-172.16.20.13.key.pem
searchguard.ssl.http.pemkey_password: c4ab466ad5273161b7cd
searchguard.ssl.http.pemtrustedcas_filepath: key/chain-ca.pem
searchguard.authcz.admin_dn:
  - CN=sgadmin
searchguard.audit.type: internal_elasticsearch
searchguard.enable_snapshot_restore_privilege: true
searchguard.check_snapshot_restore_write_privileges: true
searchguard.restapi.roles_enabled: ["sg_all_access"]
cluster.routing.allocation.disk.threshold_enabled: false
node.max_local_storage_nodes: 3
xpack.security.enabled: false

　　

　　head的Gruntfile.js 配置不变

　　 vim _site/app.js配置如下修改增加认证

　　访问head也需要增加认证地址为

http://172.16.20.13:9100/?auth_user=admin&auth_password=admin

　　点击连接出现认证报错，原因是浏览器阻止了，可以使用链接新开一个浏览器打开一遍即可

https://admin:admin@172.16.20.13:9200/

 

 　　最后显示效果如下