wget https://mirrors.linyaohong.com/src/jdk-8u241-linux-x64.tar.gz
tar zxf jdk-8u241-linux-x64.tar.gz 
mv jdk1.8.0_241/ /usr/local/
cat >>/etc/profile <<EOF
export JAVA_HOME=/usr/local/jdk1.8.0_241
export PATH=\$JAVA_HOME/bin:\$PATH
export CLASSPATH=.:\$JAVA_HOME/lib/dt.jar:\$JAVA_HOME/lib/tools.jar
EOF

source /etc/profile
java -version

# 端口:
ES:9200/9300
ZK:2181/22181/32181
kafka:9092
logstash:960X（X代表每启动一个加1）

[ ! -d /data/server ] && mkdir -p /data/server
cd /data/server
wget https://mirrors.huaweicloud.com/elasticsearch/7.14.2/elasticsearch-7.14.2-linux-x86_64.tar.gz
tar zxvf elasticsearch-7.14.2-linux-x86_64.tar.gz
ln -s /data/server/elasticsearch-7.14.2  elasticsearch-7.14.2
useradd elk
chown -R elk:elk  /data/server/elasticsearch-7.14.2

# 修改 config/jvm.options jvm参数


vi config/elasticsearch.yml
# 修改配置文件为
##########
cluster.name: prod-es
node.name: node-1
network.host: 0.0.0.0
http.port: 9200
discovery.seed_hosts: ["10.249.52.10", "10.249.52.11", "10.249.52.12"]
cluster.initial_master_nodes: ["10.249.52.10", "10.249.52.11", "10.249.52.12"]
xpack.security.enabled: false
transport.tcp.port: 9300
http.cors.enabled: true
http.cors.allow-origin: "*"

cat >restart.sh <<EOF
#!/bin/sh
echo \`ps -ef|grep elasticsearch|grep -v grep|awk '{print \$2}'\`
echo "start kill elasticsearch"
kill -9 `ps -ef|grep elasticsearch|grep -v grep|awk '{print \$2}'`
sleep 5
sudo -u elk /data/server/elasticsearch-7.14.2/bin/elasticsearch -d
echo starting
echo \`ps -ef|grep elasticsearch-7.14.2|grep -v grep|awk '{print \$2}'\`
EOF
chmod +x restart.sh
./restart.sh

# 1. 替换破解包 一定注意大小 2.55M
cd /data/server/
wget https://mirrors.linyaohong.com/src/x-pack-core-7.14.2.jar
mv x-pack-core-7.14.2.jar  modules/x-pack-core/
chown -R elk:elk *
# 4. 在kibana上传那license  ----- 设置-许可管理
# 生成证书 在一个master上执行即可
cd /data/server/elasticsearch-7.3.0
# 两次回车
./bin/elasticsearch-certutil ca
# 三次回车
./bin/elasticsearch-certutil cert --ca elastic-stack-ca.p12 

# 把生成的文件放到conf下,注意权限为 elk用户 elastic-certificates.p12  elastic-stack-ca.p12
chown elk.elk -R *
mv elastic-* config/

# 再把证书文件 **************
elastic-certificates.p12 复制到其他master节点并赋予权限。 

# 修改配置文件.
#xpack.security.enabled: false
xpack.security.enabled: true
xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.verification_mode: certificate
xpack.security.transport.ssl.keystore.path: elastic-certificates.p12
xpack.security.transport.ssl.truststore.path: elastic-certificates.p12

# 生成密码 开始 xpack.security.enabled 后要重启 es
./bin/elasticsearch-setup-passwords  auto