Question

任何想法如何在弹性搜索中启用https。给我一些步骤，让开发人员了解

Answer 1

您可以为任何支持SSL的输出指定SSL选项。设置Kibana端点时，您还可以指定SSL选项。

启用了SSL的示例输出配置：

output.elasticsearch.hosts: ["192.168.1.42:9200"]
output.elasticsearch.ssl.certificate_authorities: ["/etc/pki/root/ca.pem"]
output.elasticsearch.ssl.certificate: "/etc/pki/client/cert.pem"
output.elasticsearch.ssl.key: "/etc/pki/client/cert.key"

启用了SSL的示例Kibana端点配置：

setup.kibana.host: "192.0.2.255:5601"
setup.kibana.protocol: "https"
setup.kibana.ssl.enabled: true
setup.kibana.ssl.certificate_authorities: ["/etc/pki/root/ca.pem"]
setup.kibana.ssl.certificate: "/etc/pki/client/cert.pem"
setup.kibana.ssl.key: "/etc/pki/client/cert.key

您可以通过以下链接查看官方文档：）：https://www.elastic.co/guide/en/apm/server/current/configuration-ssl.html

Elasticsearch 6.3-如何在Elasticsearch中启用SSL

1 个答案: