Linux 安装部署 Elasticsearch 8.5.0

 tar -xzf elasticsearch-8.5.0-linux-x86_64.tar.gz
 cd elasticsearch-8.5.0/

 groupadd elastic
 useradd -g elastic elastic
 # 密码设置为elastic
 passwd elastic

 chown -R elastic:elastic elasticsearch-8.5.0
 chmod -R 777 elasticsearch-8.5.0

 sudo cd elasticsearch-8.5.0
 visudo
 添加 elastic ALL=(ALL) ALL

 -Xms2g
 -Xmx2g

 cd /elasticsearch-8.5.0/plugins/
 mkdir ik
 cd ik
 cp /tmp/elasticsearch-analysis-ik-8.5.0.zip .
 unzip elasticsearch-analysis-ik-8.5.0.zip

 *       soft    nofile  65536
 *       hard    nofile  131072
 *       soft    nproc   2048
 *       hard    nproc   4096

 vm.max_map_count=655360

 sysctl -p

 ulimit -HSn 65535

 # 签发ca证书
 cd /elasticsearch-8.5.0/bin
 ./elasticsearch-certutil ca
 ​
 # 用ca证书签发节点证书
 cd /elasticsearch-8.5.0/bin
 ./elasticsearch-certutil cert --ca elastic-stack-ca.p12  
 ​
 # 证书默认在elasticsearch-8.5.0目录生成，将证书放到certs目录（config目录下手动创建certs目录）
 cd /elasticsearch-8.5.0
 mv elastic-certificates.p12  elastic-stack-ca.p12 config/certs 

 # ---------------------------------- Cluster -----------------------------------
 #
 # Use a descriptive name for your cluster:
 # 集群名称
 cluster.name: ES
 #
 # ------------------------------------ Node ------------------------------------
 #
 # Use a descriptive name for the node:
 #
 # 具体节点的名称
 node.name: node1
 #
 # Add custom attributes to the node:
 #
 #node.attr.rack: r1
 #
 # ---------------------------------- Network -----------------------------------
 #
 # By default Elasticsearch is only accessible on localhost. Set a different
 # address here to expose this node on the network:
 #
 # 节点IP地址（主机的IP地址）
 network.host: xxx.xx.xx.xx
 #
 # By default Elasticsearch listens for HTTP traffic on the first free port it
 # finds starting at 9200. Set a specific HTTP port here:
 #
 http.port: 9200
 #
 # 配置跨域
 http.cors.enabled: true
 http.cors.allow-origin: "*"
 http.cors.allow-headers: Authorization,X-Requested-With,Content-Length,Content-Type
 # For more information, consult the network module documentation.
 #
 # --------------------------------- Discovery ----------------------------------
 #
 # Pass an initial list of hosts to perform discovery when this node is started:
 # The default list of hosts is ["127.0.0.1", "[::1]"]
 #
 #
 # Bootstrap the cluster using an initial set of master-eligible nodes:
 #
 #
 # For more information, consult the discovery and cluster formation module documentation.
 #
 #----------------------- BEGIN SECURITY AUTO CONFIGURATION -----------------------
 #
 # The following settings, TLS certificates, and keys have been automatically      
 # generated to configure Elasticsearch security features on 12-12-2023 00:39:26
 #
 # --------------------------------------------------------------------------------
 ​
 # Enable security features
 xpack.security.enabled: true
 ​
 xpack.security.enrollment.enabled: true
 ​
 # Enable encryption for HTTP API client connections, such as Kibana, Logstash, and Agents
 xpack.security.http.ssl:
   enabled: true
   keystore.path: certs/elastic-stack-ca.p12
 ​
 # Enable encryption and mutual authentication between cluster nodes
 xpack.security.transport.ssl:
   enabled: true
   verification_mode: certificate
   keystore.path: certs/elastic-certificates.p12
   truststore.path: certs/elastic-certificates.p12
 # Create a new cluster with the current node only
 # Additional nodes can still join the cluster later
 # 节点的ip地址, 首次启动完成后删除或注释此配置项
 cluster.initial_master_nodes: ["xxx.xx.xx.xx"]
 ​
 #----------------------- END SECURITY AUTO CONFIGURATION -------------------------
 ​
 # Allow other nodes to join the cluster from anywhere
 # Connections are encrypted and mutually authenticated
 transport.host: 0.0.0.0
 ​
 ingest.geoip.downloader.enabled: false
 ​

 chown -R elastic:elastic elasticsearch-8.5.0
 chmod -R 777 elasticsearch-8.5.0

 ./bin/elasticsearch-keystore add xpack.security.transport.ssl.keystore.secure_password
 ./bin/elasticsearch-keystore add xpack.security.transport.ssl.truststore.secure_password
 ./bin/elasticsearch-keystore add xpack.security.http.ssl.keystore.secure_password
 ./bin/elasticsearch-keystore add xpack.security.http.ssl.truststore.secure_password

 # 切换新用户
 su elastic
 cd elasticsearch-8.5.0/bin
 ./elasticsearch

 ✅ Elasticsearch security features have been automatically configured!
 ✅ Authentication is enabled and cluster connections are encrypted.
 ​
 ℹ️  Password for the elastic user (reset with `bin/elasticsearch-reset-password -u elastic`):
   *_LNlFhqK5ULjbCyEYee
 ​
 ℹ️  HTTP CA certificate SHA-256 fingerprint:
   6aea402bdf44d4f64d77b9c01ac87904264c07943a4087af0492e84247f9ab86
 ​
 ℹ️  Configure Kibana to use this cluster:
 • Run Kibana and click the configuration link in the terminal when Kibana starts.
 • Copy the following enrollment token and paste it into Kibana in your browser (valid for the next 30 minutes):
   eyJ2ZXIiOiI4LjUuMCIsImFkciI6WyIxMC40MC4wLjA6OTIwMCJdLCJmZ3IiOiI2YWVhNDAyYmRmNDRkNGY2NGQ3N2I5YzAxYWM4NzkwNDI2NGMwNzk0M2E0MDg3YWYwNDkyZTg0MjQ3ZjlhYjg2Iiwia2V5IjoiOE5RU1hJd0JkcGJWLTFXV3ZKdVY6VkRPYTJIOWdTNjIxdGVWbkFjTFRDQSJ9
 ​
 ℹ️ Configure other nodes to join this cluster:
 • Copy the following enrollment token and start new Elasticsearch nodes with `bin/elasticsearch --enrollment-token <token>` (valid for the next 30 minutes):
   eyJ2ZXIiOiI4LjUuMCIsImFkciI6WyIxMC40MC4wLjA6OTIwMCJdLCJmZ3IiOiI2YWVhNDAyYmRmNDRkNGY2NGQ3N2I5YzAxYWM4NzkwNDI2NGMwNzk0M2E0MDg3YWYwNDkyZTg0MjQ3ZjlhYjg2Iiwia2V5IjoiOHRRU1hJd0JkcGJWLTFXV3ZKdXU6SXJObjMtVUxSanlSek4wdzRPOGtoUSJ9

 ./bin/elasticsearch-create-enrollment-token -f --scope kibana -E xpack.security.http.ssl.verification_mode=certificate

 ./bin/elasticsearch-create-enrollment-token -f --scope node -E xpack.security.http.ssl.verification_mode=certificate

 # 如果没有以守护进程的方式启动，直接ctrl+c就可以关闭程序
 # 如果以守护进程的方式启动则需要查询进程PID再杀死进程关闭程序
 ps -ef | grep elasticsearch
 kill -9 <进程PID>

 su root 
 cd /lib/systemd/system/      ###配置服务的目录
 vim /lib/systemd/system/elasticsearch.service     ###写入如下内容

 [Unit]
 Description=elasticsearch
 After=network.target
 ​
 [Service]
 Type=simple
 User=elastic
 # elasticsearch安装目录
 ExecStart=/opt/elasticsearch-8.5.0/bin/elasticsearch
 PrivateTmp=true
 # 指定此进程可以打开的最大文件数
 LimitNOFILE=65535
 # 指定此进程可以打开的最大进程数
 LimitNPROC=65535
 # 最大虚拟内存
 LimitAS=infinity
 # 最大文件大小
 LimitFSIZE=infinity
 Restart=on-failure
 ​
 [Install]
 WantedBy=multi-user.target

 # 更新systemd配置文件
 systemctl daemon-reload
 # 使服务生效
 systemctl enable elasticsearch
 # 启动服务
 systemctl start elasticsearch
 # 查看服务状态
 systemctl status elasticsearch