Elasticsearch

访问 Elasticsearch API

• URL: http://<server-ip>:9200
• 集群内部通信端口： 127.0.0.1:9300 （请勿对外暴露）

Credentials

• User: elastic
• 密码：已安全存储于 /root/.cloudzy-creds

Important Directories

• Config: /etc/elasticsearch
• Data: /var/lib/elasticsearch
• Logs: /var/log/elasticsearch
• Binaries: /usr/share/elasticsearch/bin
• Plugins: /usr/share/elasticsearch/plugins

管理服务

Use systemctl commands:

systemctl status elasticsearch
systemctl restart elasticsearch
systemctl stop elasticsearch
systemctl start elasticsearch

注册 Kibana（可选）

如果你计划单独安装 Kibana，需要先在 Elasticsearch 上生成一个注册令牌，再用它来完成 Kibana 的安全配置。

1. 在 Elasticsearch 服务器上生成注册令牌：

/usr/share/elasticsearch/bin/elasticsearch-create-enrollment-token -s kibana

2. 复制生成的令牌，然后在 Kibana 服务器上运行：

/usr/share/kibana/bin/kibana-setup --enrollment-token "<your-token>"

此操作将 Kibana 安全地注册到 Elasticsearch。

Elasticsearch 命令示例

检查集群健康状态：

curl -X GET -k "https://localhost:9200/_cluster/health?pretty" 
  -u elastic:<password> 
  --cacert /etc/elasticsearch/certs/http_ca.crt

列出所有索引：

curl -X GET -k "https://localhost:9200/_cat/indices?v" 
  -u elastic:<password> 
  --cacert /etc/elasticsearch/certs/http_ca.crt