kibana elasticsearch Xpack Cluster 연동

 

 

 

• kibana version 8부터 kibana + ElasticSearch랑 연동할 경우에 elastic 계정으로 보안상 연동이 불가능
• 연동하기 위한 별도 계정을 생성필요
• kibana 계정 생성

curl -u elastic:"패스워드" -X PUT "192.168.0.204:9200/_security/user/kibana_user" -H "Content-Type: application/json" -d '{
  "password": "kibana_password",
  "roles": ["kibana_system", "kibana_admin", "monitoring_user"],
  "full_name": "Kibana User",
  "email": "kibana_user@example.com",
  "enabled": true
}'

 

• Elasticsearch 권한 부여
  • Role : remote_cluster_client 추가

cluster.name: my-application
node.name: master-1
node.roles: ["master","data","remote_cluster_client"]
path.data: /data/elasticsearch-data
path.logs: /data/elasticsearch-log
network.host: 0.0.0.0
http.port: 9200
transport.port: 9300
discovery.seed_hosts: ["192.168.0.204"]
cluster.initial_master_nodes: ["master-1"]

xpack.security.enabled: true
xpack.security.transport.ssl.enabled: true
xpack.security.transport.ssl.verification_mode: certificate
xpack.security.transport.ssl.keystore.path: elastic-certificates.p12
xpack.security.transport.ssl.truststore.path: elastic-certificates.p12

 

• kibana 설정 하기
  • elasticsearch 정보(hosts, username, password)

server.port: 5601
server.host: "0.0.0.0"
# =================== System: Kibana Server (Optional) ===================
# =================== System: Elasticsearch ===================
elasticsearch.hosts: ["http://192.168.0.204:9200","http://192.168.0.207:9200","http://192.168.0.208:9200"]
elasticsearch.username: "kibana_user"
elasticsearch.password: "kibana_password"

 

 

• 접근

 

 

• kibana -> Monitoring 확인
  • Elasticsearch Role : remote_cluster_client  추가 안할 경우 아래와 같이 에러 발생

 

• 정상인 상태
  • 상세한 모니터링 패키지 설치 안해서 아래와 같이 발생