elastic7.16 install 0 - Configure security for the Elastic Stack

关注

转载最新推荐文章于 2026-11-06 08:56:16 发布 212 阅读 AI 写同款· GEO 优化 ›

Ubuntu 16.04部署Elastic Stack：初学者的架构认知入门 Elastic Stack（ELK）是一套开源的分布式搜索与日志分析平台，核心由Elasticsearch（分布式搜索引擎）、Logstash（数据管道）和Kibana（可视化界面）组成。其底层依赖Java运行时、Linux系统调优（如vm.max_map_count）、网络端口管理及权限隔离等基础能力。掌握这些原理，不仅能解决elasticsearch安装失败、kibana使用教程中常见的连接拒绝或空白页问题，更能深入理解现代可观测性系统的架构契约。典型应用场景包括日志集中采集、结构化分析与实时仪表板构建阅读详情

文章目录

Security needs vary depending on whether you’re developing locally on your laptop or securing all communications in a production environment. Because security needs vary, the following scenarios provide options for configuring the Elastic Stack.

Each subsequent scenario builds on the previous one so that you can add additional security by building on the existing layer.

These scenarios don’t cover every situation, but provide a framework for securing Elasticsearch and the Elastic Stack based on typical use cases.
在这里插入图片描述

Elastic Security layers
Minimal security (Elasticsearch Development)edit
If you want to set up Elasticsearch on your laptop and start developing, this scenario is for you. This configuration prevents unauthorized access to your local cluster by setting up passwords for the built-in users. You also configure password authentication for Kibana.

The minimal security scenario is not sufficient for production mode clusters. If your cluster has multiple nodes, you must enable minimal security and then configure Transport Layer Security (TLS) between nodes.

Set up minimal security

Basic security (Elasticsearch Production)edit
This scenario builds on the minimal security requirements by adding transport Layer Security (TLS) for communication between nodes. This additional layer requires that nodes verify security certificates, which prevents unauthorized nodes from joining your Elasticsearch cluster.

Your external HTTP traffic between Elasticsearch and Kibana won’t be encrypted, but internode communication will be secured.

Set up basic security

Basic security plus secured HTTPS traffic (Elastic Stack)edit
This scenario builds on the one for basic security and secures all HTTP traffic with TLS. In addition to configuring TLS on the transport interface of your Elasticsearch cluster, you configure TLS on the HTTP interface for both Elasticsearch and Kibana.

If you need mutual (bidirectional) TLS on the HTTP layer, then you’ll need to configure mutual authenticated encryption.

You then configure Kibana and Beats to communicate with Elasticsearch using TLS so that all communications are encrypted. This level of security is strong, and ensures that any communications in and out of your cluster are secure.

Set up basic security plus HTTPS traffic