http.cors.enabled: true
http.cors.allow-origin: "*"
http.cors.allow-headers: Authorization
xpack.security.enabled: true
xpack.security.transport.ssl.enabled: true

重启ES

sudo -u elk nohup $ES_HOME/bin/elasticsearch >> $ES_HOME/output.log 2>&1 &

创建用户

cd $ES_HOME

bin/elasticsearch-setup-passwords interactive

[root@node01 elasticsearch-7.7.0]# bin/elasticsearch-setup-passwords interactive
future versions of Elasticsearch will require Java 11; your Java version from [/opt/app/jdk1.8.0_181/jre] does not meet this requirement
Initiating the setup of passwords for reserved users elastic,apm_system,kibana,logstash_system,beats_system,remote_monitoring_user.
You will be prompted to enter passwords as the process progresses.
Please confirm that you would like to continue [y/N]y


Enter password for [elastic]: 
Reenter password for [elastic]: 
Enter password for [apm_system]: 
Reenter password for [apm_system]: 
Enter password for [kibana]: 
Reenter password for [kibana]: 
Enter password for [logstash_system]: 
Reenter password for [logstash_system]: 
Enter password for [beats_system]: 
Reenter password for [beats_system]: 
Enter password for [remote_monitoring_user]: 
Reenter password for [remote_monitoring_user]: 
Changed password for user [apm_system]
Changed password for user [kibana]
Changed password for user [logstash_system]
Changed password for user [beats_system]
Changed password for user [remote_monitoring_user]
Changed password for user [elastic]

修改Kibana配置

/opt/app/kibana-7.7.0-linux-x86_64/config/kibana.yml

elasticsearch.username: "kibana"
elasticsearch.password: "123456"

重启kibana

sudo -u elk nohup $KB_HOME/bin/kibana > $KB_HOME/output.log 2>&1 &

验证

访问ES需要密码：

访问kibana需要密码：

在kibana中可以新增用户，对用户和角色进行管理

使用curl命令访问带有安全认证的ES:

curl --user elastic:123456 -X GET http://uathd02:9200/noah/_doc/1?pretty

[tools@uatgw01 ~]$ curl --user elastic:123456 -X GET http://uathd02:9200/noah/_doc/1?pretty
{
  "_index" : "noah",
  "_type" : "_doc",
  "_id" : "1",
  "_version" : 1,
  "_seq_no" : 1,
  "_primary_term" : 1,
  "found" : true,
  "_source" : {
    "name" : "王义凯",
    "age" : 28,
    "email" : "wangyikai@csdn.com",
    "company" : "优快云"
  }
}