# ES集群

## 机器准备

| 节点名称 | 主机名 | IP地址 |
| :--- | :-- | :-- |
| 节点1 | centos8 | 192.168.195.105 |
| 节点2 | centos8-1 | 192.168.195.106 |
| 节点3 | centos8-2 | 192.168.195.107 |

三个节点分别执行
```bash
# 修改各自的主机名
sudo hostnamectl set-hostname centos8
sudo hostnamectl set-hostname centos8-1
sudo hostnamectl set-hostname centos8-2

# 修改hosts文件，每台加入以下全部内容
cat >> /etc/hosts <<EOF
192.168.195.105   centos8
192.168.195.106   centos8-1
192.168.195.107   centos8-2
EOF

# 关闭防火墙和selinux
sudo systemctl stop firewalld
sudo systemctl disable firewalld
sudo sed -i 's/SELINUX=enforcing/SELINUX=disabled/' /etc/selinux/config
sudo setenforce 0
```

## 集群搭建

1.安装ES
[安装参考](./ES安装.md)

2.配置文件修改
```bash
#节点1上
vi  /etc/elasticsearch/elasticsearch.yml #改为如下
cluster.name: centos8-es
node.name: centos8
path.data: /var/lib/elasticsearch
path.logs: /var/log/elasticsearch
network.host: 192.168.222.101
http.port: 9200
discovery.seed_hosts: ["192.168.222.101", "192.168.222.102", "192.168.222.103"]
xpack.security.enabled: true
xpack.security.enrollment.enabled: true
xpack.security.http.ssl:
  enabled: false
  keystore.path: certs/http.p12
xpack.security.transport.ssl:
  enabled: true
  verification_mode: certificate
  keystore.path: certs/transport.p12
  truststore.path: certs/transport.p12
cluster.initial_master_nodes: ["centos8", "centos8-1", "centos8-2"]
http.host: 0.0.0.0

#节点2上
vi  /etc/elasticsearch/elasticsearch.yml #改为如下
cluster.name: centos8-es
node.name: centos8-1
path.data: /var/lib/elasticsearch
path.logs: /var/log/elasticsearch
network.host: 192.168.222.102
http.port: 9200
discovery.seed_hosts: ["192.168.222.101", "192.168.222.102", "192.168.222.103"]
xpack.security.enabled: true
xpack.security.enrollment.enabled: true
xpack.security.http.ssl:
  enabled: false
  keystore.path: certs/http.p12
xpack.security.transport.ssl:
  enabled: true
  verification_mode: certificate
  keystore.path: certs/transport.p12
  truststore.path: certs/transport.p12
cluster.initial_master_nodes: ["centos8", "centos8-1", "centos8-2"]
http.host: 0.0.0.0

#节点3上
vi  /etc/elasticsearch/elasticsearch.yml #改为如下
cluster.name: centos8-es
node.name: centos8-2
path.data: /var/lib/elasticsearch
path.logs: /var/log/elasticsearch
network.host: 192.168.222.103
http.port: 9200
discovery.seed_hosts: ["192.168.222.101", "192.168.222.102", "192.168.222.103"]
xpack.security.enabled: true
xpack.security.enrollment.enabled: true
xpack.security.http.ssl:
  enabled: false
  keystore.path: certs/http.p12
xpack.security.transport.ssl:
  enabled: true
  verification_mode: certificate
  keystore.path: certs/transport.p12
  truststore.path: certs/transport.p12
cluster.initial_master_nodes: ["centos8", "centos8-1", "centos8-2"]
http.host: 0.0.0.0
```

3.同步证书
节点1上操作  将第一台机器上的证书：/etc/elasticsearch/certs/*.p12 以及 keystore文件/etc/elasticsearch/elasticsearch.keystore同步到另外两台
```bash
scp -r /etc/elasticsearch/certs/*  centos8-1:/etc/elasticsearch/certs/
scp -r /etc/elasticsearch/certs/*  centos8-2:/etc/elasticsearch/certs/
scp /etc/elasticsearch/elasticsearch.keystore  centos8-1:/etc/elasticsearch/
scp /etc/elasticsearch/elasticsearch.keystore  centos8-2:/etc/elasticsearch/
```
4.启动服务（三台都操作）
```bash
systemctl start elasticsearch
systemctl enable elasticsearch
```
 - 集群log位于 /var/log/elasticsearch/集群名字.log 下
5.设置密码（第一台上）
```bash
/usr/share/elasticsearch/bin/elasticsearch-reset-password -u elastic
```