elasticsearch安装kibana 组件

admin

elasticsearch安装kibana 组件



; e" P7 ^, R0 @4 z' W. N, W; \下载安装
官网下载地址，选择对应版本的elasticsearch和kibana：https://www.elastic.co/cn/downloads/past-releases#kibana

) ~- d9 b5 C6 D# g
解压：
$ ~/ s/ s$ T' W( C4 Z+ j5 g wget https://artifacts.elastic.co/dow ... linux-x86_64.tar.gz

$ C8 T1 p6 U# P1 R1 L[es@it-elassearch-1 elastic-cluster1]$ tar -zxvf kibana-8.15.3-linux-x86_64.tar.gz

; F1 c3 s+ @5 [5 x$ ~/ j- h进入解压后的目录：
[es@it-elassearch-1 elastic-cluster1]$ cd kibana-8.15.3/
  S% m' p; p6 _; p/ {+ v- K
修改kibana配置文件：
  @( o* Y/ a: |- B, J& L- U4 ~编辑配置文件：[es@it-elassearch-1 kibana-8.15.3]$ vim config/kibana.yml
, ~) L% }( G# l

. S0 x, A" i3 m8 e$ {, o; k设置kibana的访问端口：server.port: 5601
1 t6 T: B6 l, u+ r. R主机所在的IP：server.host: ""
指定连接Elasticsearch的连接地址：elasticsearch.hosts: ["http://IP:端口"]
% m" E- \; o- N% [: F' F
6 C( k3 [- ]: {+ Z9 d! G: M

当前环境的配置信息如下：

& _  b% ~9 Q/ R7 s[es@it-elassearch-1 kibana-8.15.3]$ egrep -v '^$|^#' config/kibana.yml
' K+ w  K3 x: B9 b* D8 [server.port: 5601
server.host: "0.0.0.0"
1 V8 A5 M' m1 J5 kelasticsearch.hosts: ["http://172.24.110.125:9200"]
1 S2 B+ i3 E; Q* t  t( F$ N
6 t8 o8 ^2 B& o$ E; e
, I* ^3 E& G$ e# N( O( q5 b' W4 Dserver.port: 5601
server.host: "0.0.0.0"
& j) u% A, ~* ~; A" w: X- hserver.name: "it-elassearch-1"
- k% b" ^1 P# l( Melasticsearch.hosts: ["http://172.24.110.125:9200"]
) {2 {7 R; C  W( G5 M$ `" ]0 j
/ \4 Q! Q+ w0 z4 Q5 X  Z
server.port: 5601
" w' x! ~  D2 p$ z( u2 y# C; q6 tserver.host: "0.0.0.0"
4 s$ f6 l8 O2 J  c& Uelasticsearch.hosts: ["http://172.24.110.125:9200"]    ##和 elasticsearch 建立联系
: i9 p( I  b. c( Lelasticsearch.username: "kibana"                  ### 需要添加用户
) p! V# [5 c6 D' M( w" z9 o- aelasticsearch.password: "XXXXXXXXX"          ####添加密码
" e; D. ~' z" y) I5 h; \$ I& O" Ekibana.index: ".kibana"    ###在 elasticsearch 中添加.kibana 索引

最终：
9 N0 g( q4 p, X) E/ }
server.port: 5601
server.host: "0.0.0.0"
server.name: "it-elassearch-1"
elasticsearch.hosts: ["http://172.24.110.125:9200"]
; D. l/ x3 f1 W0 d. Qkibana.index: ".kibana"   
elasticsearch.username: "kibana"
elasticsearch.password: "xxxxx"

: n+ `0 j" |9 s2 I# o3 a
0 d/ k! r& f- k9 X7 ^( x- {启动：

[es@it-elassearch-1 kibana-8.15.3]$ bin/kibana --allow-root
2 ?2 h- ?0 d  b0 l" h

4 z$ e8 y, D5 x+ p( [$ D页面访问：
. |- c. C% ~% h. ~9 }8 hhttp://172.24.110.125:5601/



  C# P+ U* W5 ~* q% x4 C- M
9 Z, b& m( @- T! K1 U

" h! e2 V  |9 T8 e' n
8 E9 u/ Q' T* Y+ A4 ?. P

admin

[root@it-elassearch-1 kibana-8.15.3]# bin/kibana --allow-root
$ F- {7 v3 i/ P6 f" \7 k8 uKibana is currently running with legacy OpenSSL providers enabled! For details and instructions on how to disable see https://www.elastic.co/guide/en/ ... ssl-legacy-provider
# f8 f) B- d' E{"log.level":"info","@timestamp":"2024-11-06T03:53:04.520Z","log.logger":"elastic-apm-node","ecs.version":"8.10.0","agentVersion":"4.7.0","env":{"pid":30397,"proctitle":"bin/../node/glibc-217/bin/node","os":"linux 3.10.0-1160.24.1.el7.x86_64","arch":"x64","host":"it-elassearch-1","timezone":"UTC+0800","runtime":"Node.js v20.15.1"},"config":{"active":{"source":"start","value":true},"breakdownMetrics":{"source":"start","value":false},"captureBody":{"source":"start","value":"off","commonName":"capture_body"},"captureHeaders":{"source":"start","value":false},"centralConfig":{"source":"start","value":false},"contextPropagationOnly":{"source":"start","value":true},"environment":{"source":"start","value":"production"},"globalLabels":{"source":"start","value":[["kibana_uuid","6fbb62d2-79e8-4628-9260-b1b2b467192c"],["git_rev","3933429968aafb1ba31319fc38649d0f974044bf"]],"sourceValue":{"kibana_uuid":"6fbb62d2-79e8-4628-9260-b1b2b467192c","git_rev":"3933429968aafb1ba31319fc38649d0f974044bf"}},"logLevel":{"source":"default","value":"info","commonName":"log_level"},"metricsInterval":{"source":"start","value":120,"sourceValue":"120s"},"serverUrl":{"source":"start","value":"https://kibana-cloud-apm.apm.us-east-1.aws.found.io/","commonName":"server_url"},"transactionSampleRate":{"source":"start","value":0.1,"commonName":"transaction_sample_rate"},"captureSpanStackTraces":{"source":"start","sourceValue":false},"secretToken":{"source":"start","value":"[REDACTED]","commonName":"secret_token"},"serviceName":{"source":"start","value":"kibana","commonName":"service_name"},"serviceVersion":{"source":"start","value":"8.15.3","commonName":"service_version"}},"activationMethod":"require","message":"Elastic APM Node.js Agent v4.7.0"}
Native global console methods have been overridden in production environment.
' ~3 u$ I. n/ m[2024-11-06T11:53:06.213+08:00][INFO ][root] Kibana is starting
5 C  z8 V2 W  o" \[2024-11-06T11:53:06.296+08:00][INFO ][node] Kibana process configured with roles: [background_tasks, ui]
[2024-11-06T11:53:15.510+08:00][INFO ][plugins-service] The following plugins are disabled: "cloudChat,cloudExperiments,cloudFullStory,profilingDataAccess,profiling,securitySolutionServerless,serverless,serverlessObservability,serverlessSearch".
. L5 ]0 X6 Y; N. B[2024-11-06T11:53:15.633+08:00][INFO ][http.server.Preboot] http server running at http://0.0.0.0:5601
" m7 F- A9 q# u: K3 x[2024-11-06T11:53:15.825+08:00][INFO ][plugins-system.preboot] Setting up [1] plugins: [interactiveSetup]
, `$ T! }, b/ D: e[2024-11-06T11:53:15.884+08:00][WARN ][config.deprecation] Kibana is configured to authenticate to Elasticsearch with the "kibana" user. Use a service account token instead.
- w2 \1 k. U* r- u3 z[2024-11-06T11:53:15.885+08:00][WARN ][config.deprecation] The default mechanism for Reporting privileges will work differently in future versions, which will affect the behavior of this cluster. Set "xpack.reporting.roles.enabled" to "false" to adopt the future behavior before upgrading.
[2024-11-06T11:53:16.208+08:00][INFO ][plugins-system.standard] Setting up [166] plugins: [devTools,translations,share,searchConnectors,screenshotMode,usageCollection,telemetryCollectionManager,telemetryCollectionXpack,taskManager,kibanaUsageCollection,cloud,newsfeed,savedObjectsFinder,noDataPage,monitoringCollection,licensing,mapsEms,globalSearch,globalSearchProviders,features,guidedOnboarding,banners,licenseApiGuard,customBranding,ftrApis,fieldsMetadata,fieldFormats,expressions,screenshotting,esUiShared,customIntegrations,contentManagement,dataViews,home,searchprofiler,painlessLab,management,spaces,security,telemetry,licenseManagement,snapshotRestore,lists,files,encryptedSavedObjects,entityManager,eventLog,actions,observabilityAIAssistant,investigate,notifications,cloudDataMigration,aiAssistantManagementSelection,advancedSettings,grokdebugger,console,searchNotebooks,searchHomepage,bfetch,data,savedObjectsTagging,savedObjectsManagement,unifiedSearch,navigation,graph,embeddable,uiActionsEnhanced,savedSearch,presentationUtil,expressionShape,expressionRevealImage,expressionRepeatImage,expressionMetric,expressionImage,controls,alerting,logsDataAccess,fileUpload,ingestPipelines,ecsDataQualityDashboard,dataViewFieldEditor,dataViewManagement,charts,watcher,visualizations,visTypeXy,visTypeVislib,visTypeVega,visTypeTimeseries,visTypeTimelion,visTypeTagcloud,visTypeTable,visTypeMetric,visTypeMarkdown,visTypeHeatmap,inputControlVis,expressionTagcloud,expressionPartitionVis,visTypePie,expressionMetricVis,expressionLegacyMetricVis,expressionHeatmap,expressionGauge,visTypeGauge,eventAnnotation,expressionXY,lens,maps,dataVisualizer,dashboard,triggersActionsUi,transform,stackConnectors,searchPlayground,integrationAssistant,stackAlerts,ruleRegistry,cases,timelines,sessionView,kubernetesSecurity,threatIntelligence,metricsDataAccess,logsShared,aiops,discover,reporting,canvas,ml,searchInferenceEndpoints,elasticAssistant,logsExplorer,fleet,osquery,indexManagement,textBasedLanguages,rollup,remoteClusters,crossClusterReplication,indexLifecycleManagement,enterpriseSearch,observabilityAiAssistantManagement,datasetQuality,dataQuality,cloudSecurityPosture,cloudDefend,securitySolution,securitySolutionEss,observability,uptime,synthetics,slo,observabilityLogsExplorer,observabilityOnboarding,observabilityAIAssistantApp,discoverEnhanced,links,dashboardEnhanced,apmDataAccess,infra,upgradeAssistant,monitoring,logstash,apm,ux,assetsDataAccess]
) a& Y5 G. L6 T[2024-11-06T11:53:16.664+08:00][INFO ][plugins.taskManager] TaskManager is identified by the Kibana UUID: 6fbb62d2-79e8-4628-9260-b1b2b467192c
[2024-11-06T11:53:17.258+08:00][INFO ][custom-branding-service] CustomBrandingService registering plugin: customBranding
7 A: J9 W- ^/ C4 \[2024-11-06T11:53:18.053+08:00][WARN ][plugins.screenshotting.config] Chromium sandbox provides an additional layer of protection, but is not supported for Linux CentOS 7.9.2009 OS. Automatically setting 'xpack.screenshotting.browser.chromium.disableSandbox: true'.
[2024-11-06T11:53:18.486+08:00][WARN ][plugins.security.config] Generating a random key for xpack.security.encryptionKey. To prevent sessions from being invalidated on restart, please set xpack.security.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.
[2024-11-06T11:53:18.487+08:00][WARN ][plugins.security.config] Session cookies will be transmitted over insecure connections. This is not recommended.
; r# ]! I" `, y. F$ P+ b[2024-11-06T11:53:18.523+08:00][WARN ][plugins.security.config] Generating a random key for xpack.security.encryptionKey. To prevent sessions from being invalidated on restart, please set xpack.security.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.
0 k* D) h4 e' u) R[2024-11-06T11:53:18.524+08:00][WARN ][plugins.security.config] Session cookies will be transmitted over insecure connections. This is not recommended.
[2024-11-06T11:53:18.719+08:00][WARN ][plugins.encryptedSavedObjects] Saved objects encryption key is not set. This will severely limit Kibana functionality. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.
[2024-11-06T11:53:18.839+08:00][WARN ][plugins.actions] APIs are disabled because the Encrypted Saved Objects plugin is missing encryption key. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.
[2024-11-06T11:53:19.017+08:00][INFO ][plugins.notifications] Email Service Error: Email connector not specified.
& C. C/ R3 ?' O3 k5 }# B[2024-11-06T11:53:19.449+08:00][WARN ][plugins.alerting] APIs are disabled because the Encrypted Saved Objects plugin is missing encryption key. Please set xpack.encryptedSavedObjects.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.
[2024-11-06T11:53:19.450+08:00][INFO ][plugins.alerting] using indexes and aliases for persisting alerts
8 M2 j4 y) [- a[2024-11-06T11:53:21.722+08:00][WARN ][plugins.reporting.config] Generating a random key for xpack.reporting.encryptionKey. To prevent sessions from being invalidated on restart, please set xpack.reporting.encryptionKey in the kibana.yml or use the bin/kibana-encryption-keys command.
0 m) Y" c" o6 w+ _[2024-11-06T11:53:23.565+08:00][INFO ][plugins.cloudSecurityPosture] Registered task successfully [Task: cloud_security_posture-stats_task]
[2024-11-06T11:53:25.328+08:00][INFO ][plugins.securitySolution.endpoint:user-artifact-packager:1.0.0] Registering endpoint:user-artifact-packager task with timeout of [20m], interval of [60s] and policy update batch size of [25]
[2024-11-06T11:53:25.329+08:00][INFO ][plugins.securitySolution.endpoint:complete-external-response-actions] Registering task [endpoint:complete-external-response-actions] with timeout of [5m] and run interval of [60s]
1 M& Y( i& f1 }" V+ z[2024-11-06T11:53:27.231+08:00][INFO ][elasticsearch-service] Successfully connected to Elasticsearch after waiting for 63 milliseconds
[2024-11-06T11:53:27.342+08:00][INFO ][savedobjects-service] Waiting until all Elasticsearch nodes are compatible with Kibana before starting saved objects migrations...
6 v) t& r4 g* n[2024-11-06T11:53:27.343+08:00][INFO ][savedobjects-service] Starting saved objects migrations
[2024-11-06T11:53:27.431+08:00][INFO ][savedobjects-service] [.kibana_alerting_cases] INIT -> CREATE_NEW_TARGET. took: 36ms.
[2024-11-06T11:53:27.437+08:00][INFO ][savedobjects-service] [.kibana_analytics] INIT -> CREATE_NEW_TARGET. took: 51ms.
" p+ `1 l/ `: U% F2 v  r! U[2024-11-06T11:53:27.440+08:00][INFO ][savedobjects-service] [.kibana] INIT -> CREATE_NEW_TARGET. took: 63ms.
" F+ H! w2 O% q" d9 ?) @! ][2024-11-06T11:53:27.444+08:00][INFO ][savedobjects-service] [.kibana_task_manager] INIT -> CREATE_NEW_TARGET. took: 62ms.
[2024-11-06T11:53:27.447+08:00][INFO ][savedobjects-service] [.kibana_security_solution] INIT -> CREATE_NEW_TARGET. took: 56ms.
[2024-11-06T11:53:27.450+08:00][INFO ][savedobjects-service] [.kibana_ingest] INIT -> CREATE_NEW_TARGET. took: 51ms.
[2024-11-06T11:53:29.106+08:00][INFO ][savedobjects-service] [.kibana_alerting_cases] CREATE_NEW_TARGET -> CHECK_VERSION_INDEX_READY_ACTIONS. took: 1675ms.
/ s2 A8 K8 x' E& c6 D2 a4 O9 q[2024-11-06T11:53:29.106+08:00][INFO ][savedobjects-service] [.kibana_alerting_cases] CHECK_VERSION_INDEX_READY_ACTIONS -> MARK_VERSION_INDEX_READY. took: 0ms.
[2024-11-06T11:53:29.110+08:00][INFO ][savedobjects-service] [.kibana_analytics] CREATE_NEW_TARGET -> CHECK_VERSION_INDEX_READY_ACTIONS. took: 1673ms.
[2024-11-06T11:53:29.110+08:00][INFO ][savedobjects-service] [.kibana_analytics] CHECK_VERSION_INDEX_READY_ACTIONS -> MARK_VERSION_INDEX_READY. took: 0ms.
; |% {6 i3 D$ i- e. ?$ g6 s# Y/ m[2024-11-06T11:53:29.113+08:00][INFO ][savedobjects-service] [.kibana_security_solution] CREATE_NEW_TARGET -> CHECK_VERSION_INDEX_READY_ACTIONS. took: 1666ms.
; p+ O, T6 M: R+ M* z- [[2024-11-06T11:53:29.113+08:00][INFO ][savedobjects-service] [.kibana_security_solution] CHECK_VERSION_INDEX_READY_ACTIONS -> MARK_VERSION_INDEX_READY. took: 0ms.
) D. F7 G$ f- Q8 _+ ]% ~8 a/ d[2024-11-06T11:53:29.115+08:00][INFO ][savedobjects-service] [.kibana] CREATE_NEW_TARGET -> CHECK_VERSION_INDEX_READY_ACTIONS. took: 1675ms.
[2024-11-06T11:53:29.116+08:00][INFO ][savedobjects-service] [.kibana] CHECK_VERSION_INDEX_READY_ACTIONS -> MARK_VERSION_INDEX_READY. took: 1ms.
6 f, m3 [1 h8 p+ B$ \$ F[2024-11-06T11:53:29.350+08:00][INFO ][plugins.screenshotting.chromium] Browser executable: /data/elasticsearch/elastic-cluster1/kibana-8.15.3/node_modules/@kbn/screenshotting-plugin/chromium/headless_shell-linux_x64/headless_shell
* A+ Z; K" @: j[2024-11-06T11:53:29.476+08:00][INFO ][savedobjects-service] [.kibana_analytics] MARK_VERSION_INDEX_READY -> DONE. took: 366ms.
[2024-11-06T11:53:29.477+08:00][INFO ][savedobjects-service] [.kibana_analytics] Migration completed after 2091ms
[2024-11-06T11:53:29.478+08:00][INFO ][savedobjects-service] [.kibana_alerting_cases] MARK_VERSION_INDEX_READY -> DONE. took: 372ms.
5 q& C2 O. G, @5 v2 c[2024-11-06T11:53:29.478+08:00][INFO ][savedobjects-service] [.kibana_alerting_cases] Migration completed after 2083ms
[2024-11-06T11:53:29.479+08:00][INFO ][savedobjects-service] [.kibana_security_solution] MARK_VERSION_INDEX_READY -> DONE. took: 366ms.
[2024-11-06T11:53:29.479+08:00][INFO ][savedobjects-service] [.kibana_security_solution] Migration completed after 2088ms
/ s$ S  ?, b3 r4 F[2024-11-06T11:53:29.480+08:00][INFO ][savedobjects-service] [.kibana] MARK_VERSION_INDEX_READY -> DONE. took: 364ms.
[2024-11-06T11:53:29.480+08:00][INFO ][savedobjects-service] [.kibana] Migration completed after 2103ms
[2024-11-06T11:53:29.600+08:00][INFO ][savedobjects-service] [.kibana_ingest] CREATE_NEW_TARGET -> CHECK_VERSION_INDEX_READY_ACTIONS. took: 2150ms.
; d+ T, n/ a9 \/ W. C3 d' @[2024-11-06T11:53:29.600+08:00][INFO ][savedobjects-service] [.kibana_ingest] CHECK_VERSION_INDEX_READY_ACTIONS -> MARK_VERSION_INDEX_READY. took: 0ms.
/ J$ G/ j% ?6 d! Z9 R: s[2024-11-06T11:53:29.602+08:00][INFO ][savedobjects-service] [.kibana_task_manager] CREATE_NEW_TARGET -> CHECK_VERSION_INDEX_READY_ACTIONS. took: 2158ms.
3 P8 C& c% I9 g[2024-11-06T11:53:29.603+08:00][INFO ][savedobjects-service] [.kibana_task_manager] CHECK_VERSION_INDEX_READY_ACTIONS -> MARK_VERSION_INDEX_READY. took: 1ms.
; X4 W$ a- D, I" b4 c( I8 Z[2024-11-06T11:53:29.709+08:00][INFO ][savedobjects-service] [.kibana_ingest] MARK_VERSION_INDEX_READY -> DONE. took: 109ms.
[2024-11-06T11:53:29.710+08:00][INFO ][savedobjects-service] [.kibana_ingest] Migration completed after 2311ms
[2024-11-06T11:53:29.794+08:00][INFO ][savedobjects-service] [.kibana_task_manager] MARK_VERSION_INDEX_READY -> DONE. took: 191ms.
) N- G! n4 G. S5 E( y[2024-11-06T11:53:29.795+08:00][INFO ][savedobjects-service] [.kibana_task_manager] Migration completed after 2413ms
[2024-11-06T11:53:29.806+08:00][INFO ][status.core.elasticsearch] elasticsearch service is now available: You're running Kibana 8.15.3 with some different versions of Elasticsearch. Update Kibana or Elasticsearch to the same version to prevent compatibility issues: v8.15.0 @ 172.24.110.125:9200 (172.24.110.125)
* V; M2 q- E6 d9 D' J[2024-11-06T11:53:29.807+08:00][INFO ][status.core.savedObjects] savedObjects service is now available: SavedObjects service has completed migrations and is available
[2024-11-06T11:53:29.808+08:00][INFO ][plugins-system.preboot] Stopping all plugins.
! S9 J* ?# Z" |[2024-11-06T11:53:29.809+08:00][INFO ][plugins-system.preboot] All plugins stopped.
; L, ~/ s+ H% }) j[2024-11-06T11:53:29.810+08:00][INFO ][plugins-system.standard] Starting [166] plugins: [devTools,translations,share,searchConnectors,screenshotMode,usageCollection,telemetryCollectionManager,telemetryCollectionXpack,taskManager,kibanaUsageCollection,cloud,newsfeed,savedObjectsFinder,noDataPage,monitoringCollection,licensing,mapsEms,globalSearch,globalSearchProviders,features,guidedOnboarding,banners,licenseApiGuard,customBranding,ftrApis,fieldsMetadata,fieldFormats,expressions,screenshotting,esUiShared,customIntegrations,contentManagement,dataViews,home,searchprofiler,painlessLab,management,spaces,security,telemetry,licenseManagement,snapshotRestore,lists,files,encryptedSavedObjects,entityManager,eventLog,actions,observabilityAIAssistant,investigate,notifications,cloudDataMigration,aiAssistantManagementSelection,advancedSettings,grokdebugger,console,searchNotebooks,searchHomepage,bfetch,data,savedObjectsTagging,savedObjectsManagement,unifiedSearch,navigation,graph,embeddable,uiActionsEnhanced,savedSearch,presentationUtil,expressionShape,expressionRevealImage,expressionRepeatImage,expressionMetric,expressionImage,controls,alerting,logsDataAccess,fileUpload,ingestPipelines,ecsDataQualityDashboard,dataViewFieldEditor,dataViewManagement,charts,watcher,visualizations,visTypeXy,visTypeVislib,visTypeVega,visTypeTimeseries,visTypeTimelion,visTypeTagcloud,visTypeTable,visTypeMetric,visTypeMarkdown,visTypeHeatmap,inputControlVis,expressionTagcloud,expressionPartitionVis,visTypePie,expressionMetricVis,expressionLegacyMetricVis,expressionHeatmap,expressionGauge,visTypeGauge,eventAnnotation,expressionXY,lens,maps,dataVisualizer,dashboard,triggersActionsUi,transform,stackConnectors,searchPlayground,integrationAssistant,stackAlerts,ruleRegistry,cases,timelines,sessionView,kubernetesSecurity,threatIntelligence,metricsDataAccess,logsShared,aiops,discover,reporting,canvas,ml,searchInferenceEndpoints,elasticAssistant,logsExplorer,fleet,osquery,indexManagement,textBasedLanguages,rollup,remoteClusters,crossClusterReplication,indexLifecycleManagement,enterpriseSearch,observabilityAiAssistantManagement,datasetQuality,dataQuality,cloudSecurityPosture,cloudDefend,securitySolution,securitySolutionEss,observability,uptime,synthetics,slo,observabilityLogsExplorer,observabilityOnboarding,observabilityAIAssistantApp,discoverEnhanced,links,dashboardEnhanced,apmDataAccess,infra,upgradeAssistant,monitoring,logstash,apm,ux,assetsDataAccess]
[2024-11-06T11:53:29.820+08:00][INFO ][plugins.taskManager.taskClaiming] using task claiming strategy: default
[2024-11-06T11:53:31.124+08:00][INFO ][plugins.fleet] Task Fleet-Usage-Sender-1.1.6 scheduled with interval 1h
% B% Z3 Z6 m% }5 [/ p/ M- d[2024-11-06T11:53:31.125+08:00][INFO ][plugins.fleet.fleet:check-deleted-files-task:1.0.1] Started with interval of [1d] and timeout of [2m]
[2024-11-06T11:53:31.126+08:00][INFO ][plugins.fleet] Task Fleet-Metrics-Task:1.1.1 scheduled with interval 1m
[2024-11-06T11:53:31.161+08:00][INFO ][plugins.infra] Skipping initialization of Profiling endpoints because 'profilingDataAccess' plugin is not available
& d: p! O+ V& {3 {$ ~- y: o' {- B[2024-11-06T11:53:31.166+08:00][INFO ][plugins.monitoring.monitoring] config sourced from: production cluster
; p$ ^  t7 e  c) s[2024-11-06T11:53:31.212+08:00][INFO ][plugins.slo] Installing SLO shared resources
! G8 J* H' P( [) c[2024-11-06T11:53:31.248+08:00][INFO ][plugins.ecsDataQualityDashboard] Installing component template .kibana-data-quality-dashboard-ecs-mappings
' u' O! `+ P! n1 n* d4 n[2024-11-06T11:53:31.251+08:00][INFO ][plugins.ecsDataQualityDashboard] Installing component template .kibana-data-quality-dashboard-results-mappings
[2024-11-06T11:53:31.267+08:00][INFO ][plugins.elasticAssistant.service] Installing component template .kibana-elastic-ai-assistant-component-template-conversations
[2024-11-06T11:53:34.251+08:00][INFO ][http.server.Kibana] http server running at http://0.0.0.0:5601
7 X' F0 A8 F+ ]9 j( ]/ M3 J- e) r$ U( p[2024-11-06T11:53:34.271+08:00][INFO ][plugins.entityManager] Entity manager component template is up to date (use debug logging to see what was installed)
+ \1 }8 O( e- P$ F4 c/ x( J  u[2024-11-06T11:53:34.272+08:00][INFO ][plugins.entityManager] Entity manager component template is up to date (use debug logging to see what was installed)
[2024-11-06T11:53:34.275+08:00][INFO ][plugins.entityManager] Entity manager component template is up to date (use debug logging to see what was installed)
, g3 W+ B) }9 T[2024-11-06T11:53:34.276+08:00][INFO ][plugins.entityManager] Entity manager component template is up to date (use debug logging to see what was installed)
; A6 A* |% G8 W, f+ M. ~' [[2024-11-06T11:53:34.314+08:00][INFO ][plugins.slo] Installing SLO component template [.slo-observability.summary-settings]
! ~4 ?8 o  G; @0 k7 A6 c[2024-11-06T11:53:34.333+08:00][INFO ][plugins.slo] Installing SLO component template [.slo-observability.summary-mappings]
6 m8 c7 I* F3 S, m[2024-11-06T11:53:34.390+08:00][INFO ][plugins.slo] Installing SLO component template [.slo-observability.sli-settings]
# s: y! Z: I. T% m* i$ M$ ]1 x- B[2024-11-06T11:53:34.419+08:00][INFO ][status.plugins.alerting] alerting plugin is now available: Alerting is (probably) ready
[2024-11-06T11:53:34.420+08:00][INFO ][status.plugins.fleet] fleet plugin is now available: Fleet is setting up
. W4 H9 V( N; Y: u4 E  L[2024-11-06T11:53:34.420+08:00][WARN ][status.plugins.taskManager] taskManager plugin is now degraded: Task Manager is unhealthy - Reason: setting HealthStatus.Error because of expired cold timestamps
[2024-11-06T11:53:34.420+08:00][INFO ][status.plugins.licensing] licensing plugin is now available: License fetched
, K) }+ J* b( \5 P( C[2024-11-06T11:53:34.517+08:00][INFO ][plugins.fleet.endpoint.agentPolicyLicenseWatch] Checking agent policies for compliance with the current license.
9 J* O; N' H/ o) X[2024-11-06T11:53:34.519+08:00][INFO ][plugins.monitoring.monitoring.kibana-monitoring] Starting monitoring stats collection
[2024-11-06T11:53:34.529+08:00][WARN ][status] Kibana is now degraded: 0 service(s) and 1 plugin(s) are degraded: taskManager
[2024-11-06T11:53:34.532+08:00][INFO ][plugins.slo] Installing SLO component template [.slo-observability.sli-mappings]
[2024-11-06T11:53:34.956+08:00][INFO ][plugins.telemetry] Telemetry collection is enabled. For more information on telemetry settings, refer to https://www.elastic.co/guide/en/ ... -settings-kbn.html.
/ w- G3 j5 P" l, i2 v[2024-11-06T11:53:35.049+08:00][INFO ][plugins.reporting.store] Creating ILM policy for reporting data stream: kibana-reporting
[2024-11-06T11:53:35.168+08:00][INFO ][plugins.eventLog] Installing index template .kibana-event-log-template
[2024-11-06T11:53:35.290+08:00][INFO ][plugins.fleet] Task Fleet-Usage-Logger-Task scheduled with interval 15m
' m4 Y! s4 y7 j$ Y[2024-11-06T11:53:35.344+08:00][INFO ][plugins.fleet.endpoint.agentPolicyLicenseWatch] All agent policies are compliant, nothing to do!
$ p! L" `4 A* B1 {" }[2024-11-06T11:53:35.400+08:00][INFO ][plugins.fleet] Beginning fleet setup
[2024-11-06T11:53:35.401+08:00][INFO ][plugins.fleet] Cleaning old indices
% E: L0 Z1 P; x7 V4 m1 D& T[2024-11-06T11:53:35.522+08:00][INFO ][plugins.entityManager] Entity manager index template is up to date (use debug logging to see what was installed)
" ~) q6 f4 {" |- c' B. C[2024-11-06T11:53:35.528+08:00][INFO ][plugins.elasticAssistant.service] Installing index template .kibana-elastic-ai-assistant-index-template-conversations
! A$ R$ v/ r; I5 s, A0 i[2024-11-06T11:53:35.532+08:00][INFO ][plugins.ecsDataQualityDashboard] Installing index template .kibana-data-quality-dashboard-results-index-template
[2024-11-06T11:53:35.737+08:00][INFO ][plugins.slo] Installing SLO index template [.slo-observability.sli]
  Q+ R4 N/ \- i  S5 t[2024-11-06T11:53:38.445+08:00][WARN ][plugins.taskManager] Task Manager is unhealthy, the assumedAverageRecurringRequiredThroughputPerMinutePerKibana (0) < capacityPerMinutePerKibana (200)
4 V% w! r" V; e0 C0 {0 o* N[2024-11-06T11:53:38.451+08:00][INFO ][status.plugins.taskManager] taskManager plugin is now available: Task Manager is healthy
[2024-11-06T11:53:38.532+08:00][INFO ][status] Kibana is now available (was degraded)
( X- T% q! [; |) ^% L6 G; n[2024-11-06T11:53:38.612+08:00][INFO ][plugins.fleet.fleet:check-deleted-files-task:1.0.1] [runTask()] started
9 ^; u4 j* f9 O, J[2024-11-06T11:53:38.625+08:00][INFO ][plugins.fleet] Running Fleet Usage telemetry send task
' G2 z9 r; w$ ~1 O6 [& @- \% d[2024-11-06T11:53:38.701+08:00][INFO ][plugins.fleet.fleet:check-deleted-files-task:1.0.1] [runTask()] ended: no files to process
[2024-11-06T11:53:38.764+08:00][INFO ][plugins.elasticAssistant.service] Updating data streams - .kibana-elastic-ai-assistant-conversations-*
7 [, K8 [) y1 C/ L$ d[2024-11-06T11:53:38.767+08:00][INFO ][plugins.ecsDataQualityDashboard] Updating data streams - .kibana-data-quality-dashboard-results-*
! ?5 N) n; C% ~# ]/ v  W3 e[2024-11-06T11:53:38.771+08:00][INFO ][plugins.entityManager] Entity manager index template is up to date (use debug logging to see what was installed)
[2024-11-06T11:53:38.800+08:00][INFO ][plugins.eventLog] Creating datastream .kibana-event-log-ds
- ~4 i6 P; a0 m* \4 G- i" C[2024-11-06T11:53:38.802+08:00][INFO ][plugins.elasticAssistant.service] Installing component template .kibana-elastic-ai-assistant-component-template-knowledge-base
+ I  ]# X! m/ N. J! E+ o+ w9 m[2024-11-06T11:53:38.804+08:00][INFO ][plugins.slo] Installing SLO index template [.slo-observability.summary]
[2024-11-06T11:53:41.562+08:00][INFO ][plugins.fleet] Output secrets storage is disabled as minimum fleet server version has not been met
[2024-11-06T11:53:42.158+08:00][INFO ][plugins.elasticAssistant.service] Installing index template .kibana-elastic-ai-assistant-index-template-knowledge-base
[2024-11-06T11:53:42.776+08:00][INFO ][plugins.elasticAssistant.service] Updating data streams - .kibana-elastic-ai-assistant-knowledge-base-*
8 _% g) ]4 c) W5 ?3 B' {# @- j- {[2024-11-06T11:53:42.792+08:00][ERROR][plugins.elasticAssistant.service] Error initializing AI assistant resources: Platinum, Enterprise or trial license needed
[2024-11-06T11:53:44.841+08:00][ERROR][plugins.taskManager] Task SLO:ORPHAN_SUMMARIES-CLEANUP-TASK "SLO:ORPHAN_SUMMARIES-CLEANUP-TASK:1.0.0" failed: ResponseError: search_phase_execution_exception
5 l" l5 U! z2 l. C) B. D        Root causes:
                no_shard_available_action_exception: [it-elassearch-1][172.24.110.125:9300][indices:data/read/search[phase/query]]
[2024-11-06T11:53:48.203+08:00][INFO ][plugins.fleet] Fleet Usage: {"agents_enabled":true,"agents":{"total_enrolled":0,"healthy":0,"unhealthy":0,"offline":0,"inactive":0,"unenrolled":0,"total_all_statuses":0,"updating":0},"fleet_server":{"total_all_statuses":0,"total_enrolled":0,"healthy":0,"unhealthy":0,"offline":0,"updating":0,"inactive":0,"unenrolled":0,"num_host_urls":0},"license_issued_to":"essearch"}
[2024-11-06T11:53:49.035+08:00][INFO ][plugins.slo] Installing SLO ingest pipeline [.slo-observability.sli.pipeline-v3.3]
3 l5 o& [/ ~: D7 R( x. {3 d6 a[2024-11-06T11:53:49.299+08:00][INFO ][plugins.reporting.store] Linking ILM policy to reporting data stream: .kibana-reporting, component template: kibana-reporting@custom
, W- y- `3 U' r) O* @9 H[2024-11-06T11:53:56.034+08:00][WARN ][plugins.fleet] xpack.encryptedSavedObjects.encryptionKey is not configured, private key passphrase is being stored in plain text
[2024-11-06T11:53:57.072+08:00][INFO ][plugins.fleet] Fleet setup completed
[2024-11-06T11:53:57.125+08:00][WARN ][plugins.fleet] xpack.encryptedSavedObjects.encryptionKey is not configured, agent uninstall tokens are being stored in plain text
+ }+ b: R+ Q, M" j4 S3 Y* ^+ e[2024-11-06T11:53:57.134+08:00][INFO ][plugins.securitySolution] Dependent plugin setup complete - Starting ManifestTask
/ O8 q+ t; k* I, V- C9 m[2024-11-06T11:53:57.211+08:00][INFO ][plugins.securitySolution.endpoint.policyProtections] App feature [endpoint_policy_protections] is enabled. Nothing to do!
" u  ]6 `, W! {( x[2024-11-06T11:53:57.212+08:00][INFO ][plugins.securitySolution.endpoint.policyProtections] App feature [endpoint_protection_updates] is enabled. Nothing to do!
% E; m5 O; K9 o[2024-11-06T11:53:57.214+08:00][INFO ][plugins.securitySolution.endpoint.agentPolicyFeatures] App feature [endpoint_agent_tamper_protection] is enabled. Nothing to do!
[2024-11-06T11:53:57.310+08:00][INFO ][plugins.observabilityAIAssistant.service] Successfully set up index assets
, Z( m: V8 X7 o% h- j8 |3 }. u[2024-11-06T11:53:58.030+08:00][INFO ][plugins.fleet] Install - Starting installation of synthetics@1.2.2 from bundled
0 p) _: p" V: b& t- K1 ]  ^. k[2024-11-06T11:53:58.633+08:00][INFO ][plugins.securitySolution.endpoint:metadata-check-transforms-task:0.0.1] no endpoint installation found
# z3 `1 N, ^* Z  d  [[2024-11-06T11:54:02.127+08:00][INFO ][plugins.synthetics] Installed synthetics index templates
* I/ ]0 Z' I3 I6 `7 e

admin

2 ?/ K& f; M# \+ ~  g. B7 d0 I8 ~http://172.24.110.125:5601/app/dev_tools#/console

. n. ^8 G2 g2 E( V- W( G) y# Perform a search in my-index
GET /my-index/_search?q="rocky mountain"
. M6 h0 {9 y2 d* G

1 C8 h+ x; N- F$ f; |/ K+ \- W: ^{
( q4 r3 d# C# c! J+ [2 I3 P  "took": 7,
3 C, N, I" R& R! s  u  "timed_out": false,
6 I9 X: M) _: D" t: m  "_shards": {
  y3 i7 w. ^# S9 ~    "total": 1,
    "successful": 1,
5 W) B) B! r( A    "skipped": 0,
. G8 J. A, w3 K    "failed": 0
  },
  "hits": {
    "total": {
      "value": 1,
      "relation": "eq"
( S( a2 \5 H: ?- V2 H. D    },
: x0 |6 _& a- R8 o5 h* v# @/ `    "max_score": 0.5753642,
    "hits": [
& m5 ~4 ?1 S5 P. ?1 w5 _      {
) z6 W* @4 i; F! ~+ j' b        "_index": "my-index",
, ]. Z# s1 m  L& n  F' F* J/ e        "_id": "Ivl9lZMBYd-SDpFsSR3q",
, v$ I% Q5 a# ^+ i+ Y8 z        "_score": 0.5753642,
1 N) V# |( ]5 Y7 r  |        "_source": {
          "id": "park_rocky-mountain",
          "title": "Rocky Mountain",
+ G* Y4 o* f8 i- A, ?5 ?! @: Z* T: S, V          "description": "Bisected north to south by the Continental Divide, this portion of the Rockies has ecosystems varying from over 150 riparian lakes to montane and subalpine forests to treeless alpine tundra."
        }
      }
    ]
  }
}

; G& ~* Z0 A/ m2 K* m
' P$ e% F, z, c. U9 B0 j获取index 索引：
GET _cat/indices

/ G% r! f* X) O2 G  c7 sgreen open controller_consoleauth-7.10.1-2024.12.04                           SMGEL2IORs6hZ7Yc95bHcw 1 1      6 0  38.7kb  19.3kb  19.3kb
  M# K8 C  x5 n$ x: V8 mgreen open controller_openvswitch-agent-7.10.1-2024.11.20                     Q48wiIFeQreztKN2WXKvhw 1 1      3 0  61.7kb  30.8kb  30.8kb
green open controller_consoleauth-error-7.10.1-2024.11.30                     xcSQssgVS6i_w3scrsglRA 1 1      1 0  28.6kb  14.3kb  14.3kb
green open my-index                                                           vK80l7QKQVid00-6PxtWwA 1 1      1 0  14.8kb   7.4kb   7.4kb
green open controller_openvswitch-agent-7.10.1-2024.11.27                     3BPIE0SLRIaZee9bG-ojkA 1 1      3 0  87.8kb  43.9kb  43.9kb
green open controller_openvswitch-agent-7.10.1-2024.11.28                     u5r2pS_7Tm-mVlOb6xkkpg 1 1     59 0 109.1kb  54.5kb  54.5kb
6 W  a% R# o+ t. jgreen open .internal.alerts-ml.anomaly-detection.alerts-default-000001        SMu-3HawRpCmbbC_68_9_w 1 1      0 0    498b    249b    249b
, z2 r) S  X0 `& agreen open .internal.alerts-default.alerts-default-000001                     3datPO8NTr69t1tx3Zi8xg 1 1      0 0    498b    249b    249b
green open controller_cert-7.10.1-2024.11.20                                  DAMugYjFRk-KbuTHRZ4QuA 1 1     15 0   104kb  51.9kb  51.9kb
; N0 T0 l" F) R8 e# `. _green open controller_cert-7.10.1-2024.11.26                                  wdlI7-TYRhKE-j7du7kXvA 1 1      1 0  28.2kb  14.1kb  14.1kb

状态：
) B6 V4 B5 j; s0 K& ?GET _cat/health
1733381035 06:43:55 elasticsearch green 2 2 322 161 0 0 0 0 - 100.0%
  m: U: D. _0 \$ w2 u! p8 C. h


/ V: ^/ C1 U# w$ |# r
/ Y" a% d9 U! r2 [0 Y
GET _cat/allocation
6 K+ P' r' ^+ u$ `; E5 Q0 s2 t' }
& m) z* J5 R3 r" D% n3 w161 0 0.0 1.3gb 1.3gb 13.5gb 486.1gb 499.7gb 2 172.24.110.125 172.24.110.125 it-elassearch-1 cdfhilmrstw
2 u( h. h7 Y, z" q2 _/ p9 e161 0 0.0 1.3gb 1.3gb 13.9gb 485.7gb 499.7gb 2 172.24.110.127 172.24.110.127 it-elassearch-2 cdfhilmrstw
% _& Y- m3 D! I# U3 D4 Y, ^( ]
$ n* ~& @) M" r2 c9 W- K. S: A
& d1 ?! ^- m( g
5 A) c5 k& X3 R# i% c$ I2 p
4 Z( x' W7 X! {" ZGET /_cat/indices?v
7 T6 ], K9 S! W; R" M$ g' X0 `
4 G8 K4 G4 I* Vhealth status index                                                              uuid                   pri rep docs.count docs.deleted store.size pri.store.size dataset.size
7 s( L0 K1 ~! l0 a3 ngreen  open   controller_consoleauth-7.10.1-2024.12.04                           SMGEL2IORs6hZ7Yc95bHcw   1   1          6            0     38.7kb         19.3kb       19.3kb
green  open   controller_openvswitch-agent-7.10.1-2024.11.20                     Q48wiIFeQreztKN2WXKvhw   1   1          3            0     61.7kb         30.8kb       30.8kb
# l! n: X. A( Z( }green  open   controller_consoleauth-error-7.10.1-2024.11.30                     xcSQssgVS6i_w3scrsglRA   1   1

4 u7 S) G! ?2 u' l. g9 h

4 }3 o6 O- d# ~GET /_cat/health?v

epoch      timestamp cluster       status node.total node.data shards pri relo init unassign pending_tasks max_task_wait_time active_shards_percent
* g3 q6 ^- ~0 s. g% Q$ I1733381123 06:45:23  elasticsearch green           2         2    322 161    0    0        0             0                  -                100.0%

! l9 @" t6 W2 M5 h

+ P/ j, x  @0 p5 a. a
4 h$ a9 _  l3 B1 S' L2 mGET _cat/nodes?v
! D) A6 A4 F! ]4 ]2 B) H, H

5 u* t$ l8 C2 U1 u  e% bip             heap.percent ram.percent cpu load_1m load_5m load_15m node.role   master name
172.24.110.125            9          98   2    0.17    0.15     0.14 cdfhilmrstw -      it-elassearch-1
172.24.110.127           60          98   2    0.03    0.09     0.13 cdfhilmrstw *      it-elassearch-2
1 O: q2 J& K) ^. P8 i9 b

9 C' o6 M0 }9 }4 W